Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3232203d3e2033353439.roa
File:                     3138312e3232342e3136302e302f32322d3232203d3e2033353439.roa (raw, json)
Hash identifier:          EnaDr8JuMq2fPr6DeFy1xndkWJQCKkZV5z4SnKpWwOk=
Subject key identifier:   8D:9A:8D:F0:39:35:B1:D5:54:94:FC:D2:25:6B:3B:C6:79:AF:6D:45
Certificate issuer:       /CN=253120D1807C995036BC4D9454329185DF025960
Certificate serial:       6AE9A6A5CAC9000E3CF437F5E0E32877F2E69D92
Authority key identifier: 25:31:20:D1:80:7C:99:50:36:BC:4D:94:54:32:91:85:DF:02:59:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3232203d3e2033353439.roa
Signing time:             Wed 29 Jan 2025 15:10:00 +0000
ROA not before:           Wed 29 Jan 2025 15:05:00 +0000
ROA not after:            Wed 28 Jan 2026 15:10:00 +0000
asID:                     3549
IP address blocks:        181.224.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e9:a6:a5:ca:c9:00:0e:3c:f4:37:f5:e0:e3:28:77:f2:e6:9d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253120D1807C995036BC4D9454329185DF025960
        Validity
            Not Before: Jan 29 15:05:00 2025 GMT
            Not After : Jan 28 15:10:00 2026 GMT
        Subject: CN=8D9A8DF03935B1D55494FCD2256B3BC679AF6D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:4f:80:8a:ce:7b:34:f8:89:29:73:40:7d:
                    3d:1b:8a:1a:4a:bc:56:e2:e0:98:02:cd:90:1e:61:
                    4b:8c:a8:72:d1:f9:c4:07:b7:a4:16:c7:eb:45:15:
                    0e:5f:07:f1:22:e1:e9:c6:4f:57:ed:d9:81:18:b6:
                    cb:14:63:02:e4:bb:ab:f5:34:e0:6e:a2:9f:22:66:
                    7d:e7:e1:80:b4:24:d7:7f:9c:e0:bc:83:16:7e:2e:
                    1e:7d:3c:b4:6c:e2:34:5c:4c:f6:2f:c3:86:fa:77:
                    f5:54:37:95:c4:72:1e:41:36:5e:18:fb:c6:ab:20:
                    f4:07:fc:93:ec:0d:e2:ba:74:ae:53:a0:36:9d:10:
                    e2:4f:cf:1f:5e:54:df:28:8d:68:39:48:c8:64:95:
                    c3:a9:96:0f:24:aa:81:02:aa:93:e6:46:89:8e:d9:
                    79:c9:14:ae:a0:92:80:f2:39:d7:3d:01:d7:49:4d:
                    7c:bb:8d:0e:40:f6:b0:f3:46:22:dc:f4:1e:99:65:
                    59:fc:1f:65:37:07:c5:b9:c9:cb:68:b3:bf:15:b2:
                    e0:c4:a5:8b:e7:38:16:31:a7:54:ea:49:fd:14:c7:
                    bd:2e:42:9c:f1:4e:a2:49:0e:71:68:82:af:61:e7:
                    2b:ce:19:af:2a:6d:d4:46:fe:9a:be:0c:3b:01:cc:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9A:8D:F0:39:35:B1:D5:54:94:FC:D2:25:6B:3B:C6:79:AF:6D:45
            X509v3 Authority Key Identifier:
                keyid:25:31:20:D1:80:7C:99:50:36:BC:4D:94:54:32:91:85:DF:02:59:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/253120D1807C995036BC4D9454329185DF025960.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/253120D1807C995036BC4D9454329185DF025960.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/439F72C3AD9B004899923EC8DB95CB1DB58472AB6D96FA9C125ADC63DBAEA0F7/0/3138312e3232342e3136302e302f32322d3232203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:94:86:cc:f2:73:71:01:b9:9a:b5:2b:a1:99:89:9c:b1:
         93:e1:16:24:f0:d0:c2:09:35:44:f1:5a:39:43:5f:79:11:e3:
         fd:fe:88:97:b3:7d:6d:ce:14:85:72:bf:b6:95:3d:a1:02:8e:
         21:3a:cb:cc:9c:11:ff:e0:d4:e9:46:b4:ff:6c:cb:56:c9:fe:
         91:ab:c2:42:99:47:a4:ee:d8:6d:f8:b3:a6:5b:7b:e2:e1:b9:
         0e:3a:bc:27:07:77:6e:e3:42:e6:5e:de:7e:45:78:68:66:8b:
         a1:09:45:0e:5b:87:63:ef:73:b5:03:22:3c:87:7c:eb:00:6e:
         73:01:8f:2f:e8:72:5e:58:e6:76:d6:36:f7:6c:30:c5:19:94:
         58:77:b8:00:9b:74:86:bb:38:54:5a:09:32:4b:b5:89:1d:5a:
         18:f7:81:1e:36:bb:be:4d:b8:ac:0e:46:35:fe:b0:97:8d:42:
         cd:f9:21:b5:b1:5b:9b:d0:5c:aa:1b:8f:a9:cc:13:e8:85:b5:
         b7:6b:25:e2:98:78:18:3d:8b:12:05:2d:8c:c7:aa:02:8b:ce:
         92:e5:d4:9f:4d:f4:b7:97:14:4c:d3:6e:dd:b9:c5:66:34:d8:
         0a:87:25:ff:cc:04:96:33:80:5d:60:52:b3:c3:67:c6:c5:f0:
         85:6d:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:51 2025 by rpki-client