Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234352e302f32342d3234203d3e20323632323533.roa
File:                     3138312e3232342e3234352e302f32342d3234203d3e20323632323533.roa (raw, json)
Hash identifier:          E5dQtrOsY0sPzNsGvydIhTk0RFhsHW/0AW78We30wI8=
Subject key identifier:   2F:18:D4:D6:02:DE:02:6A:5F:EE:3B:BA:A1:2A:6A:97:49:B6:F4:5A
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       3B5CF3866DBF23EF982C1C02D1CCB8B41F072538
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234352e302f32342d3234203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:37 +0000
ROA not before:           Tue 04 Feb 2025 18:44:37 +0000
ROA not after:            Tue 03 Feb 2026 18:49:37 +0000
asID:                     262253
IP address blocks:        181.224.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5c:f3:86:6d:bf:23:ef:98:2c:1c:02:d1:cc:b8:b4:1f:07:25:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:37 2025 GMT
            Not After : Feb  3 18:49:37 2026 GMT
        Subject: CN=2F18D4D602DE026A5FEE3BBAA12A6A9749B6F45A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:66:4f:a3:58:58:1d:56:b6:1b:3c:98:1b:
                    cc:39:14:dc:8c:ad:c0:7a:38:fb:53:0f:06:86:ed:
                    6d:2f:f0:2b:2b:34:e3:9c:c1:7f:20:99:57:ef:b5:
                    6e:2c:95:44:a6:13:2d:0a:eb:df:99:13:d6:8c:68:
                    7a:96:12:64:51:40:ec:d2:10:a5:2f:12:ba:ff:7f:
                    99:86:4c:c5:4d:f3:cb:06:e0:98:91:26:33:a2:cc:
                    a3:5b:3c:8d:71:b0:06:d9:fa:90:e8:49:14:ee:45:
                    d9:0d:8b:cd:a7:f5:73:ef:c6:52:fd:fa:b1:df:f9:
                    5b:08:e2:b2:de:b8:6b:b4:67:30:9c:bc:54:39:2b:
                    16:3d:8d:f7:58:ac:7e:b0:56:53:b6:18:82:12:0c:
                    3d:c4:dc:63:fa:e8:ff:b1:b4:7d:d2:3d:33:23:51:
                    52:fc:04:f1:59:40:67:94:34:f4:5f:5a:f1:2a:4c:
                    32:90:c8:9f:ae:d1:1b:9f:4c:da:fa:15:30:62:6d:
                    49:9e:97:84:04:75:86:24:aa:5c:79:bc:30:85:dd:
                    44:04:ff:2f:ad:7b:1c:ef:68:fb:49:db:56:22:8b:
                    52:9d:c0:63:74:69:94:ff:a9:ca:03:8b:07:ba:10:
                    dd:44:85:ff:59:e8:04:ce:4b:ea:c9:60:23:a3:c4:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:D4:D6:02:DE:02:6A:5F:EE:3B:BA:A1:2A:6A:97:49:B6:F4:5A
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/3138312e3232342e3234352e302f32342d3234203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:27:9e:57:a4:e6:9f:a1:c2:be:8e:47:b3:38:d8:57:0d:98:
         22:d9:be:35:9d:85:e4:93:69:c6:73:b9:00:b1:75:6e:be:ab:
         38:ed:21:33:28:4a:0d:da:2b:f9:36:bd:f6:24:0d:76:47:8c:
         29:42:5a:91:ee:68:11:aa:a4:1e:b7:18:27:9e:8b:cf:0f:bf:
         2d:ff:92:08:84:17:1f:a8:ec:fa:4e:11:73:01:67:7e:ea:be:
         82:a4:c7:8f:8c:db:1b:af:31:c8:ae:e4:4d:42:3e:36:de:e0:
         c2:2b:be:61:df:cf:0d:de:89:26:68:a6:cb:99:b3:a5:5b:6a:
         d7:1f:27:56:7e:05:2f:32:55:25:64:25:91:87:be:67:a8:29:
         a1:6c:1f:d5:15:5f:26:0e:a0:4d:bf:69:96:f8:ee:53:74:67:
         be:6f:c8:48:99:35:6b:49:0b:b1:3f:e2:43:3c:88:95:ee:2d:
         32:92:7a:c9:77:fa:7f:52:24:98:fe:32:29:bc:b9:4d:e7:72:
         99:c2:91:43:cc:da:39:1d:3c:8a:7f:aa:4b:fa:8d:19:ed:9a:
         20:a7:4c:d6:c5:bb:eb:06:e5:8c:dc:9f:a4:95:51:58:d4:a4:
         dd:a3:cd:d7:e8:19:22:9d:38:da:1c:f6:c4:34:7f:89:7d:3b:
         8b:53:a9:fe
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUO1zzhm2/I++YLBwC0cy4tB8HJTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcyRjAxMTg3OTZCMDk3NURDRDFCODIwQjM0MzUyMzcz
RkMwOEY2NTAeFw0yNTAyMDQxODQ0MzdaFw0yNjAyMDMxODQ5MzdaMDMxMTAvBgNV
BAMTKDJGMThENEQ2MDJERTAyNkE1RkVFM0JCQUExMkE2QTk3NDlCNkY0NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdX2ZPo1hYHVa2GzyYG8w5FNyM
rcB6OPtTDwaG7W0v8CsrNOOcwX8gmVfvtW4slUSmEy0K69+ZE9aMaHqWEmRRQOzS
EKUvErr/f5mGTMVN88sG4JiRJjOizKNbPI1xsAbZ+pDoSRTuRdkNi82n9XPvxlL9
+rHf+VsI4rLeuGu0ZzCcvFQ5KxY9jfdYrH6wVlO2GIISDD3E3GP66P+xtH3SPTMj
UVL8BPFZQGeUNPRfWvEqTDKQyJ+u0RufTNr6FTBibUmel4QEdYYkqlx5vDCF3UQE
/y+texzvaPtJ21Yii1KdwGN0aZT/qcoDiwe6EN1Ehf9Z6ATOS+rJYCOjxErBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULxjU1gLeAmpf7ju6oSpql0m29FowHwYDVR0j
BBgwFoAUBy8BGHlrCXXc0bggs0NSNz/Aj2UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNTc5OEUyRTBBMDQxNTYyNzlCMkQ3NEJBODQwOTRBQTcy
MUY3OUFDOTA3QkQ0NzMwREREM0UwMjMxNUQ4Nzk0LzAvMDcyRjAxMTg3OTZCMDk3
NURDRDFCODIwQjM0MzUyMzczRkMwOEY2NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzJGMDExODc5NkIwOTc1RENE
MUI4MjBCMzQzNTIzNzNGQzA4RjY1LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTU3OThFMkUwQTA0MTU2Mjc5QjJENzRCQTg0MDk0QUE3MjFGNzlBQzkw
N0JENDczMERERDNFMDIzMTVEODc5NC8wLzMxMzgzMTJlMzIzMjM0MmUzMjM0MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1
4PUwDQYJKoZIhvcNAQELBQADggEBAJQnnlek5p+hwr6OR7M42FcNmCLZvjWdheST
acZzuQCxdW6+qzjtITMoSg3aK/k2vfYkDXZHjClCWpHuaBGqpB63GCeei88Pvy3/
kgiEFx+o7PpOEXMBZ37qvoKkx4+M2xuvMciu5E1CPjbe4MIrvmHfzw3eiSZopsuZ
s6VbatcfJ1Z+BS8yVSVkJZGHvmeoKaFsH9UVXyYOoE2/aZb47lN0Z75vyEiZNWtJ
C7E/4kM8iJXuLTKSesl3+n9SJJj+Mim8uU3ncpnCkUPM2jkdPIp/qkv6jRntmiCn
TNbFu+sG5Yzcn6SVUVjUpN2jzdfoGSKdONoc9sQ0f4l9O4tTqf4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:04:58 2025 by rpki-client