Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/3138312e3138392e31362e302f32322d3234203d3e20323732303736.roa
File:                     3138312e3138392e31362e302f32322d3234203d3e20323732303736.roa (raw, json)
Hash identifier:          N+aQVcoSXErsI4DrFsdoWYq55WCYa0r8b99BkVT5a4Y=
Subject key identifier:   95:A5:F1:B8:B5:22:61:B2:7C:BF:13:8B:81:0B:37:6F:7B:14:6D:A2
Certificate issuer:       /CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
Certificate serial:       6147727BFDA93110B662AEB4343FF7D0EF426F37
Authority key identifier: B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/3138312e3138392e31362e302f32322d3234203d3e20323732303736.roa
Signing time:             Tue 04 Feb 2025 18:42:57 +0000
ROA not before:           Tue 04 Feb 2025 18:37:57 +0000
ROA not after:            Tue 03 Feb 2026 18:42:57 +0000
asID:                     272076
IP address blocks:        181.189.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:47:72:7b:fd:a9:31:10:b6:62:ae:b4:34:3f:f7:d0:ef:42:6f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E6E0F4D1881DF1650FAA51448C145AD4B30D87
        Validity
            Not Before: Feb  4 18:37:57 2025 GMT
            Not After : Feb  3 18:42:57 2026 GMT
        Subject: CN=95A5F1B8B52261B27CBF138B810B376F7B146DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:51:76:88:b4:be:33:ea:43:5f:ac:39:c2:2b:
                    7a:e5:ab:38:10:cf:d8:e4:b7:df:42:22:fa:fd:86:
                    18:66:4e:58:fc:f0:08:9f:d5:d8:0e:d7:b0:c6:02:
                    25:5e:a3:28:39:ba:bf:38:35:df:5d:63:96:b4:1a:
                    f7:1a:cd:a8:ed:a4:3e:d5:21:16:07:ff:2c:ca:a1:
                    cf:02:58:fe:71:20:ab:00:fe:61:48:df:d3:9d:b9:
                    84:ff:22:7b:1a:59:42:d6:cb:e8:52:5e:4e:52:0c:
                    03:fa:25:12:d3:ef:6c:8a:ae:6e:52:0e:80:27:43:
                    26:ae:5d:fb:28:21:ce:34:82:71:e3:ed:d5:aa:53:
                    21:f7:0e:e7:ef:5c:ab:02:70:e3:61:9e:d2:3c:bf:
                    5b:44:ca:38:03:43:94:b0:f7:f8:93:a7:7b:33:83:
                    41:b9:ed:fb:a8:4a:cd:e9:8a:e5:99:db:47:cf:ba:
                    06:75:21:91:5e:f4:6c:99:4f:ee:54:76:9a:f0:d7:
                    cb:fb:86:60:4e:39:a0:1d:52:b3:2c:68:78:ab:8a:
                    f8:99:41:0b:43:37:52:99:a4:e9:e9:e4:87:48:42:
                    cc:c5:89:17:0a:6e:61:94:d1:a6:cf:c7:92:24:96:
                    c0:67:65:ae:f6:33:8b:7d:72:23:03:c3:c5:54:a5:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A5:F1:B8:B5:22:61:B2:7C:BF:13:8B:81:0B:37:6F:7B:14:6D:A2
            X509v3 Authority Key Identifier:
                keyid:B8:E6:E0:F4:D1:88:1D:F1:65:0F:AA:51:44:8C:14:5A:D4:B3:0D:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8E6E0F4D1881DF1650FAA51448C145AD4B30D87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFBD48372349666610C369F136B6EA5CD82C80EB6403B9EC6974E6B3481C2E4/0/3138312e3138392e31362e302f32322d3234203d3e20323732303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:b4:99:a3:16:27:4d:0a:79:6f:c7:76:74:8b:df:a8:4e:
         71:a7:1e:38:ca:d9:8a:d7:c3:39:c4:9f:17:0e:c0:21:bb:66:
         42:c2:e0:08:f0:44:f0:03:c1:57:15:cf:e9:02:be:d0:a9:ef:
         03:af:41:5d:a2:4e:bb:b3:0b:d9:7e:14:a8:67:a6:4d:df:e6:
         da:b3:16:42:00:c5:92:9a:97:15:a1:51:fa:aa:24:8d:fd:d0:
         7a:22:de:a0:8d:36:0c:3f:a4:50:5b:3f:ad:49:ec:2c:ed:a8:
         85:5a:e4:78:42:77:93:dc:fe:39:3b:56:90:52:94:ca:e5:2b:
         b2:2a:a6:67:4a:08:01:d2:3d:ce:e1:43:95:24:31:27:5b:5b:
         f8:a7:42:5c:64:e4:4d:52:eb:54:3b:b9:b5:24:13:eb:14:6f:
         da:c3:22:31:c3:ec:47:12:e0:0f:da:32:46:ac:d2:78:8e:c1:
         3b:ea:cb:8a:eb:2f:e9:46:b4:22:2f:55:4a:1e:65:98:87:b3:
         c4:43:72:a3:d6:ca:a8:21:69:90:42:e5:71:71:02:9c:34:dc:
         62:42:a8:af:90:cb:50:cc:96:15:1d:44:e9:21:67:1f:80:5a:
         c7:2d:6b:15:79:99:cd:94:40:71:3c:37:c5:a0:61:39:3f:4a:
         f9:f0:d9:59
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYUdye/2pMRC2Yq60ND/30O9CbzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjhFNkUwRjREMTg4MURGMTY1MEZBQTUxNDQ4QzE0NUFE
NEIzMEQ4NzAeFw0yNTAyMDQxODM3NTdaFw0yNjAyMDMxODQyNTdaMDMxMTAvBgNV
BAMTKDk1QTVGMUI4QjUyMjYxQjI3Q0JGMTM4QjgxMEIzNzZGN0IxNDZEQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUXaItL4z6kNfrDnCK3rlqzgQ
z9jkt99CIvr9hhhmTlj88Aif1dgO17DGAiVeoyg5ur84Nd9dY5a0GvcazajtpD7V
IRYH/yzKoc8CWP5xIKsA/mFI39OduYT/InsaWULWy+hSXk5SDAP6JRLT72yKrm5S
DoAnQyauXfsoIc40gnHj7dWqUyH3DufvXKsCcONhntI8v1tEyjgDQ5Sw9/iTp3sz
g0G57fuoSs3piuWZ20fPugZ1IZFe9GyZT+5Udprw18v7hmBOOaAdUrMsaHiriviZ
QQtDN1KZpOnp5IdIQszFiRcKbmGU0abPx5IklsBnZa72M4t9ciMDw8VUpX7lAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlaXxuLUiYbJ8vxOLgQs3b3sUbaIwHwYDVR0j
BBgwFoAUuObg9NGIHfFlD6pRRIwUWtSzDYcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82RUZCRDQ4MzcyMzQ5NjY2NjEwQzM2OUYxMzZCNkVBNUNE
ODJDODBFQjY0MDNCOUVDNjk3NEU2QjM0ODFDMkU0LzAvQjhFNkUwRjREMTg4MURG
MTY1MEZBQTUxNDQ4QzE0NUFENEIzMEQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9COEU2RTBGNEQxODgxREYxNjUw
RkFBNTE0NDhDMTQ1QUQ0QjMwRDg3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkVGQkQ0ODM3MjM0OTY2NjYxMEMzNjlGMTM2QjZFQTVDRDgyQzgwRUI2
NDAzQjlFQzY5NzRFNkIzNDgxQzJFNC8wLzMxMzgzMTJlMzEzODM5MmUzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzNzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtb0Q
MA0GCSqGSIb3DQEBCwUAA4IBAQBOxrSZoxYnTQp5b8d2dIvfqE5xpx44ytmK18M5
xJ8XDsAhu2ZCwuAI8ETwA8FXFc/pAr7Qqe8Dr0Fdok67swvZfhSoZ6ZN3+basxZC
AMWSmpcVoVH6qiSN/dB6It6gjTYMP6RQWz+tSews7aiFWuR4QneT3P45O1aQUpTK
5SuyKqZnSggB0j3O4UOVJDEnW1v4p0JcZORNUutUO7m1JBPrFG/awyIxw+xHEuAP
2jJGrNJ4jsE76suK6y/pRrQiL1VKHmWYh7PEQ3Kj1sqoIWmQQuVxcQKcNNxiQqiv
kMtQzJYVHUTpIWcfgFrHLWsVeZnNlEBxPDfFoGE5P0r58NlZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:28 2025 by rpki-client