Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135362e302f32342d3234203d3e20323632323036.roa
File:                     3138312e3138392e3135362e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          8RFHnl11e9TPLzSjoW70ypPmSjtEVOLTEKQEnXF/osA=
Subject key identifier:   47:62:3C:0A:A6:E3:D3:3A:7E:06:70:07:FA:5F:6D:8B:38:CA:C4:7F
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       72418EA5E6ED8463BC9D3ABFF8B6383CDDA61E24
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135362e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:15:28 +0000
ROA not before:           Tue 04 Feb 2025 18:10:28 +0000
ROA not after:            Tue 03 Feb 2026 18:15:28 +0000
asID:                     262206
IP address blocks:        181.189.156.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:41:8e:a5:e6:ed:84:63:bc:9d:3a:bf:f8:b6:38:3c:dd:a6:1e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:28 2025 GMT
            Not After : Feb  3 18:15:28 2026 GMT
        Subject: CN=47623C0AA6E3D33A7E067007FA5F6D8B38CAC47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:cf:80:66:dd:2d:e8:0b:29:40:7f:32:c8:
                    c8:15:24:dc:95:fa:a2:b0:04:20:69:e0:ca:bf:33:
                    fb:78:8a:e0:39:35:f0:23:42:a6:bc:8e:47:2a:53:
                    5c:64:8f:b3:e7:56:de:bf:18:f6:b9:08:27:08:07:
                    87:46:35:b7:66:2d:0f:76:64:1e:64:2c:ff:8e:91:
                    6b:2c:bf:97:10:a0:ef:d6:e2:4b:04:fa:2e:33:be:
                    a4:79:c1:61:8f:c0:22:46:4b:6c:06:11:0c:1b:55:
                    bc:aa:8c:64:69:ae:e6:02:5c:4a:68:ee:ce:b6:7a:
                    6b:cc:ef:38:d4:56:85:7a:1e:7e:d2:cd:50:24:69:
                    d0:97:71:e5:43:c0:2e:44:d4:7b:4e:37:aa:95:52:
                    ab:54:31:6c:f8:e7:a6:b9:ee:0b:5a:84:f7:d4:c2:
                    13:ab:cc:14:0c:b1:e6:e6:5c:84:0c:4c:98:e5:d5:
                    12:29:0f:19:49:69:e8:8c:9e:bc:14:d8:c9:29:b8:
                    76:6a:23:eb:31:6c:ed:6d:7f:84:c8:69:07:47:97:
                    6c:54:40:0b:66:54:7f:a7:6b:4b:b6:16:82:e5:80:
                    89:ec:6d:32:a5:04:91:c8:7d:fa:61:46:db:bd:00:
                    f2:8e:28:a1:b0:3a:fc:5e:42:9c:9b:4f:0e:95:33:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:62:3C:0A:A6:E3:D3:3A:7E:06:70:07:FA:5F:6D:8B:38:CA:C4:7F
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3138312e3138392e3135362e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:54:e9:34:c0:49:3b:13:7c:5a:8e:51:75:92:71:dc:ca:30:
         d5:92:95:cc:e8:66:52:e0:db:5e:b9:a7:cd:8c:10:dc:09:e6:
         73:c4:e2:d1:1d:38:98:35:e4:bb:66:52:45:70:1d:d1:98:fa:
         60:04:a4:b6:46:82:7f:c9:4a:61:d2:ed:e1:90:27:12:b6:eb:
         75:09:c1:10:aa:68:55:ff:9d:e9:6a:fa:4b:69:70:0d:cb:5b:
         b7:64:28:75:6c:68:05:a3:82:00:e3:49:19:0d:18:c1:dd:ce:
         47:70:6f:19:74:27:1f:27:21:68:28:d3:b6:3d:14:5e:6a:69:
         5f:be:86:b6:99:b2:06:0c:97:00:35:5b:49:c1:a6:77:32:14:
         5a:25:3c:87:a1:33:89:4c:ed:5d:cb:d3:19:32:f6:b3:8b:5b:
         36:08:de:ea:29:7d:63:4a:b8:74:57:02:aa:9c:0d:2c:06:94:
         00:5a:c3:6b:dd:d3:57:48:18:ea:82:6c:bb:fa:51:b5:58:7f:
         f8:09:8a:18:f0:1f:f5:f6:23:2a:ca:60:8e:e4:e3:4a:71:75:
         78:07:45:18:ab:96:ca:48:29:36:74:66:d0:cf:7f:7e:9d:8a:
         db:f1:a6:f2:94:42:9e:f0:ad:8f:a0:e3:55:d0:a1:2d:85:43:
         5e:04:1d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:22 2025 by rpki-client