Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138312e3137372e302e302f31382d3234203d3e20323634363432.roa
File:                     3138312e3137372e302e302f31382d3234203d3e20323634363432.roa (raw, json)
Hash identifier:          hIM2OqmJL1GUvV/WM4e7bRCAmqbG4m8vFjIR9BD3GGg=
Subject key identifier:   2F:F6:34:21:31:19:25:30:EA:2B:05:92:3B:EE:D8:11:F7:59:12:8A
Certificate issuer:       /CN=FFD79896199115D473E566BF25169401D7AAE011
Certificate serial:       0E202DEC1D33E6422C9754B82EFC6B58B88A45D3
Authority key identifier: FF:D7:98:96:19:91:15:D4:73:E5:66:BF:25:16:94:01:D7:AA:E0:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138312e3137372e302e302f31382d3234203d3e20323634363432.roa
Signing time:             Tue 04 Feb 2025 18:00:35 +0000
ROA not before:           Tue 04 Feb 2025 17:55:35 +0000
ROA not after:            Tue 03 Feb 2026 18:00:35 +0000
asID:                     264642
IP address blocks:        181.177.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:20:2d:ec:1d:33:e6:42:2c:97:54:b8:2e:fc:6b:58:b8:8a:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFD79896199115D473E566BF25169401D7AAE011
        Validity
            Not Before: Feb  4 17:55:35 2025 GMT
            Not After : Feb  3 18:00:35 2026 GMT
        Subject: CN=2FF6342131192530EA2B05923BEED811F759128A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:73:b4:47:2f:9d:70:10:f5:60:c0:5e:a3:2d:
                    70:fe:b1:ff:04:5d:9e:a3:db:2e:bf:6b:03:4d:0b:
                    c5:77:35:1f:d9:ca:e1:2c:0e:df:85:7a:ad:39:00:
                    54:0a:1c:56:af:54:f6:fe:47:0a:7f:0e:73:c5:13:
                    66:0d:26:f3:58:1e:43:45:ee:b6:98:26:bd:07:6e:
                    57:5a:0e:b2:ad:cc:10:7c:9c:33:89:82:19:25:83:
                    99:4d:c1:ac:06:22:c0:dc:bd:df:f9:de:3b:5c:2d:
                    19:cb:44:3c:3f:d1:41:c2:d5:a5:46:44:24:7c:67:
                    d5:10:4d:b1:f5:0d:6d:e7:ee:19:77:77:04:bf:7b:
                    4b:e8:9c:7c:91:d8:b6:f9:c2:3e:c4:a8:dd:bb:cb:
                    22:71:19:66:60:bf:7b:ae:ed:29:49:8e:23:18:c8:
                    9c:19:bd:c3:84:cf:00:74:c3:fa:76:19:12:2f:ae:
                    92:09:45:e9:46:b1:00:ba:46:2a:62:6a:d7:6d:7e:
                    2e:87:d6:e4:5e:31:96:02:c8:b3:78:27:db:15:0a:
                    97:da:05:e2:4e:1b:03:0e:9b:36:1a:24:e8:75:e2:
                    6b:51:ea:ee:52:bb:4a:fe:7b:34:f2:18:b5:4f:79:
                    da:5a:11:94:de:66:35:cb:2a:31:5e:82:2b:eb:bf:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F6:34:21:31:19:25:30:EA:2B:05:92:3B:EE:D8:11:F7:59:12:8A
            X509v3 Authority Key Identifier:
                keyid:FF:D7:98:96:19:91:15:D4:73:E5:66:BF:25:16:94:01:D7:AA:E0:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/FFD79896199115D473E566BF25169401D7AAE011.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FFD79896199115D473E566BF25169401D7AAE011.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/380F8A29A0094EFBDFF72B546E96208C9C0D03EF172C5A90DDCA4CB608556A6C/0/3138312e3137372e302e302f31382d3234203d3e20323634363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:67:18:f0:d1:2e:3a:3d:1d:48:10:8e:ee:37:67:f6:28:
         a5:5c:a4:d0:61:7f:63:6b:c8:9e:78:72:f9:79:6f:56:b9:1d:
         ba:ce:7a:c0:ed:11:a9:47:7a:7f:32:ca:00:3e:3f:e6:82:ea:
         db:d3:1c:f6:df:47:5e:65:1c:b3:94:1d:9f:6d:86:56:92:cd:
         b1:09:00:18:b2:92:7b:00:c0:f9:20:e1:0f:5d:dd:e8:48:7a:
         94:a4:07:88:2c:9d:0e:e1:1f:f4:1c:cc:9d:2e:21:6d:88:e7:
         c8:69:9a:09:25:1f:1f:3c:53:74:86:a5:e3:98:2d:b2:65:1c:
         84:01:a5:25:9b:61:59:29:22:94:b4:88:ea:bc:27:0b:01:12:
         75:11:0d:45:ea:29:9f:7a:2c:17:8d:77:c3:38:c3:73:55:d6:
         31:de:2c:ac:60:6c:a5:1f:8b:10:21:2d:9f:86:64:5f:f8:fa:
         d8:87:8b:76:d3:46:38:6d:15:5a:ed:c8:a4:31:2f:d9:22:df:
         8b:23:fa:97:44:a0:4c:89:3d:10:5f:a8:9f:68:4f:a5:f3:fd:
         b3:6c:67:a7:9f:ea:02:ac:6c:aa:f5:b9:7c:0b:53:31:ac:0e:
         22:99:31:0c:05:c4:eb:11:51:38:4f:00:0d:1a:6f:20:b9:84:
         70:6b:26:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----