Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa
File:                     3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa (raw, json)
Hash identifier:          7Qqp7wpYCrMIDHUyPCEjPeoZZG/HllDAfNNJn9yxAt4=
Subject key identifier:   75:33:A5:6D:AF:D5:A6:66:DB:29:87:2D:18:71:71:7C:53:BF:18:10
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       43B8BC7E3A2827DEC5014ABCF8114771EC90ECB1
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa
Signing time:             Tue 04 Feb 2025 18:15:00 +0000
ROA not before:           Tue 04 Feb 2025 18:10:00 +0000
ROA not after:            Tue 03 Feb 2026 18:15:00 +0000
asID:                     52312
IP address blocks:        181.177.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b8:bc:7e:3a:28:27:de:c5:01:4a:bc:f8:11:47:71:ec:90:ec:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Feb  4 18:10:00 2025 GMT
            Not After : Feb  3 18:15:00 2026 GMT
        Subject: CN=7533A56DAFD5A666DB29872D1871717C53BF1810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:ea:8f:95:45:b3:6d:72:e5:31:fd:32:c3:
                    98:0a:ee:b8:f5:78:0d:01:d1:6e:24:30:07:1e:19:
                    e2:41:74:45:ad:1f:e4:cf:cc:95:cf:e8:b4:51:86:
                    cf:fc:a4:6a:da:c3:4c:9e:a8:01:96:de:21:bf:e0:
                    8d:fd:e1:b5:11:a3:19:25:02:73:81:40:bb:a1:f3:
                    3e:2b:1b:ef:1d:e9:bd:b3:39:17:f9:2a:3f:97:e6:
                    d0:c5:9d:10:af:43:a9:ee:a8:b8:a4:fd:b1:37:c2:
                    ef:22:e0:06:00:02:16:ee:e3:41:15:f8:61:0b:5a:
                    8a:04:74:18:69:b7:d8:b6:ca:5e:3d:96:8b:83:fb:
                    f3:ce:ea:e1:6f:15:69:64:2a:42:b5:bf:94:5a:27:
                    f6:d6:1a:71:72:50:78:32:fb:bf:08:64:48:1f:77:
                    b7:7d:52:b8:6b:3f:55:69:a7:1c:6f:bc:38:15:04:
                    6c:15:b4:cb:9a:37:5a:c4:d7:51:ea:54:ad:34:0f:
                    98:bc:4f:97:49:7d:a8:15:b4:22:00:56:78:b8:05:
                    61:1f:02:b1:d0:e6:02:f6:a6:c8:1e:72:5f:ce:c1:
                    23:26:a5:fd:c9:2c:45:6a:59:30:7e:25:dc:d8:99:
                    c9:f1:e9:09:a5:0b:30:0b:22:7e:a6:b0:e4:2c:ed:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:33:A5:6D:AF:D5:A6:66:DB:29:87:2D:18:71:71:7C:53:BF:18:10
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3138312e3137372e3139322e302f32312d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:53:0d:67:a9:de:9e:f9:54:45:1d:ff:4d:f2:e7:bf:d0:62:
         50:d9:9b:23:8b:16:d1:f8:b2:16:fa:36:b0:90:b1:6c:9a:86:
         ad:c6:0b:0e:67:4d:a1:4f:62:58:e6:7a:fc:e7:a6:4b:bb:a5:
         55:6d:cd:08:de:b6:a0:1c:0c:72:7b:84:c8:d2:0c:94:15:1e:
         02:fa:52:d3:02:43:28:d9:01:95:2b:13:01:f9:19:62:84:0e:
         06:51:2e:0d:ab:b1:2e:73:b0:9b:f8:4c:f7:cf:d5:ce:b5:78:
         b0:22:cf:8b:78:79:57:81:01:31:28:d4:ae:aa:fc:f2:60:be:
         e8:06:3b:17:b9:3d:af:1b:c0:9c:c9:b8:a5:4a:4d:0c:d3:06:
         4c:74:8a:ea:5c:d0:aa:fb:06:c9:c0:de:5f:c4:39:06:18:1d:
         d6:41:ce:22:e7:5b:8d:e2:f6:0c:3e:a4:72:33:ec:91:6e:e7:
         f2:99:44:59:8e:68:ec:f1:09:c8:3d:dc:bc:0f:0f:bd:fd:cf:
         b6:6b:63:cf:08:8d:ce:1f:66:45:d4:1e:68:48:58:31:8c:b0:
         c8:3f:8a:f1:da:85:e0:99:d8:5b:07:7d:a5:b6:44:01:46:9f:
         58:33:a7:04:7e:26:63:db:85:82:a9:53:2e:23:0d:d8:60:70:
         70:35:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:35 2025 by rpki-client