Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa
File:                     3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa (raw, json)
Hash identifier:          WSVQAFlPZZ69/NdKodhr4sRUmh/sQA79CxVeRuFhDj4=
Subject key identifier:   16:D6:98:C7:CC:72:CF:91:A5:94:25:CF:9A:BD:FC:C8:12:A0:ED:DB
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       585F72FF085EDFD9237152D8806430B6B585B8F0
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa
Signing time:             Tue 04 Feb 2025 18:25:49 +0000
ROA not before:           Tue 04 Feb 2025 18:20:49 +0000
ROA not after:            Tue 03 Feb 2026 18:25:49 +0000
asID:                     52501
IP address blocks:        181.174.124.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5f:72:ff:08:5e:df:d9:23:71:52:d8:80:64:30:b6:b5:85:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:49 2025 GMT
            Not After : Feb  3 18:25:49 2026 GMT
        Subject: CN=16D698C7CC72CF91A59425CF9ABDFCC812A0EDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:f9:04:cc:94:34:d3:9f:55:fa:be:14:00:
                    63:22:ce:ca:96:c6:4c:f9:89:cc:dd:cf:8e:b4:2a:
                    6e:ec:a1:b8:7a:60:6b:62:70:86:44:7d:bb:7b:ef:
                    3d:32:da:6b:d7:b2:f5:f2:35:2f:bb:56:17:75:a2:
                    3c:88:82:fd:f5:b6:64:4a:2c:2f:82:4d:66:a1:d7:
                    c2:90:53:45:bb:d6:18:97:01:f0:42:22:53:87:09:
                    b9:95:2e:40:9b:e2:d8:d4:16:ae:c1:e0:34:b6:68:
                    9f:8b:31:07:d9:ea:fb:62:6e:dc:e9:b5:bb:1e:c3:
                    c8:45:f0:41:da:e7:a9:3e:8d:bb:1f:1a:7d:e8:58:
                    91:02:f3:26:d4:7a:ff:6b:22:1d:f0:19:16:76:fd:
                    e0:0a:85:cd:7b:eb:13:78:8a:87:0c:55:1d:a1:9e:
                    0d:ae:d5:15:8c:c8:98:92:eb:be:d5:6d:d1:a0:1f:
                    57:96:7f:23:e0:c7:9f:97:dd:f2:21:7b:44:24:ae:
                    d0:f6:19:47:cb:22:39:7b:49:e6:6b:62:d6:44:12:
                    18:09:ce:73:6a:26:39:56:0a:60:df:06:ca:a5:1c:
                    e2:3b:4c:8f:2b:05:28:a4:8a:10:2e:16:33:c4:cb:
                    d3:8e:0c:ef:6e:c9:ec:be:ad:41:2f:e1:b4:3f:5c:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D6:98:C7:CC:72:CF:91:A5:94:25:CF:9A:BD:FC:C8:12:A0:ED:DB
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132342e302f32342d3234203d3e203532353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:18:58:fa:0b:62:6b:5c:9b:a8:aa:c1:1f:b9:61:a2:92:
         c5:c0:02:1f:aa:6f:a3:29:ad:37:44:f9:7a:64:b1:52:bf:63:
         ac:49:7e:48:1f:96:48:14:d6:fd:85:1a:8c:24:8d:6c:36:ce:
         8d:1f:93:8b:41:c8:41:50:13:e4:1b:fb:2c:80:47:79:1b:2a:
         e7:cf:e0:84:c2:6e:ab:67:c2:97:63:15:03:4a:43:cb:63:c0:
         56:60:b3:1d:eb:7d:e2:23:a5:35:59:b8:49:29:b4:c2:fc:41:
         e2:19:3f:da:7c:1d:f3:82:42:59:d0:df:c5:ce:fd:01:fa:1d:
         da:14:e4:77:1b:1c:99:1c:2c:29:08:b4:aa:e2:cf:a0:a7:30:
         2d:2f:2f:36:62:30:00:51:74:78:f1:9e:44:f0:78:7d:fa:36:
         4d:5a:fe:72:95:bb:f4:68:0e:95:ce:ce:96:f0:67:0c:e0:4e:
         3a:f1:f9:c6:a6:1e:d9:9b:c3:96:31:d8:0b:17:5c:74:61:b4:
         90:e7:ee:ba:ed:e3:f2:d1:f4:15:af:87:e6:52:53:39:6d:d9:
         39:b9:e4:d6:d5:1c:d1:69:c3:f8:f3:48:3d:83:9d:fc:79:5c:
         0d:a9:c7:b4:06:96:74:a1:65:78:97:5b:cd:ee:32:fa:91:ea:
         1b:6a:1c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:19 2025 by rpki-client