Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133302e302f32342d3234203d3e203631353231.roa
File:                     3230312e3138322e3133302e302f32342d3234203d3e203631353231.roa (raw, json)
Hash identifier:          cOCcL+2FWqZgL9zTXFAVg5cDqIGN0oWSp5T1CEojA/A=
Subject key identifier:   65:42:A3:A5:BA:3A:5E:E3:D3:F2:82:4B:4D:C0:A0:76:BC:1C:D5:98
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       26276FF3EE79C140080A1B6249C93109A4D6FFAC
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133302e302f32342d3234203d3e203631353231.roa
Signing time:             Tue 04 Feb 2025 18:35:12 +0000
ROA not before:           Tue 04 Feb 2025 18:30:12 +0000
ROA not after:            Tue 03 Feb 2026 18:35:12 +0000
asID:                     61521
IP address blocks:        201.182.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:27:6f:f3:ee:79:c1:40:08:0a:1b:62:49:c9:31:09:a4:d6:ff:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:12 2025 GMT
            Not After : Feb  3 18:35:12 2026 GMT
        Subject: CN=6542A3A5BA3A5EE3D3F2824B4DC0A076BC1CD598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:0d:d3:37:4d:58:63:13:3e:4c:b4:d6:80:
                    82:09:e9:24:00:dd:1a:71:98:c7:bc:cb:5f:44:56:
                    a5:04:43:0d:ce:5c:14:d4:87:55:f2:67:92:38:37:
                    ab:c4:5a:69:c5:b7:87:5b:49:b9:62:38:92:f5:90:
                    b7:f2:16:2a:29:2a:e7:34:aa:b9:02:59:71:0a:6e:
                    d6:2a:00:23:a7:dd:52:be:cc:79:ec:7a:a0:d8:1d:
                    ff:0a:13:02:bd:61:1e:21:85:26:bb:6d:6e:37:9d:
                    dc:d3:a3:79:d5:65:3a:3b:1a:6b:e6:ac:b1:33:fb:
                    67:30:2d:71:55:6c:9b:39:b7:d1:44:91:79:dc:af:
                    b6:45:62:29:92:53:91:4e:53:4a:80:7c:66:c9:27:
                    2b:29:da:e4:70:9c:7e:8e:81:a9:1c:d7:5d:13:4c:
                    e6:46:f4:b5:cd:e8:19:40:8f:87:84:1d:bd:40:04:
                    fd:65:96:6f:5e:73:3e:85:67:b9:b2:65:0c:a6:67:
                    3e:05:ec:2f:a4:e9:b8:68:b1:a5:54:e0:09:8f:64:
                    90:9e:b6:1e:d6:9e:ff:bb:19:ee:3f:d7:0e:1b:98:
                    e8:3c:2a:29:04:5c:a6:d6:f3:aa:6e:5f:62:54:e6:
                    a9:32:01:33:58:3e:dd:2d:8d:6d:a6:2f:a5:26:32:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:42:A3:A5:BA:3A:5E:E3:D3:F2:82:4B:4D:C0:A0:76:BC:1C:D5:98
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230312e3138322e3133302e302f32342d3234203d3e203631353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:20:33:16:3f:5c:fc:59:0d:03:f5:cf:40:b3:ec:9e:ec:ce:
         c8:7c:c7:8c:a7:f5:17:11:23:50:43:4e:21:f5:e9:fb:33:8f:
         ac:f2:b9:7f:37:27:b7:81:9e:72:de:13:e7:49:10:12:d9:54:
         a2:72:a8:11:12:88:dc:19:e3:9d:82:72:43:b3:65:c1:7d:2c:
         26:47:f0:1e:77:25:7f:96:21:57:1e:6a:bb:2d:78:dd:a1:9a:
         a4:20:a0:84:cb:57:92:80:6b:ab:6a:99:10:66:a8:cd:0d:4d:
         9c:eb:5d:35:18:7d:a5:8b:ff:64:b7:21:aa:8b:1d:46:42:db:
         fe:f7:bf:d3:c7:dc:19:ec:73:14:43:4d:c8:0d:92:37:7b:43:
         84:8d:38:6f:b1:a3:2a:dc:a2:49:59:48:7c:a9:2f:d7:36:12:
         eb:6b:c2:54:dd:76:6c:c9:55:6f:24:ab:27:0e:31:8c:12:61:
         92:fd:96:d4:6b:2a:dd:09:06:29:4d:a5:43:52:91:e9:3c:fe:
         4e:5f:e4:2b:16:9d:fc:a7:a5:72:8d:77:3e:35:1f:c4:43:02:
         f6:4b:c5:d1:dc:31:f9:f6:54:99:10:96:29:da:45:4d:6e:1a:
         17:73:26:37:b1:76:5c:4d:dd:fa:92:27:63:01:8e:db:e1:e2:
         d8:b2:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:14 2025 by rpki-client