Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e3135302e302f32332d3234203d3e20323634363039.roa
File:                     3138312e3139332e3135302e302f32332d3234203d3e20323634363039.roa (raw, json)
Hash identifier:          ohQ0jAgLgAEz+VOlJ0WPPYuVs62LSbegqid2BuAgJbo=
Subject key identifier:   A4:FD:76:2A:F2:12:C8:BE:C3:4F:FA:6F:59:1C:B4:5F:5D:49:F1:A1
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       7C8C8E15A8045F85371F850FE61EBD4B93A439A0
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e3135302e302f32332d3234203d3e20323634363039.roa
Signing time:             Tue 04 Feb 2025 18:36:39 +0000
ROA not before:           Tue 04 Feb 2025 18:31:39 +0000
ROA not after:            Tue 03 Feb 2026 18:36:39 +0000
asID:                     264609
IP address blocks:        181.193.150.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8c:8e:15:a8:04:5f:85:37:1f:85:0f:e6:1e:bd:4b:93:a4:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:39 2025 GMT
            Not After : Feb  3 18:36:39 2026 GMT
        Subject: CN=A4FD762AF212C8BEC34FFA6F591CB45F5D49F1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:68:60:d0:9a:3c:4c:84:59:8f:92:fc:52:
                    4d:ec:d0:96:1c:17:c5:8f:50:82:52:71:e5:70:83:
                    52:af:6c:38:f9:6b:fb:f4:55:b0:3c:ac:e1:d1:48:
                    db:1e:f5:97:49:fe:c1:0d:ed:ad:70:ff:b3:61:5b:
                    dd:d2:fa:18:46:56:5a:9e:cf:de:0b:45:b9:7b:1b:
                    0e:18:c0:19:86:16:1b:4f:49:1f:7b:c9:3a:0c:9f:
                    60:bc:3f:51:23:9d:37:c4:03:35:8b:57:84:cc:68:
                    d2:ad:1b:4c:e5:2e:a0:80:3a:3d:ec:1f:73:ff:ff:
                    3d:c8:eb:a4:bc:70:77:da:5c:5e:26:b7:26:54:cc:
                    a9:7b:5a:b2:77:df:46:a6:ee:ae:34:36:01:0e:45:
                    13:d5:cf:02:99:ea:d1:1f:c5:c2:32:3e:03:b6:7a:
                    2e:bf:94:69:6d:54:c0:84:5a:94:62:79:78:d3:b4:
                    5a:58:fa:26:75:40:40:43:ed:27:58:34:02:31:7d:
                    74:62:73:de:61:0e:70:89:e5:59:5b:11:57:88:88:
                    41:a0:cf:f8:0d:a7:ba:c2:d9:bf:a3:21:3e:32:b5:
                    67:4b:e8:b7:dc:25:c3:01:b9:1d:e9:c2:54:1b:98:
                    05:a6:63:87:f7:4b:c6:bb:36:b9:9a:52:e5:f3:89:
                    a2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FD:76:2A:F2:12:C8:BE:C3:4F:FA:6F:59:1C:B4:5F:5D:49:F1:A1
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/3138312e3139332e3135302e302f32332d3234203d3e20323634363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.193.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:ab:94:35:8d:a7:d8:07:fa:f2:be:8c:21:9e:a4:e3:cd:48:
         5e:74:28:f1:e3:c0:35:9e:ce:fc:59:99:78:eb:7e:e6:7e:6a:
         ee:f2:7b:ce:fd:66:30:90:32:df:e1:bb:93:14:c9:49:27:45:
         41:9b:d3:a8:5c:97:57:2d:e4:84:68:a8:7e:9c:2b:97:7d:dc:
         da:14:fa:41:5f:de:3f:1f:7a:2b:88:91:24:88:79:50:11:8c:
         49:60:75:86:d1:44:7c:6f:60:e0:5d:5f:04:5e:55:06:cb:30:
         b1:b4:ad:8e:7c:d5:f4:b0:d0:20:43:ce:b7:5a:ba:10:e0:8d:
         18:c5:c6:6f:0a:09:b1:4f:2d:36:bd:80:5d:e8:1a:53:43:7c:
         dd:62:e9:bb:43:ac:50:33:43:39:76:42:dc:d3:98:af:ee:b1:
         98:fa:e8:e8:27:ea:e9:59:42:fc:51:6c:2a:d3:fe:ea:07:7b:
         54:02:5e:b4:dc:c3:dc:c9:d7:ef:1e:09:a5:a9:4c:e8:6a:3b:
         b1:87:ad:2d:ec:e1:d5:15:4c:de:b5:48:0d:40:db:0f:c9:b1:
         6f:5b:b7:13:ae:7c:a4:10:20:2d:2a:2c:23:04:9f:15:38:36:
         5c:51:f8:81:4a:57:e8:53:c1:c1:dd:c4:66:3f:43:05:c5:62:
         83:38:12:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:59 2025 by rpki-client