Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e36342e302f32302d3234203d3e203233323433.roa
File:                     3138312e3137342e36342e302f32302d3234203d3e203233323433.roa (raw, json)
Hash identifier:          HBrRz+ubVuFzotAq9rWNEDG2+u9KuDBts/MghlAvL08=
Subject key identifier:   32:42:B3:DD:10:85:5E:AC:85:05:82:94:EA:89:89:D4:82:E6:73:5D
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       53F6EABA5AD16C107E40A3C3568F2D6A6786154F
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e36342e302f32302d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:41 +0000
ROA not before:           Tue 04 Feb 2025 18:20:41 +0000
ROA not after:            Tue 03 Feb 2026 18:25:41 +0000
asID:                     23243
IP address blocks:        181.174.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f6:ea:ba:5a:d1:6c:10:7e:40:a3:c3:56:8f:2d:6a:67:86:15:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:41 2025 GMT
            Not After : Feb  3 18:25:41 2026 GMT
        Subject: CN=3242B3DD10855EAC85058294EA8989D482E6735D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3b:be:88:71:49:50:16:1d:41:39:5e:30:0d:
                    6d:83:8f:e1:41:ed:ce:97:32:0b:51:1d:4a:64:30:
                    0f:47:7f:30:2e:41:c8:27:4b:79:b6:ef:b9:e8:9e:
                    59:24:ca:e0:b0:09:c4:bd:0d:03:4b:5b:55:88:00:
                    81:a7:63:3e:2e:a1:6f:5f:9a:dc:cf:c6:42:47:b7:
                    3b:74:64:e3:99:f5:f3:75:25:ac:a8:af:a8:69:be:
                    10:97:9d:3f:47:60:bb:73:eb:71:da:c2:b8:24:fa:
                    15:79:98:1b:7f:78:2c:f0:ca:c4:e9:2b:d3:5b:54:
                    0c:e7:1d:92:50:d4:a2:49:73:42:a5:5d:39:0e:38:
                    86:91:b7:08:a6:ea:22:ac:ad:a2:ea:7c:22:cf:90:
                    b8:57:06:34:33:03:af:40:0b:35:ed:2f:ea:ad:76:
                    30:c4:65:34:01:4d:14:8d:67:f2:4a:ee:b4:c5:f8:
                    42:fd:1a:d8:eb:5a:01:e4:89:91:b2:25:28:0f:47:
                    d5:4c:78:bb:76:81:9a:4b:1f:46:20:a7:15:18:6b:
                    c2:d6:79:4d:67:f7:c4:68:f6:35:d8:c3:4b:d8:22:
                    ae:4c:3d:65:9f:d2:62:58:4d:3e:d8:b5:9d:61:fa:
                    86:76:e8:56:7f:96:8b:cb:c6:8e:76:ec:82:2a:71:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:42:B3:DD:10:85:5E:AC:85:05:82:94:EA:89:89:D4:82:E6:73:5D
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3137342e36342e302f32302d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:a1:20:d0:97:9d:e0:84:c5:f9:a6:b6:26:ac:22:b1:1c:
         6f:a0:86:95:58:e1:47:56:5d:c2:ee:48:7c:02:64:e0:eb:14:
         d3:8a:8d:6b:0d:c2:43:81:a5:42:d0:ab:d2:f4:b2:a2:fa:c7:
         3a:6f:79:61:08:35:d0:9d:8d:39:1a:2e:9d:42:f0:34:ac:59:
         6a:1a:c0:0c:52:5c:0e:3f:d4:71:a1:fd:6a:de:d1:cd:7c:50:
         50:8f:d2:b0:a3:13:ab:96:a1:77:f8:82:ab:b1:30:9f:79:0b:
         a1:49:18:25:a5:7c:c2:49:3f:64:e1:7a:25:b5:e7:93:91:fc:
         e6:a2:50:6d:e4:94:5b:55:90:61:bb:a6:c0:da:00:16:80:e3:
         e1:7f:24:58:98:89:db:d6:12:43:23:78:bb:c4:9b:ae:bc:6c:
         50:72:e5:57:d8:5d:e8:3f:4a:3d:eb:50:f2:0e:b0:d7:f9:c3:
         05:78:f5:44:26:cd:ba:6c:d5:a9:18:ed:14:21:e5:b9:f1:f2:
         9a:a0:3e:2d:80:dd:cf:47:d1:c1:9c:07:b1:e0:ef:16:c7:3c:
         87:e6:98:01:d9:fe:c2:69:53:b1:d9:93:f1:ba:5d:90:d2:33:
         17:ff:69:48:6d:5a:0f:ed:7c:fa:67:2a:57:ed:a1:ed:4a:3c:
         30:89:12:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:55 2025 by rpki-client