Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa
File:                     3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa (raw, json)
Hash identifier:          G3BfiXx0qzJSzzDBWbn/GdzUy5qKXd1C8vLghExzqBw=
Subject key identifier:   8B:CA:67:2B:AE:F8:B3:C1:9D:27:04:50:8B:91:D6:30:1C:AC:E7:20
Certificate issuer:       /CN=241DE049AC3C932631785D79E6569AB7CF57A340
Certificate serial:       20EF5B239E28A2BCFAB70AAA0051F9EFB3369EE0
Authority key identifier: 24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa
Signing time:             Tue 04 Feb 2025 18:01:10 +0000
ROA not before:           Tue 04 Feb 2025 17:56:10 +0000
ROA not after:            Tue 03 Feb 2026 18:01:10 +0000
asID:                     264764
IP address blocks:        181.114.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ef:5b:23:9e:28:a2:bc:fa:b7:0a:aa:00:51:f9:ef:b3:36:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=241DE049AC3C932631785D79E6569AB7CF57A340
        Validity
            Not Before: Feb  4 17:56:10 2025 GMT
            Not After : Feb  3 18:01:10 2026 GMT
        Subject: CN=8BCA672BAEF8B3C19D2704508B91D6301CACE720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:a9:9b:ec:85:8a:e6:2f:2c:1f:ea:e3:25:
                    c2:e1:06:a1:e4:ba:b7:7e:84:9c:08:58:5b:41:4f:
                    87:02:c3:a0:91:ca:11:b1:6e:6f:fd:2e:8e:25:d4:
                    c5:85:33:92:86:4e:75:49:aa:ca:f9:22:c0:62:01:
                    0c:36:de:ac:d2:22:c5:9b:7c:53:14:b8:92:d3:ad:
                    12:1a:d5:87:79:71:46:cc:24:4f:24:2e:5c:7c:2d:
                    36:e1:bd:fe:85:fd:23:55:a1:2f:21:6f:9c:3a:23:
                    c5:7c:50:6c:7e:c5:07:ea:a8:78:4a:d4:fa:2c:cb:
                    31:48:1e:48:25:cd:92:7c:d3:ee:05:36:58:4b:94:
                    7b:11:d1:64:46:2c:b8:5c:c7:c0:e1:33:c4:a0:9d:
                    42:cc:6b:fd:1f:2c:66:37:5b:22:c7:0d:ff:fa:f2:
                    95:f4:10:99:14:a3:ed:11:95:11:fe:cf:8c:33:09:
                    64:f4:40:d6:bd:48:a0:6d:33:ac:cf:dc:02:94:43:
                    d6:b4:b0:8b:dc:f4:4f:07:81:3a:68:92:20:eb:f2:
                    87:44:df:4d:d9:ee:95:b4:b9:24:c6:22:fd:f7:7e:
                    35:c6:9e:40:c9:94:5f:3a:8e:5b:ae:91:c4:94:79:
                    6c:cc:e9:32:c7:ba:12:96:2f:de:e5:8b:f1:38:56:
                    87:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CA:67:2B:AE:F8:B3:C1:9D:27:04:50:8B:91:D6:30:1C:AC:E7:20
            X509v3 Authority Key Identifier:
                keyid:24:1D:E0:49:AC:3C:93:26:31:78:5D:79:E6:56:9A:B7:CF:57:A3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/241DE049AC3C932631785D79E6569AB7CF57A340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/241DE049AC3C932631785D79E6569AB7CF57A340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D8F51B1D1657BF366614511A20581BDED03B32FBCD5E9D471AF986BA436211B/0/3138312e3131342e31322e302f32342d3234203d3e20323634373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:5c:8d:fc:05:db:4c:fe:85:0d:07:68:be:41:c2:72:cf:ea:
         a9:08:d4:7b:f0:70:db:fc:b0:a0:5d:0b:8e:20:71:b4:63:68:
         89:96:db:6a:55:cb:10:ee:19:c3:2b:a9:1a:51:30:7f:27:0f:
         cb:45:b3:4c:aa:c0:38:10:5c:9f:ec:f4:b2:94:de:76:01:1b:
         d7:b0:08:80:17:3c:a4:a1:b9:2f:76:7a:8d:e6:c5:2a:40:b5:
         8f:f5:32:26:54:24:9b:e9:94:6d:b7:8e:de:8d:b9:dc:3f:9e:
         a9:f6:a1:ec:39:d8:9b:05:ec:67:b2:2f:5d:5e:f7:5e:74:c0:
         4e:22:f1:29:ce:0f:3b:21:77:38:0e:c5:9a:15:d1:22:48:81:
         2a:b0:43:17:c6:c4:02:55:71:d3:e4:f0:05:b8:29:00:51:c5:
         43:6c:73:93:6d:b6:40:07:f0:0c:18:94:a4:da:2a:2d:d5:44:
         2e:10:1d:a8:d6:8a:13:53:b1:5e:50:bd:3b:6f:64:4c:39:56:
         5b:74:d6:d7:46:81:bf:29:10:8b:2a:f8:a2:73:81:8f:81:c7:
         29:79:37:a2:58:8c:c3:45:ce:be:e8:53:01:05:0f:4b:25:37:
         d4:bf:82:81:0a:6e:70:49:98:5b:d4:79:07:3f:98:d6:66:4c:
         54:bd:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:40 2025 by rpki-client