Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3137203d3e203236363131.roa
File:                     3138312e3134342e302e302f31322d3137203d3e203236363131.roa (raw, json)
Hash identifier:          hOHvos2EgX7aKPgwbISo9inN6DmfSh5PPL4U8uo4BbQ=
Subject key identifier:   55:62:97:E2:69:C9:7A:6B:A4:C1:49:B8:17:F7:D6:C0:1B:91:BA:62
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       1BDFF81773FB7EA655E51ECDE46B837F52027CD5
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3137203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:16 +0000
ROA not before:           Tue 04 Feb 2025 18:00:16 +0000
ROA not after:            Tue 03 Feb 2026 18:05:16 +0000
asID:                     26611
IP address blocks:        181.144.0.0/12 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:f8:17:73:fb:7e:a6:55:e5:1e:cd:e4:6b:83:7f:52:02:7c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:16 2025 GMT
            Not After : Feb  3 18:05:16 2026 GMT
        Subject: CN=556297E269C97A6BA4C149B817F7D6C01B91BA62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:31:12:d6:a8:00:22:c3:1a:c9:85:96:a4:
                    bc:52:8d:48:89:21:65:86:a9:3d:ea:f6:96:55:24:
                    38:9d:da:46:a4:05:55:37:bb:27:f9:6f:39:f1:1b:
                    69:23:d9:58:c7:47:3e:99:1c:4f:4d:56:24:41:51:
                    df:f0:9a:e9:eb:ca:2f:20:07:08:dd:c9:c4:c0:ca:
                    a6:f2:ca:27:83:72:09:86:a3:e0:1f:91:42:c7:d0:
                    e5:04:02:8a:78:25:9a:3c:40:d9:07:67:67:ba:1a:
                    b9:67:57:c9:62:5e:d8:b3:bd:8f:54:38:bf:dc:19:
                    11:8d:92:61:2f:f3:4a:79:1d:7f:5d:c3:e0:22:d8:
                    57:41:66:32:80:1c:32:65:51:4e:47:ad:51:90:2d:
                    fc:5d:f4:9a:5e:84:fe:cc:51:5c:0c:6d:80:ea:9e:
                    ab:bc:af:1d:78:dd:dc:2d:7f:f1:de:41:6e:34:24:
                    bc:64:ce:dd:e6:6d:d7:2c:f4:1a:a6:f4:e3:53:9e:
                    6e:d5:3e:0b:2d:39:da:86:08:7a:d5:37:51:cb:14:
                    a5:dd:9e:75:0a:7b:c1:2c:83:4e:d6:c8:64:66:f2:
                    f7:67:8b:41:60:16:d2:80:e1:ab:da:f4:99:ea:90:
                    a9:a8:fa:92:1c:80:3b:32:31:8e:66:b9:94:03:84:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:62:97:E2:69:C9:7A:6B:A4:C1:49:B8:17:F7:D6:C0:1B:91:BA:62
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3138312e3134342e302e302f31322d3137203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.144.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         7c:87:3c:75:b2:ab:69:40:ae:ff:f0:a3:54:30:ee:46:2a:26:
         df:72:a1:33:97:9f:8a:7e:90:ff:be:75:6d:1f:4c:65:75:a1:
         c5:c9:bd:5b:d5:0c:60:39:5a:d8:ab:9f:84:dc:84:9b:5f:97:
         ac:b8:d9:1c:17:a9:00:bd:81:1e:b2:9a:63:16:0c:d5:db:a8:
         7c:ed:d9:6a:5f:99:71:b3:06:c4:d1:3a:83:f2:92:42:41:9c:
         5d:29:be:cb:68:6b:4d:3c:38:87:76:45:6b:36:5a:5c:92:b6:
         48:17:5e:58:4e:18:0c:dd:d1:ee:fe:3f:f8:07:e7:8b:22:d7:
         f7:1f:cd:38:ee:42:92:da:59:cc:fb:c7:3f:3e:3f:e1:43:38:
         11:33:b8:36:9f:c0:c4:c9:5a:54:b1:47:e8:24:44:d5:76:6e:
         bf:07:7e:ff:6c:dc:7e:62:b8:ad:98:d4:83:ff:75:11:d3:e9:
         eb:99:6c:d8:65:e3:7d:8a:67:b2:51:51:17:66:ed:68:41:34:
         29:e4:57:2d:de:e3:27:7b:35:31:f9:b5:3f:49:30:34:06:7e:
         89:99:c8:6a:45:af:29:94:32:13:93:fb:f6:b8:1d:88:a3:b5:
         49:2b:3f:6c:6c:3a:0f:f3:4f:43:84:04:cf:eb:ec:e5:e6:90:
         13:4b:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:35 2025 by rpki-client