Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135322e302f32342d3234203d3e20323732393733.roa
File:                     3138312e3233332e3135322e302f32342d3234203d3e20323732393733.roa (raw, json)
Hash identifier:          tmNxhXm2tP5Zi9XkkYChpA+CkAYGjXYbU9Nb3r0Dpso=
Subject key identifier:   BD:CA:97:7B:06:06:CD:4B:39:77:E0:CF:35:A6:02:6E:79:1A:91:CB
Certificate issuer:       /CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
Certificate serial:       2F4411BADE40487ED77301C83DD930355BF9E1D0
Authority key identifier: 26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135322e302f32342d3234203d3e20323732393733.roa
Signing time:             Tue 04 Feb 2025 18:03:21 +0000
ROA not before:           Tue 04 Feb 2025 17:58:21 +0000
ROA not after:            Tue 03 Feb 2026 18:03:21 +0000
asID:                     272973
IP address blocks:        181.233.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:44:11:ba:de:40:48:7e:d7:73:01:c8:3d:d9:30:35:5b:f9:e1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0
        Validity
            Not Before: Feb  4 17:58:21 2025 GMT
            Not After : Feb  3 18:03:21 2026 GMT
        Subject: CN=BDCA977B0606CD4B3977E0CF35A6026E791A91CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7b:10:86:ed:d1:5a:bc:26:c6:7e:95:ea:9b:
                    89:5a:b2:c9:74:f7:7b:5a:f2:94:b5:dc:cd:60:40:
                    47:eb:95:28:fd:e2:b5:80:1a:6c:72:e5:60:f6:2c:
                    e1:e7:d1:85:e6:0b:cf:9e:7c:c2:27:38:bd:ed:68:
                    ad:6f:81:10:03:49:ce:ce:eb:75:08:21:9f:71:60:
                    c7:ca:36:14:1c:4a:bc:b6:23:b1:74:9c:0a:de:d3:
                    39:4f:39:ec:f1:05:ee:b0:67:68:86:9b:f0:ab:91:
                    03:06:b5:e4:d8:b0:d3:6b:52:6c:00:87:3e:b5:1e:
                    6c:33:5e:a5:8a:2b:aa:c2:17:e9:51:44:59:02:a1:
                    d4:19:01:59:c9:8a:93:d2:c6:5a:13:1e:a3:c2:2e:
                    b8:4d:25:69:08:da:9c:dd:2d:0b:7f:11:2d:e4:57:
                    ce:a2:c6:87:82:f8:5c:d8:65:79:3d:12:74:e0:5f:
                    17:5e:26:9f:45:7c:51:a3:b8:79:63:8d:a9:d3:7e:
                    01:95:1a:92:27:da:f2:25:26:64:00:86:0b:68:3b:
                    c9:b4:63:2e:84:4f:77:29:10:8c:7d:29:21:0f:8f:
                    23:34:9e:7a:23:48:06:95:e1:6f:5f:4f:2b:f5:a8:
                    69:b4:4c:b0:1d:a5:37:4b:b7:3f:53:77:b0:19:bd:
                    a5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CA:97:7B:06:06:CD:4B:39:77:E0:CF:35:A6:02:6E:79:1A:91:CB
            X509v3 Authority Key Identifier:
                keyid:26:17:7C:B8:0E:40:0E:8F:6E:1A:1A:F9:6D:7E:3F:EE:34:7D:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/26177CB80E400E8F6E1A1AF96D7E3FEE347DD0D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9546DBBCCB0D818EC7291438EC4E8375353DB778E8EE985AA21891446ABF7A56/0/3138312e3233332e3135322e302f32342d3234203d3e20323732393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:d6:42:f7:f7:b2:95:f1:81:5f:93:c8:60:d2:6c:dd:bf:
         87:67:ce:8e:1e:70:4d:0a:8a:63:41:36:9f:46:d1:ab:4e:32:
         ff:9a:0a:48:ac:d9:64:72:92:d2:9d:42:01:a0:b6:ba:82:34:
         e9:32:5d:11:cf:43:fa:9e:31:18:c0:24:87:36:ef:68:08:b4:
         d5:2f:12:dd:26:24:f4:7a:72:b4:77:07:e5:64:76:05:94:62:
         2a:79:b7:2f:46:3b:11:e2:58:87:33:70:26:53:6a:3e:f9:e5:
         a6:21:0b:fb:4b:b5:30:73:00:ad:25:df:d2:09:4c:3f:94:7e:
         6e:6f:10:0d:b3:c5:33:49:da:72:27:d7:a5:2e:ce:e5:0e:0c:
         58:c8:be:d3:68:1e:c9:48:fc:0c:42:60:94:4f:d7:41:14:cc:
         7f:35:48:70:c7:99:c9:44:23:26:90:cf:99:18:10:af:ed:ca:
         16:24:27:68:df:ae:d1:bb:37:36:6a:36:e0:85:3b:25:da:ce:
         30:59:89:fe:2b:b5:94:16:b7:36:c4:6d:65:9a:9e:9f:e5:34:
         3f:d3:f2:06:60:1e:88:1e:54:e0:94:6d:e4:31:6d:68:08:33:
         57:21:b6:ed:8e:14:a3:80:6a:42:47:79:f9:8f:df:8c:73:28:
         86:c8:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:55 2025 by rpki-client