Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32332d3233203d3e20323635363838.roa
File:                     3138312e3137342e3232382e302f32332d3233203d3e20323635363838.roa (raw, json)
Hash identifier:          v5h6l995Hb7yOMuMm+/XoRsYwJDqggUAVb2a0vRk+4Y=
Subject key identifier:   16:2E:E6:D4:F5:8F:B3:BE:CC:A4:D4:B1:D4:D4:23:C1:06:C8:33:71
Certificate issuer:       /CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
Certificate serial:       6990949410D2CF35482736D4F665DD6E9019BA07
Authority key identifier: C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32332d3233203d3e20323635363838.roa
Signing time:             Fri 07 Mar 2025 16:11:27 +0000
ROA not before:           Fri 07 Mar 2025 16:06:27 +0000
ROA not after:            Fri 06 Mar 2026 16:11:27 +0000
asID:                     265688
IP address blocks:        181.174.228.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:90:94:94:10:d2:cf:35:48:27:36:d4:f6:65:dd:6e:90:19:ba:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C274FF55FBE54DCF3A4879BE94792462D4B95DA0
        Validity
            Not Before: Mar  7 16:06:27 2025 GMT
            Not After : Mar  6 16:11:27 2026 GMT
        Subject: CN=162EE6D4F58FB3BECCA4D4B1D4D423C106C83371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:b8:db:68:35:e0:75:ce:7d:05:af:62:59:
                    b4:0a:d3:79:15:14:07:41:c9:7a:74:e2:a4:47:15:
                    18:7d:cf:1a:63:f6:75:64:5d:bb:54:5e:db:05:e7:
                    95:50:ff:82:3b:31:ce:b2:f1:8c:33:eb:35:2b:1e:
                    b1:55:02:58:52:79:90:e0:a4:a4:d7:b7:38:ee:00:
                    39:c6:6e:c7:4d:c4:ff:f4:b5:74:55:36:aa:63:1d:
                    15:6f:ea:87:02:1a:90:75:bc:56:5d:3f:f7:28:80:
                    c9:3e:7e:df:a0:84:2a:52:dc:4c:06:ac:56:05:bc:
                    cc:eb:ca:2e:5b:8d:5e:1f:18:ca:2f:92:a4:f9:f6:
                    e8:ff:c1:1d:bf:08:8b:bd:7f:ab:82:50:98:5e:12:
                    7b:b6:dc:a5:3f:b5:86:f0:a2:93:64:81:f4:0c:2e:
                    89:9e:12:72:f2:85:57:4d:a1:19:a7:00:5b:36:83:
                    b8:64:b8:39:b6:1c:4d:13:41:8f:9e:8c:59:0e:a1:
                    f7:a3:2f:ea:5f:55:92:95:76:f0:72:5d:7d:88:f9:
                    13:92:a4:76:50:bb:02:d4:ff:56:a7:2b:f9:14:15:
                    e1:2b:fc:d8:96:82:44:c0:0a:79:59:3d:a2:37:fa:
                    04:c9:74:cd:44:d7:9a:f2:24:38:2a:b8:e8:14:93:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:E6:D4:F5:8F:B3:BE:CC:A4:D4:B1:D4:D4:23:C1:06:C8:33:71
            X509v3 Authority Key Identifier:
                keyid:C2:74:FF:55:FB:E5:4D:CF:3A:48:79:BE:94:79:24:62:D4:B9:5D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C274FF55FBE54DCF3A4879BE94792462D4B95DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C64BD526ADD57CE18E7AC36EB8088B7B018DB0203C7C50088B832B91A6EE897/0/3138312e3137342e3232382e302f32332d3233203d3e20323635363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:bc:38:11:b7:08:ab:b7:23:31:54:54:13:7b:ca:b1:17:e4:
         a2:61:d3:fb:9e:b5:dc:1f:7b:76:73:e2:9f:11:fe:70:bd:24:
         b9:c9:cc:f3:cb:5c:8e:9a:55:7d:cd:47:03:d0:d0:91:af:85:
         f2:d3:65:b4:c4:ba:62:8b:30:8a:73:8b:1e:38:08:35:59:6a:
         29:88:93:3e:89:c2:1d:e2:e9:68:46:0f:41:fb:4f:7e:f3:ff:
         8c:d4:47:f2:2c:0e:dc:bc:aa:c3:62:96:14:2f:9a:bc:9f:41:
         a6:56:5d:d0:f3:cb:bd:c5:8b:b3:c9:c5:f2:e6:23:ad:b7:04:
         4c:df:fb:c3:e3:55:ac:e9:ce:7d:77:66:92:65:e5:4f:2a:e5:
         37:47:41:9e:2a:50:67:f1:53:2d:53:b6:99:d5:8f:55:fb:97:
         ef:7f:2a:72:9d:b8:f0:50:e2:e0:71:40:5a:54:dd:f5:26:b1:
         39:91:e7:ff:a1:7c:0d:98:bf:7b:f2:21:9a:5b:60:4d:1f:48:
         c5:72:03:dd:ec:58:f0:83:e4:91:c6:73:84:10:89:9e:1a:f9:
         33:4a:af:1d:04:5f:0f:e4:92:81:e9:85:1c:fc:7e:1d:e2:80:
         67:66:e7:2f:e8:ab:2f:9f:76:24:e0:90:07:16:23:cb:4c:29:
         44:ee:f0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:05:56 2025 by rpki-client