Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS27757.roa
File:                     AS27757.roa (raw, json)
Hash identifier:          y50Zhn2V8pyDCoVCKYYa5Ma1K8W27KoUifsyI7dr6fg=
Subject key identifier:   05:5B:BF:60:F1:2A:76:E6:B7:20:E0:10:78:4A:76:27:53:A8:DB:8C
Certificate issuer:       /CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
Certificate serial:       54F96C057A102A45726F14BEB07A2C517C76EDDB
Authority key identifier: 72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS27757.roa
Signing time:             Tue 04 Feb 2025 18:07:29 +0000
ROA not before:           Tue 04 Feb 2025 18:02:29 +0000
ROA not after:            Tue 03 Feb 2026 18:07:29 +0000
asID:                     27757
IP address blocks:        181.188.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:6c:05:7a:10:2a:45:72:6f:14:be:b0:7a:2c:51:7c:76:ed:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725E298CCA0B840DB726F60EED140C37FDB23BD6
        Validity
            Not Before: Feb  4 18:02:29 2025 GMT
            Not After : Feb  3 18:07:29 2026 GMT
        Subject: CN=055BBF60F12A76E6B720E010784A762753A8DB8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:91:69:9c:54:90:85:2c:f4:d9:e7:21:91:
                    e5:40:c5:07:06:8b:de:05:8f:31:57:35:dd:84:14:
                    b6:b8:b2:d8:96:27:69:1e:fb:5a:ab:03:4e:1a:74:
                    54:07:42:8d:a7:90:77:99:57:ee:71:74:35:a0:1a:
                    c6:4c:9a:fa:bc:dd:d4:13:88:60:2f:fd:c2:ee:e9:
                    21:fa:c3:4d:99:05:07:67:42:e2:6d:4c:16:70:bf:
                    7b:6c:94:b6:54:fb:cf:eb:32:ab:b8:dd:6d:53:57:
                    7a:a7:a3:51:12:b7:44:37:64:2e:1e:82:3e:af:ff:
                    5d:0f:c0:40:b4:0a:10:a2:eb:27:0e:00:81:bb:42:
                    2a:54:a1:ab:ed:b1:08:e1:0c:14:16:05:c9:ab:2c:
                    4e:f1:90:14:e2:2a:c8:c4:7b:2c:c8:b2:10:0d:99:
                    e6:47:be:29:df:fc:c4:2b:65:d2:d0:5c:30:28:a4:
                    5a:4b:a5:99:ea:d6:cd:79:30:aa:f0:d2:0a:ae:a9:
                    31:df:2a:12:d7:3f:61:b6:22:37:09:58:99:17:e3:
                    68:af:48:cb:e6:2c:29:71:fb:3c:a6:76:a2:d2:ab:
                    e9:ff:29:b3:d4:27:7d:95:75:f6:93:68:c1:5c:47:
                    60:7b:be:f7:94:70:4d:c0:9c:06:58:f3:8b:b8:a3:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5B:BF:60:F1:2A:76:E6:B7:20:E0:10:78:4A:76:27:53:A8:DB:8C
            X509v3 Authority Key Identifier:
                keyid:72:5E:29:8C:CA:0B:84:0D:B7:26:F6:0E:ED:14:0C:37:FD:B2:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/725E298CCA0B840DB726F60EED140C37FDB23BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B07A4CF9C093D46B15E6B1B09954FE9C8276009074D03772E45261D769271AC/0/AS27757.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:7d:6c:dd:83:54:46:fb:32:3f:46:21:97:64:ce:1a:49:a0:
         77:cf:ce:a9:8e:14:ef:55:50:2f:de:24:4d:23:be:06:75:49:
         92:11:3c:d2:a9:74:35:95:17:73:f9:c6:4d:dd:20:c0:a7:3d:
         95:29:4c:77:c5:8f:27:59:19:f4:e6:01:2c:96:0b:cd:c7:f9:
         a6:71:be:0f:32:44:4e:27:e7:61:96:55:4e:dc:ee:d6:1e:05:
         34:4e:bb:62:9b:5a:2e:cd:0b:a9:0d:74:6b:e2:d7:f3:f9:23:
         b2:fd:bf:3d:52:df:24:aa:8a:42:1f:c4:cb:b4:3b:50:aa:62:
         01:d8:f8:bf:f7:f5:88:fc:c3:9d:a2:9d:44:c0:c4:9d:d7:30:
         a5:24:38:ee:aa:44:d0:4a:cd:72:ba:51:46:4d:ae:84:ea:8b:
         c0:26:5b:06:5b:b2:df:c8:11:05:6d:c8:a3:a9:95:4b:df:e7:
         15:47:f2:99:7c:70:12:b8:a0:b4:f1:47:86:d0:29:c7:2f:59:
         2b:0a:6e:66:13:4c:2c:63:1a:1e:e6:3e:5b:ec:8f:e8:6b:8f:
         33:a7:ef:b4:69:eb:c5:77:32:bd:42:c1:59:a2:5e:60:c4:c4:
         f3:ad:0d:d4:e0:88:15:47:8c:fb:12:c8:fc:ed:2e:b5:6d:9f:
         0c:0a:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:40 2025 by rpki-client