Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32332d3233203d3e20323732303939.roa
File:                     3138312e3233332e3130302e302f32332d3233203d3e20323732303939.roa (raw, json)
Hash identifier:          IdjqP6rIIKpwp0Pkyk2dbhRU4adFp4yx1L+wGaftVyU=
Subject key identifier:   F2:3F:79:84:22:20:BC:E1:FC:B4:3A:E3:21:31:BE:9B:17:44:24:C0
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       0E768DB05D65B8D6F61DC29456E7D31C146B1803
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32332d3233203d3e20323732303939.roa
Signing time:             Tue 04 Feb 2025 19:59:25 +0000
ROA not before:           Tue 04 Feb 2025 19:54:25 +0000
ROA not after:            Tue 03 Feb 2026 19:59:25 +0000
asID:                     272099
IP address blocks:        181.233.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:76:8d:b0:5d:65:b8:d6:f6:1d:c2:94:56:e7:d3:1c:14:6b:18:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Feb  4 19:54:25 2025 GMT
            Not After : Feb  3 19:59:25 2026 GMT
        Subject: CN=F23F79842220BCE1FCB43AE32131BE9B174424C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:72:e9:e5:18:70:bf:29:12:4f:32:34:f4:38:
                    9f:e4:e1:6c:a2:1c:0c:bc:ce:e1:55:3b:48:f3:2c:
                    60:b5:ad:71:1d:58:15:6f:fc:eb:3f:30:9b:df:60:
                    3f:34:61:bf:59:7f:60:3d:f9:8c:82:c9:42:2f:1d:
                    55:35:d2:94:99:45:2b:a3:10:1c:88:cf:db:e6:60:
                    a8:1c:5a:0c:90:b2:fe:c3:49:e1:04:21:d6:b8:21:
                    e2:f5:cb:e7:50:c3:20:42:c3:d5:6e:6c:3f:9f:bd:
                    32:ce:8a:ac:1c:07:f4:a1:5d:c9:49:90:ae:05:61:
                    6d:34:a0:0e:fd:ee:25:21:18:24:93:d5:5c:14:e4:
                    e4:8d:59:8b:33:28:0e:cb:bb:0e:08:ea:01:e7:4c:
                    37:7d:f0:56:4a:7d:da:ec:e1:7b:ca:c2:be:73:79:
                    6d:ee:c3:d6:15:68:a9:07:14:a8:12:f9:63:18:3e:
                    0a:89:03:6c:f6:ed:03:36:6f:ad:b0:49:20:c1:94:
                    2a:06:1a:8c:65:79:45:49:52:1e:13:79:d0:93:c9:
                    44:8f:ef:77:83:96:9b:dc:76:05:ef:69:63:01:f5:
                    a2:03:5d:08:fd:17:be:dc:48:e6:7b:9f:82:c0:d5:
                    e8:d3:71:40:03:c4:c8:10:31:b7:25:cc:c1:74:7e:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3F:79:84:22:20:BC:E1:FC:B4:3A:E3:21:31:BE:9B:17:44:24:C0
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130302e302f32332d3233203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:ba:a8:88:d4:06:3c:33:6d:5f:fd:17:dd:b3:75:73:d2:
         8f:dc:00:01:c4:36:79:b3:7b:09:ae:ba:c3:d1:ee:ed:42:c5:
         1c:37:55:d1:00:41:70:98:0f:83:5a:12:68:42:c8:be:e0:e8:
         de:43:d1:90:82:bd:d9:56:08:60:4c:e0:6b:6c:bf:f6:e1:13:
         d8:57:5f:c3:40:22:14:0c:0f:29:cc:89:39:a7:14:01:70:d7:
         c6:95:fa:b1:ac:08:ac:46:68:b0:7a:05:c4:03:ec:69:e7:dc:
         1e:eb:04:bd:58:81:71:60:4b:ec:59:2e:0a:43:83:13:8a:a6:
         de:8b:06:62:28:c0:57:e8:6c:9d:0f:18:b1:73:36:89:05:95:
         12:4f:20:5e:25:c5:d0:e8:d5:51:c1:14:48:e9:b2:d0:8d:eb:
         42:75:01:31:65:27:a6:a0:65:13:4d:d3:89:03:1f:d5:82:e0:
         bd:97:f8:9e:89:9c:dc:30:cf:df:0d:13:cc:f7:66:b8:b2:5e:
         f1:ee:18:77:70:86:40:a2:70:1c:6b:77:c2:d1:5c:48:f8:1d:
         4d:9b:a0:3a:12:f9:2a:ca:5d:6a:06:2e:85:f5:f6:23:de:a6:
         36:c7:9e:73:e7:c0:ae:b6:3c:ba:f3:0d:f8:c6:32:bb:f6:1a:
         45:39:54:cd
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDnaNsF1luNb2HcKUVufTHBRrGAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTEzQTFGQjY4NTg0MTVENTE1NUFERDc4NkZERjIxNDQw
OEFBNTczMDAeFw0yNTAyMDQxOTU0MjVaFw0yNjAyMDMxOTU5MjVaMDMxMTAvBgNV
BAMTKEYyM0Y3OTg0MjIyMEJDRTFGQ0I0M0FFMzIxMzFCRTlCMTc0NDI0QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cunlGHC/KRJPMjT0OJ/k4Wyi
HAy8zuFVO0jzLGC1rXEdWBVv/Os/MJvfYD80Yb9Zf2A9+YyCyUIvHVU10pSZRSuj
EByIz9vmYKgcWgyQsv7DSeEEIda4IeL1y+dQwyBCw9VubD+fvTLOiqwcB/ShXclJ
kK4FYW00oA797iUhGCST1VwU5OSNWYszKA7Luw4I6gHnTDd98FZKfdrs4XvKwr5z
eW3uw9YVaKkHFKgS+WMYPgqJA2z27QM2b62wSSDBlCoGGoxleUVJUh4TedCTyUSP
73eDlpvcdgXvaWMB9aIDXQj9F77cSOZ7n4LA1ejTcUADxMgQMbclzMF0fmkPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU8j95hCIgvOH8tDrjITG+mxdEJMAwHwYDVR0j
BBgwFoAUEToftoWEFdUVWt14b98hRAiqVzAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzQzRUVCODg4QjFBNjREM0Q5RTE1RDgyQ0Y0OTRCQUVB
QjA2MEIyOTRBQzJGNjFDMkRGM0NCNTUwRDkyMDZBLzAvMTEzQTFGQjY4NTg0MTVE
NTE1NUFERDc4NkZERjIxNDQwOEFBNTczMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMTNBMUZCNjg1ODQxNUQ1MTU1
QURENzg2RkRGMjE0NDA4QUE1NzMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUM0M0VFQjg4OEIxQTY0RDNEOUUxNUQ4MkNGNDk0QkFFQUIwNjBCMjk0
QUMyRjYxQzJERjNDQjU1MEQ5MjA2QS8wLzMxMzgzMTJlMzIzMzMzMmUzMTMwMzAy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3MzIzMDM5Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG1
6WQwDQYJKoZIhvcNAQELBQADggEBAD6YuqiI1AY8M21f/Rfds3Vz0o/cAAHENnmz
ewmuusPR7u1CxRw3VdEAQXCYD4NaEmhCyL7g6N5D0ZCCvdlWCGBM4Gtsv/bhE9hX
X8NAIhQMDynMiTmnFAFw18aV+rGsCKxGaLB6BcQD7Gnn3B7rBL1YgXFgS+xZLgpD
gxOKpt6LBmIowFfobJ0PGLFzNokFlRJPIF4lxdDo1VHBFEjpstCN60J1ATFlJ6ag
ZRNN04kDH9WC4L2X+J6JnNwwz98NE8z3ZriyXvHuGHdwhkCicBxrd8LRXEj4HU2b
oDoS+SrKXWoGLoX19iPepjbHnnPnwK62PLrzDfjGMrv2GkU5VM0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:05 2025 by rpki-client