Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa
File:                     3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa (raw, json)
Hash identifier:          xaq5g/BugANvg+fPuQREB0/aJG7wZ32ms6/DBayQS9c=
Subject key identifier:   BB:54:F0:90:1F:23:32:88:BE:71:1E:96:07:AC:57:9C:AF:F9:4F:85
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       47F55853BC4F9818DA6729C4B6CAF19C358F4219
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa
Signing time:             Tue 04 Feb 2025 18:26:36 +0000
ROA not before:           Tue 04 Feb 2025 18:21:36 +0000
ROA not after:            Tue 03 Feb 2026 18:26:36 +0000
asID:                     52308
IP address blocks:        181.114.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f5:58:53:bc:4f:98:18:da:67:29:c4:b6:ca:f1:9c:35:8f:42:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Feb  4 18:21:36 2025 GMT
            Not After : Feb  3 18:26:36 2026 GMT
        Subject: CN=BB54F0901F233288BE711E9607AC579CAFF94F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:0a:cd:ae:8d:f0:26:bc:d6:6e:03:ab:9a:
                    5c:5a:ee:11:92:0e:d3:ba:26:78:b9:ec:7a:e0:ba:
                    68:29:6f:5d:8d:a9:6d:f2:ee:92:2c:9c:59:9e:d2:
                    15:b4:9c:6c:c7:ad:1d:b4:20:09:d5:77:24:ad:0c:
                    f1:1e:9a:55:46:78:87:81:25:d3:6e:04:1b:97:dd:
                    ed:d6:6f:12:66:19:08:e4:03:e9:d3:55:46:17:e9:
                    ea:d1:55:e8:fa:12:fc:67:1b:44:ba:aa:1b:10:53:
                    19:29:29:55:53:c6:75:f2:fe:6b:75:8d:72:8f:8c:
                    6e:b2:17:e7:17:c7:cf:a7:49:f1:ac:e5:c1:c6:2a:
                    d5:f5:27:e7:e8:89:d3:46:44:f6:27:f4:65:dd:dd:
                    fe:36:84:35:c8:58:62:7b:c0:44:75:a0:7f:f2:66:
                    dc:72:9f:13:f8:a2:ce:6a:59:7f:3a:10:54:46:f5:
                    cd:e2:a1:bd:e1:85:42:dd:20:1f:69:2a:0f:cf:2e:
                    d8:5e:82:4a:ac:a6:34:36:0a:78:79:32:fc:3d:67:
                    73:bd:48:54:05:96:26:61:ca:23:a2:e5:41:dc:3f:
                    a4:b2:a1:23:f9:31:4d:82:ee:ac:86:26:3b:13:d8:
                    a3:bc:3c:e8:a1:f1:0b:0b:68:db:e4:5d:e0:e6:21:
                    86:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:54:F0:90:1F:23:32:88:BE:71:1E:96:07:AC:57:9C:AF:F9:4F:85
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3138312e3131342e3139322e302f31392d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:47:82:0b:35:84:f8:e5:c7:42:1e:66:d1:91:16:b6:02:05:
         f5:6d:6b:0f:7d:46:84:9b:53:47:d3:bc:06:a9:4a:73:71:18:
         fa:74:f5:fb:a9:31:3c:64:78:6e:8d:cc:ff:87:e3:17:63:f6:
         7c:be:51:9f:54:a1:02:7c:2e:5b:33:e1:50:bb:f2:a0:50:0f:
         67:58:52:c8:56:7c:54:e4:02:d5:01:43:4c:86:94:a3:fb:18:
         d2:63:17:05:80:1b:5f:44:f3:36:31:f7:8c:92:85:5b:33:11:
         77:1c:fa:0a:90:8f:30:81:9b:fa:62:59:6d:6d:ac:50:d8:05:
         08:52:dc:63:52:07:36:90:c1:e8:f2:92:e9:29:60:42:9c:a0:
         8b:3c:a7:d8:53:4b:23:34:75:74:ab:d8:fa:b6:cb:d7:7d:ed:
         d6:09:2f:4b:4f:db:e8:c5:5a:47:38:47:04:94:8c:d4:6f:09:
         df:80:18:9f:e4:9e:c1:e9:8c:81:1c:22:47:2e:a9:9c:38:e4:
         79:d4:d3:da:ba:ae:86:f3:4d:e6:7c:c7:57:30:b7:2b:22:c9:
         5c:d9:53:d4:8a:52:1e:8b:4d:eb:63:6d:49:69:cc:6d:a7:86:
         42:34:f7:f7:5f:66:01:ce:7f:f6:3d:5a:7a:2d:e6:e1:4e:9e:
         47:8f:aa:0d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUR/VYU7xPmBjaZynEtsrxnDWPQhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMkUwRTU3OUM2MDM2OUI5RTU5NjJCQzdFNzAwNDI3
QjY5MTVCNjAeFw0yNTAyMDQxODIxMzZaFw0yNjAyMDMxODI2MzZaMDMxMTAvBgNV
BAMTKEJCNTRGMDkwMUYyMzMyODhCRTcxMUU5NjA3QUM1NzlDQUZGOTRGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2QrNro3wJrzWbgOrmlxa7hGS
DtO6Jni57Hrgumgpb12NqW3y7pIsnFme0hW0nGzHrR20IAnVdyStDPEemlVGeIeB
JdNuBBuX3e3WbxJmGQjkA+nTVUYX6erRVej6EvxnG0S6qhsQUxkpKVVTxnXy/mt1
jXKPjG6yF+cXx8+nSfGs5cHGKtX1J+foidNGRPYn9GXd3f42hDXIWGJ7wER1oH/y
ZtxynxP4os5qWX86EFRG9c3iob3hhULdIB9pKg/PLthegkqspjQ2Cnh5Mvw9Z3O9
SFQFliZhyiOi5UHcP6SyoSP5MU2C7qyGJjsT2KO8POih8QsLaNvkXeDmIYYHAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUu1TwkB8jMoi+cR6WB6xXnK/5T4UwHwYDVR0j
BBgwFoAUjALg5XnGA2m55ZYrx+cAQntpFbYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMUY1MTM0RDNGNzg0MkZDODNBMTVERUJBMjRCNTFDNzBC
RTcyNkRBRjlGMkQxNkFDNTQ1RUVBRDc0NDMyN0ZFLzAvOEMwMkUwRTU3OUM2MDM2
OUI5RTU5NjJCQzdFNzAwNDI3QjY5MTVCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84QzAyRTBFNTc5QzYwMzY5QjlF
NTk2MkJDN0U3MDA0MjdCNjkxNUI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjFGNTEzNEQzRjc4NDJGQzgzQTE1REVCQTI0QjUxQzcwQkU3MjZEQUY5
RjJEMTZBQzU0NUVFQUQ3NDQzMjdGRS8wLzMxMzgzMTJlMzEzMTM0MmUzMTM5MzIy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNTMyMzMzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFtXLA
MA0GCSqGSIb3DQEBCwUAA4IBAQBbR4ILNYT45cdCHmbRkRa2AgX1bWsPfUaEm1NH
07wGqUpzcRj6dPX7qTE8ZHhujcz/h+MXY/Z8vlGfVKECfC5bM+FQu/KgUA9nWFLI
VnxU5ALVAUNMhpSj+xjSYxcFgBtfRPM2MfeMkoVbMxF3HPoKkI8wgZv6YlltbaxQ
2AUIUtxjUgc2kMHo8pLpKWBCnKCLPKfYU0sjNHV0q9j6tsvXfe3WCS9LT9voxVpH
OEcElIzUbwnfgBif5J7B6YyBHCJHLqmcOOR51NPauq6G803mfMdXMLcrIslc2VPU
ilIei03rY21Jacxtp4ZCNPf3X2YBzn/2PVp6LebhTp5Hj6oN
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:39 2025 by rpki-client