Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3138312e36342e302e302f31342d3234203d3e2036313437.roa
File:                     3138312e36342e302e302f31342d3234203d3e2036313437.roa (raw, json)
Hash identifier:          x3GEvRTUBmpxaFNIlvT9V1NurzWTe9PzlV45wczBuZg=
Subject key identifier:   2E:9F:34:EB:FC:67:B5:04:F2:6E:11:98:C6:5D:6D:B8:E8:18:2A:D0
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       4F5EDF29CEB85D00CFB17270CB3C87AB7CCF21D0
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3138312e36342e302e302f31342d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:12 +0000
ROA not before:           Tue 04 Feb 2025 20:00:12 +0000
ROA not after:            Tue 03 Feb 2026 20:05:12 +0000
asID:                     6147
IP address blocks:        181.64.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5e:df:29:ce:b8:5d:00:cf:b1:72:70:cb:3c:87:ab:7c:cf:21:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:12 2025 GMT
            Not After : Feb  3 20:05:12 2026 GMT
        Subject: CN=2E9F34EBFC67B504F26E1198C65D6DB8E8182AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:dc:53:ba:de:48:f0:43:db:d1:e8:bc:cc:
                    98:88:df:d0:66:43:7c:95:d0:cc:eb:fc:de:27:d5:
                    1c:e7:20:89:3c:f3:1c:c9:2b:15:ca:99:c1:05:1c:
                    75:2c:24:ea:72:3a:36:6f:79:a1:7e:62:d6:d4:12:
                    b5:97:ce:d3:ba:4a:a5:14:39:38:37:5f:51:94:9a:
                    83:cd:07:64:89:52:bd:7c:8e:a4:d5:3f:84:83:04:
                    5a:1f:1f:df:6a:cf:36:94:9f:dc:7c:bd:77:b5:76:
                    10:0b:80:10:6e:70:46:99:57:45:ba:a3:46:2e:3e:
                    59:00:b1:ab:d8:66:a1:37:61:eb:8d:02:01:49:71:
                    cb:19:16:b6:00:74:f3:1a:3d:96:dd:70:7b:dc:53:
                    a6:77:b8:35:63:89:8b:70:a9:ac:fd:f4:95:5d:54:
                    2d:79:25:2e:45:93:3a:f8:27:56:c0:2f:c0:b8:98:
                    96:f1:d7:2f:a2:95:8a:cd:9a:ba:54:6e:6c:25:84:
                    04:27:5c:91:99:80:d8:8f:ce:56:7c:59:c0:fe:6f:
                    e5:69:b9:6b:68:bf:31:af:2c:55:b5:b7:e0:b9:dd:
                    c8:11:d6:ae:54:9d:33:52:ac:49:fd:5f:31:e0:09:
                    57:4f:28:05:44:2f:1f:76:5f:bc:31:db:12:7f:fa:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9F:34:EB:FC:67:B5:04:F2:6E:11:98:C6:5D:6D:B8:E8:18:2A:D0
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3138312e36342e302e302f31342d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.64.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8e:26:4a:83:0d:24:cf:43:f2:f6:25:99:b0:4a:18:b2:6e:b1:
         2c:78:38:f8:9d:f7:9d:26:28:31:8d:8f:ca:72:b4:6b:83:db:
         86:e0:be:ba:61:d3:cb:0e:3c:67:87:67:8a:af:4c:26:fc:d5:
         ac:92:b3:3e:c1:1c:e9:ff:7c:35:ea:58:95:18:ed:9b:ff:e4:
         96:dc:57:6f:47:9c:4f:d1:12:f4:17:06:ac:2d:31:36:6f:3e:
         18:4e:38:74:0f:5a:99:0a:81:2f:f7:f6:92:93:26:a1:05:b8:
         4c:25:87:d6:7e:94:ca:91:34:d3:d7:4a:d9:e8:5f:94:0e:91:
         be:b7:bd:85:80:bc:fe:cd:83:85:38:ca:34:cb:63:78:87:d1:
         1a:c5:e9:1a:47:cb:ea:95:e1:76:40:cc:3a:73:35:c5:02:4a:
         4c:fd:6b:40:a1:34:91:d3:11:a8:33:53:a5:9d:aa:2a:38:99:
         ba:7f:22:05:69:a9:75:fb:4a:d0:88:ad:0e:cd:db:a9:d9:83:
         30:74:cc:3e:f7:23:c3:52:6a:9d:90:4f:f7:e4:28:da:0f:bc:
         05:ad:1d:81:6b:d0:1a:2b:d3:0b:08:31:ed:24:f4:77:10:2f:
         e6:51:c1:da:93:2d:5f:28:e9:3f:89:63:7a:42:05:db:7e:c9:
         4f:4e:c8:ec
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUT17fKc64XQDPsXJwyzyHq3zPIdAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3NDk5RUU0OUY2RTQ1RjUwQzQ4NjBCRTc5RDc5Q0JE
N0NCNTdCMTAeFw0yNTAyMDQyMDAwMTJaFw0yNjAyMDMyMDA1MTJaMDMxMTAvBgNV
BAMTKDJFOUYzNEVCRkM2N0I1MDRGMjZFMTE5OEM2NUQ2REI4RTgxODJBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9dxTut5I8EPb0ei8zJiI39Bm
Q3yV0Mzr/N4n1RznIIk88xzJKxXKmcEFHHUsJOpyOjZveaF+YtbUErWXztO6SqUU
OTg3X1GUmoPNB2SJUr18jqTVP4SDBFofH99qzzaUn9x8vXe1dhALgBBucEaZV0W6
o0YuPlkAsavYZqE3YeuNAgFJccsZFrYAdPMaPZbdcHvcU6Z3uDVjiYtwqaz99JVd
VC15JS5Fkzr4J1bAL8C4mJbx1y+ilYrNmrpUbmwlhAQnXJGZgNiPzlZ8WcD+b+Vp
uWtovzGvLFW1t+C53cgR1q5UnTNSrEn9XzHgCVdPKAVELx92X7wx2xJ/+sJvAgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQULp806/xntQTybhGYxl1tuOgYKtAwHwYDVR0j
BBgwFoAUdHSZ7kn25F9QxIYL5515y9fLV7EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NTAyQTIxMjZGRUYzMzhEMzlDOEI3NDM5MjBDMUJBMjI0
MTA3Q0ZEMTI2MzU1MEZDOTJGNEQ1OEVEMUEzQzJCLzAvNzQ3NDk5RUU0OUY2RTQ1
RjUwQzQ4NjBCRTc5RDc5Q0JEN0NCNTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NDc0OTlFRTQ5RjZFNDVGNTBD
NDg2MEJFNzlENzlDQkQ3Q0I1N0IxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTUwMkEyMTI2RkVGMzM4RDM5QzhCNzQzOTIwQzFCQTIyNDEwN0NGRDEy
NjM1NTBGQzkyRjRENThFRDFBM0MyQi8wLzMxMzgzMTJlMzYzNDJlMzAyZTMwMmYz
MTM0MmQzMjM0MjAzZDNlMjAzNjMxMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDArVAMA0GCSqGSIb3
DQEBCwUAA4IBAQCOJkqDDSTPQ/L2JZmwShiybrEseDj4nfedJigxjY/KcrRrg9uG
4L66YdPLDjxnh2eKr0wm/NWskrM+wRzp/3w16liVGO2b/+SW3FdvR5xP0RL0Fwas
LTE2bz4YTjh0D1qZCoEv9/aSkyahBbhMJYfWfpTKkTTT10rZ6F+UDpG+t72FgLz+
zYOFOMo0y2N4h9EaxekaR8vqleF2QMw6czXFAkpM/WtAoTSR0xGoM1OlnaoqOJm6
fyIFaal1+0rQiK0Ozdup2YMwdMw+9yPDUmqdkE/35CjaD7wFrR2Ba9AaK9MLCDHt
JPR3EC/mUcHaky1fKOk/iWN6QgXbfslPTsjs
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:15 2025 by rpki-client