Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa
File:                     3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          xI6coXmBKnMeJiGCokeZYvvlPpzBV/zPRdxfZfDafRQ=
Subject key identifier:   C6:96:7D:E8:6A:55:5D:12:5B:0D:0D:42:3B:CB:EB:79:DF:E9:93:9D
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       34AAB1ABC308E206524874D50DE3692CB01F3926
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:46 +0000
ROA not before:           Tue 04 Feb 2025 18:20:46 +0000
ROA not after:            Tue 03 Feb 2026 18:25:46 +0000
asID:                     23243
IP address blocks:        181.189.134.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:aa:b1:ab:c3:08:e2:06:52:48:74:d5:0d:e3:69:2c:b0:1f:39:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:46 2025 GMT
            Not After : Feb  3 18:25:46 2026 GMT
        Subject: CN=C6967DE86A555D125B0D0D423BCBEB79DFE9939D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3e:2b:45:b8:1a:de:ce:d6:eb:4c:4f:ca:aa:
                    90:f9:40:14:15:3f:e1:e9:9b:66:5d:f5:f6:ff:f3:
                    39:2a:dd:11:f4:1b:9c:98:35:1d:a0:e3:e7:f3:30:
                    e1:e3:bf:46:d9:65:41:38:8f:5b:a9:38:5c:72:d5:
                    0d:32:87:fc:3d:98:64:4d:81:23:4d:46:e8:91:5f:
                    31:6c:66:1f:51:2c:ba:22:9b:4a:5e:2d:37:26:88:
                    af:06:61:a1:e3:18:7c:af:07:c6:62:05:cc:2d:38:
                    68:d5:82:48:4e:41:cc:51:fb:7f:7a:7b:cc:15:0b:
                    64:0f:22:61:71:f4:f5:03:53:37:e9:66:a7:fc:bd:
                    3a:64:a9:43:81:95:44:e7:46:55:33:ca:8b:73:91:
                    fa:36:b2:3d:af:1d:9e:dc:81:e1:60:82:7a:49:0b:
                    c4:60:c1:61:3d:5f:72:a5:50:25:df:ca:f9:4a:5e:
                    9b:c4:fe:fe:b6:b9:71:43:ed:c7:e2:44:e6:bf:18:
                    fd:78:1d:e3:56:a4:8c:0d:d4:67:0b:17:dd:d9:e6:
                    63:5d:d1:f1:44:2b:3a:30:34:70:43:a7:f8:40:22:
                    1f:ed:59:af:92:a1:e2:cb:ae:fc:95:11:2c:94:7a:
                    f7:dd:eb:de:bf:b3:f9:54:b0:e8:b7:e8:f3:29:f1:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:96:7D:E8:6A:55:5D:12:5B:0D:0D:42:3B:CB:EB:79:DF:E9:93:9D
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3138312e3138392e3133342e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:00:1e:12:94:f0:c7:d2:06:d1:1a:6d:d6:73:94:4e:1d:
         7a:a9:fc:28:a4:7a:58:76:04:70:a9:ba:e0:c1:53:60:7c:5c:
         10:57:eb:de:67:12:ef:fb:08:35:0c:29:c6:5e:94:2d:fa:87:
         c8:23:4b:e1:24:d4:0b:0c:5d:c9:48:6c:f0:e0:e5:16:95:56:
         95:65:60:1e:a6:5c:ae:f3:fd:e1:7a:a1:cf:88:20:79:e4:2f:
         80:c1:e1:75:43:d5:b2:8d:4a:10:c4:5a:7f:82:ff:68:d2:da:
         cd:d3:94:89:06:35:23:a8:73:60:2b:aa:66:1b:86:fb:60:12:
         07:73:8c:17:8d:d9:ff:c1:1a:43:a4:62:25:50:67:81:bd:e5:
         ac:87:08:c4:31:6d:73:fc:69:8e:71:5f:7f:85:07:87:6f:8d:
         85:f8:31:e8:dd:6d:fe:98:13:2d:90:79:5f:f5:03:b7:c1:51:
         75:05:9e:dd:7d:88:e4:ed:e6:78:13:12:52:93:a6:52:14:30:
         50:d5:61:2e:92:0b:bb:e1:43:fd:b7:07:72:1e:48:f0:0e:8a:
         2d:75:dd:87:49:74:14:dd:60:18:22:0c:11:92:f7:0e:f7:15:
         ce:5d:d4:32:a8:09:5c:8c:44:59:5c:12:bc:b3:90:8c:3c:88:
         e0:71:8a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:52 2025 by rpki-client