Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa
File:                     3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa (raw, json)
Hash identifier:          U+/V7kvJ52w25vBxNtI8yzZBz9Z1EWZKc74+dZpbWD8=
Subject key identifier:   7B:FE:6F:F0:99:9F:2B:54:D0:87:98:F2:DD:42:5A:4D:8B:06:57:38
Certificate issuer:       /CN=113A1FB6858415D5155ADD786FDF214408AA5730
Certificate serial:       75EAE4D6CE95ECBDB4A03B4D67C824FBC57DB95E
Authority key identifier: 11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa
Signing time:             Tue 04 Feb 2025 19:59:27 +0000
ROA not before:           Tue 04 Feb 2025 19:54:27 +0000
ROA not after:            Tue 03 Feb 2026 19:59:27 +0000
asID:                     272099
IP address blocks:        181.233.102.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ea:e4:d6:ce:95:ec:bd:b4:a0:3b:4d:67:c8:24:fb:c5:7d:b9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113A1FB6858415D5155ADD786FDF214408AA5730
        Validity
            Not Before: Feb  4 19:54:27 2025 GMT
            Not After : Feb  3 19:59:27 2026 GMT
        Subject: CN=7BFE6FF0999F2B54D08798F2DD425A4D8B065738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:50:6a:cd:e6:cb:8c:c6:d7:ba:41:1d:ad:
                    da:75:07:a5:fd:e2:0a:ab:32:ea:03:df:57:34:73:
                    a0:7c:02:bb:33:d5:41:30:8c:93:32:00:d2:f3:d9:
                    fa:f3:82:d5:47:48:93:df:46:bf:07:a1:43:0c:07:
                    e8:97:17:ba:16:b0:6b:62:b6:a8:6e:c1:4f:fd:1a:
                    e5:1c:2e:e8:b9:ae:e3:3a:5b:bd:fd:e3:30:c3:c7:
                    fb:05:2c:9e:72:ef:17:8c:6d:09:f8:73:b4:80:93:
                    c1:b6:a0:ef:f9:7c:43:01:77:65:01:53:6f:fa:8f:
                    f7:eb:a6:5f:78:44:1d:65:21:40:1d:69:d9:17:61:
                    8e:15:ba:1e:08:7c:c6:43:6c:12:de:27:e3:b8:ce:
                    b0:30:39:fc:e0:c4:85:e5:53:be:19:92:bc:a4:3a:
                    c2:a6:22:88:8c:52:b9:be:4e:c5:f0:de:21:a1:73:
                    00:0a:16:c2:c4:0d:42:27:ee:77:2c:05:81:1a:7b:
                    27:45:fb:de:20:50:cd:65:1f:1d:a4:7d:22:aa:06:
                    58:94:41:04:3c:b2:fb:16:f0:0b:59:cb:2a:06:a7:
                    bc:f1:96:50:bb:c1:92:b1:6e:ef:86:63:b2:6a:d1:
                    f8:4a:35:f7:fd:82:3c:3f:a4:68:83:99:30:ff:8e:
                    c4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FE:6F:F0:99:9F:2B:54:D0:87:98:F2:DD:42:5A:4D:8B:06:57:38
            X509v3 Authority Key Identifier:
                keyid:11:3A:1F:B6:85:84:15:D5:15:5A:DD:78:6F:DF:21:44:08:AA:57:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/113A1FB6858415D5155ADD786FDF214408AA5730.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/113A1FB6858415D5155ADD786FDF214408AA5730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C43EEB888B1A64D3D9E15D82CF494BAEAB060B294AC2F61C2DF3CB550D9206A/0/3138312e3233332e3130322e302f32332d3233203d3e20323732303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:06:e5:18:7b:d1:f6:f1:af:94:3f:ba:0c:88:cd:c0:48:a5:
         35:54:48:af:82:73:01:ce:b5:d8:ae:a4:87:4d:20:48:f8:c6:
         5e:47:8b:90:93:b6:dd:82:64:59:df:ab:8f:ce:86:96:0f:96:
         8e:aa:b8:fd:eb:e6:d5:68:e4:28:c8:28:c8:33:f8:ff:a9:e7:
         e4:4d:0c:0a:37:b5:b2:da:b6:2d:4c:ed:30:f3:b7:4e:5b:64:
         17:fc:8d:6f:85:2a:41:a9:ae:49:f4:5b:b0:c5:98:f1:84:61:
         a0:69:0b:e9:c2:a2:98:80:67:49:46:41:be:e3:8d:50:e3:28:
         9c:10:f0:af:7b:eb:95:fc:a1:5e:78:87:85:e4:88:54:05:5d:
         79:5c:b0:a5:c8:67:84:88:30:b0:8d:78:27:1e:69:93:3d:36:
         93:9c:d2:75:40:29:c8:e9:19:e7:9b:3f:54:6b:2c:f8:e0:bb:
         3b:1b:f0:e9:a8:7a:2a:35:df:90:45:74:9e:a0:6a:70:12:5e:
         e6:be:df:cb:ee:c1:31:8a:d8:d3:b0:a7:0c:80:7d:da:90:ca:
         54:de:d8:43:10:f1:e1:ef:05:ca:ed:0d:55:c7:bb:89:b2:99:
         42:db:d8:22:cb:80:18:85:94:69:ce:70:38:8c:a4:1f:2f:15:
         5a:0d:56:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:56:04 2025 by rpki-client