Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa
File:                     3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa (raw, json)
Hash identifier:          w+GZbM0rIs0nfuLiosBK0Xli5mksAOtPJvdz8/7tso8=
Subject key identifier:   C3:B1:C4:29:76:AA:67:6D:69:F2:BE:0C:6B:B2:8E:65:0E:E0:8C:A1
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       19BE5D069E1E05FF0BC294E8C336FDB87638861E
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa
Signing time:             Mon 17 Mar 2025 10:55:00 +0000
ROA not before:           Mon 17 Mar 2025 10:50:00 +0000
ROA not after:            Mon 16 Mar 2026 10:55:00 +0000
asID:                     210876
IP address blocks:        181.174.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:be:5d:06:9e:1e:05:ff:0b:c2:94:e8:c3:36:fd:b8:76:38:86:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Mar 17 10:50:00 2025 GMT
            Not After : Mar 16 10:55:00 2026 GMT
        Subject: CN=C3B1C42976AA676D69F2BE0C6BB28E650EE08CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:60:a3:c8:66:90:b0:32:4d:4f:c2:13:3a:b3:
                    7a:e3:ad:2e:b3:8b:53:e7:bc:9e:c3:56:9d:58:16:
                    b8:82:0e:ef:08:08:10:55:2f:87:ee:af:2e:ef:ee:
                    c0:d9:fa:4f:98:56:9c:7b:4f:ad:a3:5e:ae:cc:c6:
                    eb:20:46:3d:a3:57:42:cc:ce:55:33:17:e7:cf:0f:
                    b2:d4:57:4b:0b:f9:a5:fb:58:49:fc:e7:08:d6:3e:
                    2b:e0:97:d0:51:c5:43:d5:95:7c:08:3e:22:af:7e:
                    6d:80:09:e2:2d:e0:82:ba:fe:97:c7:6b:0e:06:b5:
                    33:53:4c:96:8f:51:a5:51:93:49:fe:9b:db:bb:e8:
                    ac:b5:ca:e1:bf:f1:69:4e:13:6a:55:23:d2:10:57:
                    f1:3f:f6:7b:ba:1c:b6:7f:ec:f2:e2:45:a3:5a:83:
                    1d:1a:cc:e0:db:b8:21:fd:f1:c0:fc:15:f7:d9:77:
                    f5:33:33:25:01:88:05:ea:16:2a:67:ee:06:ea:0e:
                    d3:74:05:9c:32:5c:aa:bf:9f:69:4a:2a:e7:a4:29:
                    bd:4c:46:c1:59:27:3b:7b:25:10:8d:b2:a0:86:f6:
                    41:ca:e8:13:ac:c5:12:75:2a:8b:3a:52:43:13:d0:
                    32:1b:df:9c:f0:d9:2c:14:70:7d:2c:f1:b9:59:b0:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B1:C4:29:76:AA:67:6D:69:F2:BE:0C:6B:B2:8E:65:0E:E0:8C:A1
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3138312e3137342e3138342e302f32322d3234203d3e20323130383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:cd:cf:e2:c3:a2:2c:8b:29:23:45:5f:7e:3d:c9:c1:6e:
         01:3b:56:a7:1d:78:df:34:25:72:be:bc:2a:b2:da:23:3d:ad:
         e4:56:29:09:2c:6b:99:2b:92:15:39:69:fd:c1:72:a0:36:bc:
         66:66:5d:30:6f:48:6d:00:17:9a:77:3f:a5:9c:f1:41:af:5d:
         8c:99:86:fc:97:7b:e5:ed:96:86:eb:fd:1c:09:c1:8b:e0:92:
         60:57:91:2a:f8:ff:f8:f8:9c:07:8d:0c:0b:6b:36:3e:05:ae:
         5e:c1:47:8f:5f:24:da:84:b1:cc:33:29:b2:51:2d:46:82:63:
         df:a5:17:47:c7:d2:35:28:4a:3f:ef:b8:2b:f3:55:44:f8:d3:
         e4:cf:63:43:53:be:aa:aa:98:d5:21:85:52:88:00:2c:07:ad:
         ad:3f:56:44:5f:c3:49:18:c1:82:e7:45:66:e7:49:a7:e9:08:
         2c:28:f1:81:4c:9b:97:d1:0e:3b:63:61:59:2c:ef:4a:f6:0b:
         f4:03:dc:57:4a:bb:c3:d9:e1:54:25:f5:7d:db:4b:32:6a:4b:
         b4:c0:a4:2c:05:a1:c8:73:da:19:84:f5:41:b2:65:4c:9c:b6:
         e5:2f:c0:61:c9:53:8e:52:dc:ec:ac:ce:89:b4:eb:0b:6c:1d:
         15:fd:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:01 2025 by rpki-client