Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa
File:                     3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa (raw, json)
Hash identifier:          gqUn6tCqIF8BpuNDOPcQl25d+oGNwtRvFFbSnASvP4o=
Subject key identifier:   7F:7A:E5:A9:42:06:24:C8:BB:8E:FD:22:11:E6:AD:D0:7D:19:B7:62
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       485DEB3A6A62A1C452E3F3918553EB1E0F3B14DA
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa
Signing time:             Tue 04 Feb 2025 18:35:02 +0000
ROA not before:           Tue 04 Feb 2025 18:30:02 +0000
ROA not after:            Tue 03 Feb 2026 18:35:02 +0000
asID:                     61441
IP address blocks:        201.182.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5d:eb:3a:6a:62:a1:c4:52:e3:f3:91:85:53:eb:1e:0f:3b:14:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:02 2025 GMT
            Not After : Feb  3 18:35:02 2026 GMT
        Subject: CN=7F7AE5A9420624C8BB8EFD2211E6ADD07D19B762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:21:b4:d6:83:06:48:75:fc:af:f7:7e:36:
                    78:eb:e1:50:ad:ae:e9:34:7b:1f:54:ef:48:44:2c:
                    01:24:6f:95:2f:71:f4:aa:51:6a:9e:ca:b2:c0:9c:
                    c5:35:7e:b1:a7:9f:db:59:d4:dd:b5:6a:94:3a:98:
                    f9:fb:e6:a2:f0:8e:aa:47:e2:20:9c:3f:18:b4:9b:
                    43:d1:37:c3:75:6f:34:15:e9:3b:4b:c2:7b:00:75:
                    f9:19:79:3c:33:a5:bb:11:b9:d3:90:89:21:2b:42:
                    0d:1e:bc:74:c0:b7:54:c3:33:61:a0:55:d9:c4:d2:
                    cd:1a:9e:f2:80:27:08:d2:7f:c3:c1:4d:bc:9f:b7:
                    02:32:18:94:25:e0:9f:96:e8:58:59:d3:d8:80:b6:
                    6b:41:25:62:56:03:17:6b:e6:66:46:30:2a:10:40:
                    92:27:42:d3:50:95:5d:a9:7b:55:b3:8b:b0:8c:9b:
                    fb:5c:9d:68:74:9a:68:42:68:f6:63:57:ec:61:d4:
                    78:fe:69:69:70:68:a1:36:91:0d:93:12:5c:7c:71:
                    f3:2b:17:5b:2a:cf:64:97:68:3b:68:b6:d5:51:2a:
                    3c:ae:7e:89:8b:4e:4e:49:50:5c:1f:ab:e6:d1:0c:
                    3d:cf:73:8b:42:1a:5d:f9:d8:67:9c:25:be:b3:b5:
                    cb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:E5:A9:42:06:24:C8:BB:8E:FD:22:11:E6:AD:D0:7D:19:B7:62
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3132392e302f32342d3234203d3e203631343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:fb:bf:ee:27:34:d0:c7:26:19:e4:35:74:0d:19:8e:a5:b9:
         86:0e:99:dd:56:0c:f4:9d:5c:3c:56:1d:b6:71:43:9c:ed:f2:
         65:ac:d7:89:a4:e7:73:fa:b5:7b:ae:99:c7:e9:0e:80:01:d1:
         a8:9e:02:83:81:d0:f7:a0:3d:14:c8:0a:57:10:56:5d:20:bf:
         f7:34:3d:17:7a:f3:23:83:3f:95:cb:aa:dd:eb:99:da:f9:31:
         d6:50:ae:03:4e:ac:07:d7:b7:1c:75:28:85:e1:06:89:38:c3:
         0e:89:94:63:09:c4:9c:91:8b:0c:17:6c:58:ad:d9:69:90:6e:
         b6:80:51:3d:7b:a3:6d:06:1e:02:1b:55:9e:6d:55:69:74:23:
         7c:1c:83:9b:9f:b2:07:bd:b5:34:19:97:83:d3:1d:d5:9d:5e:
         67:09:3f:5e:5c:66:8f:f8:a4:6d:0f:c8:5b:b0:4c:25:bf:0d:
         2b:d7:61:8a:54:36:de:da:ce:32:8b:9c:0c:1e:b7:e7:d0:f4:
         fe:b8:55:f0:6e:80:e3:b0:8f:a7:d3:3b:ee:71:15:b1:2d:a7:
         31:42:09:a1:25:6e:08:e5:81:87:51:1f:a2:2c:66:85:de:25:
         f2:cb:9c:39:01:f0:f1:3f:2a:cc:26:53:ef:1e:34:3b:06:e2:
         a3:d5:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:17 2025 by rpki-client