Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa
File:                     3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          63GT2nc3Gn3LNizOGrDdY9GFwNUwe+f8OR2KMMNwHPM=
Subject key identifier:   71:0C:DE:00:07:F8:8F:33:3C:7C:F0:27:C4:E2:E9:C8:D9:2D:76:B4
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       240794638FDA9879A05113A357C80B33E36552D7
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:46 +0000
ROA not before:           Tue 04 Feb 2025 18:20:46 +0000
ROA not after:            Tue 03 Feb 2026 18:25:46 +0000
asID:                     23243
IP address blocks:        181.174.126.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:07:94:63:8f:da:98:79:a0:51:13:a3:57:c8:0b:33:e3:65:52:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:46 2025 GMT
            Not After : Feb  3 18:25:46 2026 GMT
        Subject: CN=710CDE0007F88F333C7CF027C4E2E9C8D92D76B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:c5:c2:d9:2f:4a:25:66:74:1e:35:06:48:
                    20:7a:aa:39:47:fa:24:8a:8c:22:4d:b8:54:20:c8:
                    77:14:52:0a:95:32:99:3a:04:8f:05:89:90:29:74:
                    22:03:10:fb:4c:e1:45:8b:55:4f:21:1d:b5:ac:c8:
                    bf:6d:30:86:05:55:87:7f:4f:a7:9b:bd:e1:75:ab:
                    89:6c:16:e6:04:ef:22:c4:e3:18:82:29:b7:84:08:
                    f2:bd:af:86:f2:17:9c:81:b6:3c:50:1d:95:0a:2e:
                    cf:d8:cd:6e:e6:cc:58:70:0a:3c:54:08:b5:35:af:
                    ce:e4:f4:99:2d:5a:0f:10:d7:d0:02:aa:59:1f:96:
                    4d:fd:f7:67:f8:d1:c4:ee:3f:ed:c6:31:fa:00:18:
                    1d:01:5c:fb:10:cc:da:9c:2a:54:45:35:c6:86:5e:
                    c6:cd:40:d8:f9:3e:ad:35:0a:af:81:08:fa:1a:36:
                    4b:c9:d5:b6:c0:5e:bd:bf:77:a1:f4:25:86:4b:05:
                    c4:46:ac:6a:b0:fa:9d:71:43:2a:27:01:cf:76:95:
                    2d:82:50:39:51:61:f6:96:6d:fa:49:bd:9b:82:29:
                    78:a7:06:8d:92:79:ab:d8:19:e6:a4:fe:70:81:16:
                    29:be:6c:19:9c:56:a6:69:c9:54:71:ae:d5:3f:7a:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0C:DE:00:07:F8:8F:33:3C:7C:F0:27:C4:E2:E9:C8:D9:2D:76:B4
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e3132362e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:a8:3b:9a:f4:ea:52:14:a1:ab:40:74:b9:e9:d2:de:bf:55:
         93:88:22:da:14:d8:69:03:b0:39:86:23:19:63:eb:10:d3:35:
         44:dd:c0:3a:e6:89:e6:7f:b6:8f:70:84:a3:11:d2:6e:7a:79:
         f7:1b:8b:0e:ef:d8:fe:10:ab:14:34:95:c5:fd:dd:b2:23:ea:
         e8:38:1e:cd:9f:b1:b2:76:73:a2:e5:6f:14:15:d1:83:b4:18:
         b0:e8:ae:d4:1a:c9:cb:f2:ea:40:a3:01:dd:3d:0e:60:cf:0a:
         ed:9c:36:d1:47:a0:e6:eb:67:b3:db:a6:8a:1a:ae:83:05:43:
         55:da:4d:7c:7c:91:d0:35:71:75:56:51:fa:7c:7c:f9:a1:35:
         73:0b:18:90:4a:27:9e:89:5f:ac:6b:02:fb:bf:fe:9a:59:76:
         27:8c:e2:1f:23:a8:24:c5:40:57:21:9d:6d:3e:1a:b6:fa:61:
         f2:f3:55:ca:57:de:f2:2e:ce:c1:d0:b8:0d:b6:03:d0:b2:68:
         84:30:1e:9e:94:99:34:71:82:8a:a6:9b:c0:e8:ad:9f:d5:64:
         5e:8d:13:4b:ab:73:53:43:e7:9e:8b:d0:53:dd:64:39:62:fd:
         93:aa:a3:35:d1:d0:f2:df:d2:13:f5:fe:c8:d0:89:ba:45:0a:
         24:2e:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:42 2025 by rpki-client