Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa
File:                     3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa (raw, json)
Hash identifier:          qkY5DR8WbP4tFuJilzY73NIteGorYJyzaR3t2Gl7d6Q=
Subject key identifier:   D4:40:01:8D:56:96:8C:27:92:0F:4C:EE:1F:9E:98:25:F5:56:97:30
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       4118BE98CD143AEB0879228659FEF3EC4A11B246
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa
Signing time:             Tue 04 Feb 2025 18:53:29 +0000
ROA not before:           Tue 04 Feb 2025 18:48:29 +0000
ROA not after:            Tue 03 Feb 2026 18:53:29 +0000
asID:                     60458
IP address blocks:        181.174.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:18:be:98:cd:14:3a:eb:08:79:22:86:59:fe:f3:ec:4a:11:b2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Feb  4 18:48:29 2025 GMT
            Not After : Feb  3 18:53:29 2026 GMT
        Subject: CN=D440018D56968C27920F4CEE1F9E9825F5569730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:19:21:77:61:e0:05:87:f9:8c:13:de:4d:
                    26:f0:9e:0d:b0:8e:5d:0a:c2:c6:1a:36:da:17:a1:
                    2f:58:75:9e:a3:87:a7:c3:19:45:25:30:6c:78:49:
                    bb:f3:96:af:01:6f:55:8f:3b:6d:db:9c:08:19:cc:
                    a2:3d:16:a7:ec:4b:0d:cd:05:0e:10:37:d7:91:ce:
                    8c:58:61:db:78:2a:4e:76:e0:e5:b9:58:09:67:13:
                    20:19:ce:71:44:bd:ef:2b:fd:a7:81:bb:d5:66:76:
                    36:0f:8a:6f:94:ed:83:42:f8:50:61:7d:b8:51:53:
                    66:3e:56:1e:49:f4:b3:ff:a0:12:a6:77:aa:50:71:
                    cc:d4:04:f5:cf:b2:71:84:f0:9b:71:63:a7:7f:5c:
                    33:4e:05:ff:a3:2f:cf:14:4a:ed:54:7e:75:a7:82:
                    ef:f2:b9:39:e7:16:a4:ca:ac:60:35:e4:26:60:63:
                    9c:ae:50:80:18:97:c9:f7:f3:94:e1:2e:91:10:c8:
                    a0:0c:59:31:53:ea:64:e3:96:37:21:de:fc:53:33:
                    0c:ff:a5:29:f0:4c:bc:17:bf:56:44:83:b4:5f:5a:
                    65:f7:f6:d0:35:a6:23:0c:f1:04:ab:dc:20:31:3d:
                    27:bc:b3:84:82:38:f4:1c:09:4f:c1:b5:66:79:0d:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:01:8D:56:96:8C:27:92:0F:4C:EE:1F:9E:98:25:F5:56:97:30
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32312d3231203d3e203630343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:59:ca:af:07:a9:e5:9d:b4:89:1e:1c:db:d3:da:d2:6e:30:
         80:c8:a0:a3:08:1a:e0:d2:a9:16:6b:38:a9:fe:7c:aa:2d:e9:
         fe:99:fb:81:c7:ae:a4:4d:9b:1b:43:83:c2:da:d6:40:8e:82:
         6a:16:58:c1:b5:c5:06:7f:c2:4b:67:95:76:c4:c3:4c:5d:7a:
         19:2c:44:3c:22:63:00:fd:c8:8e:84:c6:1c:b2:5b:1c:63:34:
         85:0f:20:2d:85:f3:7a:33:1e:b2:2f:96:c3:1b:74:22:39:5e:
         1f:11:f7:63:b2:8a:36:18:1d:7b:32:3e:34:75:b2:20:a4:ae:
         6a:97:55:04:79:b1:6a:5a:45:27:06:b6:19:22:e7:1a:f7:b9:
         47:b0:fa:ec:2b:2f:52:66:af:46:f2:64:3b:6c:21:ba:63:1c:
         18:12:18:61:aa:93:9a:f1:b1:91:5a:3c:87:4a:f3:d6:13:4e:
         fd:bc:e4:16:b0:b5:c7:12:5a:f4:cb:87:e9:46:a5:78:c8:22:
         6e:3c:c1:24:07:a8:05:e7:19:2b:71:2f:14:f5:9c:82:4c:c6:
         98:54:10:a0:83:af:eb:5f:dc:52:43:74:e8:fa:33:84:66:5e:
         31:d8:a8:51:fe:92:6f:92:f5:06:16:c6:91:f7:40:44:9a:5e:
         f2:4c:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:31 2025 by rpki-client