Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203333353736.roa
File:                     3138312e3137372e3231362e302f32322d3234203d3e203333353736.roa (raw, json)
Hash identifier:          46MEf3qCVxe6/uCoViYbm64DLquo0p/10FHAyRETMuI=
Subject key identifier:   37:C4:90:60:C1:08:73:56:BF:26:E9:BD:A4:2E:3F:EB:1B:68:9B:0B
Certificate issuer:       /CN=366C86A35982162DA62035B192A9F9C2AC96FF52
Certificate serial:       51B5BB9D72130AE5DC5682D777A0C0CD9A9F3EED
Authority key identifier: 36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203333353736.roa
Signing time:             Tue 04 Feb 2025 18:19:12 +0000
ROA not before:           Tue 04 Feb 2025 18:14:12 +0000
ROA not after:            Tue 03 Feb 2026 18:19:12 +0000
asID:                     33576
IP address blocks:        181.177.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b5:bb:9d:72:13:0a:e5:dc:56:82:d7:77:a0:c0:cd:9a:9f:3e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366C86A35982162DA62035B192A9F9C2AC96FF52
        Validity
            Not Before: Feb  4 18:14:12 2025 GMT
            Not After : Feb  3 18:19:12 2026 GMT
        Subject: CN=37C49060C1087356BF26E9BDA42E3FEB1B689B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:b0:2d:a5:6f:89:8c:9a:b3:5a:34:b0:b7:
                    8a:aa:63:41:be:df:e8:ce:65:d0:d4:f2:0f:92:09:
                    ec:2a:5a:77:ba:39:25:0d:6f:d8:8b:91:52:ce:62:
                    7a:43:d4:83:e2:20:bd:91:16:f1:c8:da:72:e5:3d:
                    56:12:3f:24:23:0a:3b:4e:f9:a7:3a:d5:d1:b1:93:
                    a0:35:7f:0b:ec:d0:f6:6d:c9:1f:4c:84:c1:a4:11:
                    d3:b1:c5:22:0f:42:27:01:2e:b5:0e:8b:3b:cf:f5:
                    ce:cd:2f:03:5a:c9:75:04:f8:2a:59:fc:36:9f:f3:
                    e4:3e:fd:6c:59:f0:c6:ac:90:b3:45:e4:d0:6c:e1:
                    c9:ca:1d:61:ac:08:07:63:1d:0d:23:2b:39:cb:28:
                    24:b0:10:ac:66:cd:5f:2c:1f:f8:a3:08:0b:5d:fd:
                    6a:81:9c:02:cc:68:ee:39:5a:a0:a1:bb:a9:bd:34:
                    96:78:88:3f:31:08:94:dc:22:e7:c3:87:ee:6d:e4:
                    0b:cb:68:a5:f2:6f:dd:4e:34:f9:be:ac:20:a3:e5:
                    3c:d1:f1:64:cc:a5:cf:a3:f2:5c:ef:e1:a6:b2:90:
                    eb:fa:a5:d6:86:b8:8c:94:db:55:b9:62:ef:83:3b:
                    c1:8d:bf:46:fd:22:5e:d7:0e:11:03:1c:4c:56:a4:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C4:90:60:C1:08:73:56:BF:26:E9:BD:A4:2E:3F:EB:1B:68:9B:0B
            X509v3 Authority Key Identifier:
                keyid:36:6C:86:A3:59:82:16:2D:A6:20:35:B1:92:A9:F9:C2:AC:96:FF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/366C86A35982162DA62035B192A9F9C2AC96FF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/366C86A35982162DA62035B192A9F9C2AC96FF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3EF3F235431E7CDB364A0226120363B7135EE9044FDD7CE3CE066BCDC42C8872/0/3138312e3137372e3231362e302f32322d3234203d3e203333353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:22:78:3a:53:bc:ad:c4:43:f7:22:83:67:38:80:2b:05:
         99:cf:98:db:c2:05:40:29:6c:be:b6:0f:c9:f2:27:45:b5:19:
         da:a2:80:68:f2:4e:8c:0c:3b:03:b0:bc:de:a4:03:c4:c8:c4:
         1a:6a:75:f0:2a:f7:e1:32:96:bd:98:69:0c:15:a0:ed:f3:d5:
         c5:c8:50:c3:75:99:1d:f3:7d:ab:e4:8a:0f:3f:e2:79:8a:49:
         41:92:c8:07:bb:fa:ac:2b:6d:1b:e3:ae:30:fd:37:f3:04:9c:
         0f:03:ba:64:44:1d:f4:b2:66:72:1d:94:e0:15:26:21:eb:7a:
         96:02:ab:38:b1:fe:82:e5:60:1d:c5:4b:6d:3f:4c:23:8b:a8:
         5e:36:15:07:e8:fd:d7:04:7d:7f:a7:c7:37:0d:2d:38:2f:87:
         6c:43:ba:59:e3:69:91:fe:2c:c4:95:d8:1b:89:b1:38:e3:61:
         76:d5:d0:d7:52:a5:87:9e:74:8a:ea:7e:49:50:a7:8c:ad:65:
         a5:fd:28:b7:19:69:1c:c1:01:5a:10:85:2b:19:5f:0b:e4:26:
         d5:13:5b:fc:50:83:cd:6b:1a:14:72:61:1f:a1:d1:87:17:5d:
         ea:67:a4:bc:84:4a:10:c2:a6:73:47:3b:d0:ba:32:c6:54:41:
         fa:53:80:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:55 2025 by rpki-client