Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264767.roa
File:                     AS264767.roa (raw, json)
Hash identifier:          8QWwuy7kzt6mnlBzcDuTd1CydY7pltuTPXaiii3VqM0=
Subject key identifier:   7D:28:50:A2:65:80:FF:91:F0:3B:D0:2B:04:B8:9C:BA:2C:5E:10:A9
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       4072EDBA6D880ADDFF11D1EDC13D5370D11F0368
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264767.roa
Signing time:             Tue 04 Feb 2025 20:06:59 +0000
ROA not before:           Tue 04 Feb 2025 20:01:59 +0000
ROA not after:            Tue 03 Feb 2026 20:06:59 +0000
asID:                     264767
IP address blocks:        181.13.151.0/24 maxlen: 24
                          181.13.153.0/24 maxlen: 24
                          181.13.185.0/24 maxlen: 24
                          181.13.186.0/24 maxlen: 24
                          181.13.239.0/24 maxlen: 24
                          186.125.160.0/24 maxlen: 24
                          190.136.18.0/24 maxlen: 24
                          190.228.73.0/24 maxlen: 24
                          190.228.74.0/24 maxlen: 24
                          190.228.99.0/24 maxlen: 24
                          190.228.100.0/24 maxlen: 24
                          190.228.126.0/24 maxlen: 24
                          190.228.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:72:ed:ba:6d:88:0a:dd:ff:11:d1:ed:c1:3d:53:70:d1:1f:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:59 2025 GMT
            Not After : Feb  3 20:06:59 2026 GMT
        Subject: CN=7D2850A26580FF91F03BD02B04B89CBA2C5E10A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:eb:d3:bf:93:59:c7:a6:59:ea:81:8d:41:
                    24:e6:8a:32:6f:86:21:fb:b9:93:ae:e1:82:f3:1e:
                    5f:89:d5:1c:c5:4a:f2:31:4d:54:c7:fc:d8:9d:42:
                    5c:a8:28:92:24:9a:d9:84:ea:e0:67:44:70:9e:ec:
                    a2:b0:da:2e:0d:97:1b:da:eb:43:72:e1:d1:97:e9:
                    e0:90:d8:30:65:e9:20:87:86:80:75:38:d9:98:45:
                    7c:fb:35:49:8b:2a:1c:a7:d4:26:19:a2:25:88:88:
                    f3:94:f0:df:25:c2:ec:fc:5d:bd:d0:40:93:93:e6:
                    13:7f:ab:da:b1:a4:c3:25:6f:5a:fd:e2:8f:92:a5:
                    2a:9b:77:69:d6:28:fb:ab:57:9f:f1:7b:d7:60:db:
                    3f:0b:58:4b:a7:cd:ea:2d:ac:4a:e4:6e:0f:4b:a7:
                    de:64:39:4b:83:06:5a:9d:7c:37:2b:7f:fd:bc:7c:
                    51:89:df:9e:84:28:59:2a:2a:a5:91:c0:c5:dd:ea:
                    fe:df:0f:8b:d1:e3:c2:61:07:89:c4:e7:12:b7:82:
                    7c:1c:68:ef:62:ba:bc:f8:47:c2:7f:60:47:4d:6c:
                    4e:55:4a:d6:11:cd:fe:6c:03:8d:08:4f:60:bd:fb:
                    ed:d7:7f:90:7c:bc:4a:87:5b:6a:c4:1a:1c:2d:18:
                    5f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:28:50:A2:65:80:FF:91:F0:3B:D0:2B:04:B8:9C:BA:2C:5E:10:A9
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264767.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.151.0/24
                  181.13.153.0/24
                  181.13.185.0-181.13.186.255
                  181.13.239.0/24
                  186.125.160.0/24
                  190.136.18.0/24
                  190.228.73.0-190.228.74.255
                  190.228.99.0-190.228.100.255
                  190.228.126.0/24
                  190.228.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:60:80:12:ff:34:73:16:5c:52:f1:5e:90:67:a4:c5:1a:
         49:ea:0c:34:bc:57:18:94:95:78:67:80:fc:d6:90:08:1d:7a:
         bb:6b:d6:ab:de:ae:52:18:da:0c:58:c3:58:4d:56:e0:61:ee:
         b8:52:a8:3c:d2:38:98:c6:e5:c0:0f:1a:a7:c9:c3:5e:4f:4d:
         c2:1c:d5:75:3f:e8:e2:38:b2:d3:b2:3f:de:7f:85:8f:af:8e:
         53:63:cc:c6:cb:e1:fd:32:ea:5f:16:c0:42:aa:cf:3e:4f:61:
         3b:17:c0:01:d2:88:50:67:d6:61:91:f3:52:9d:75:ba:a5:bf:
         fd:f3:df:1e:b4:0a:84:19:65:db:d6:44:b7:41:6e:af:de:95:
         b0:fc:c8:de:16:29:6f:04:b0:24:4a:d3:7d:af:3d:fb:b4:b0:
         40:10:ab:3e:e4:9e:38:70:77:82:d7:ee:f7:39:6a:0b:0a:53:
         e9:96:bc:89:f0:01:f4:c3:93:49:93:2c:4b:16:b6:57:45:e4:
         63:64:53:82:bc:41:99:c2:7d:eb:1f:97:f9:5d:04:88:fd:90:
         ca:80:39:cb:47:b7:45:62:85:a5:3f:92:3a:55:be:07:a3:3a:
         18:bc:dc:da:27:ed:73:cd:55:2f:89:11:b7:91:76:a0:a8:fc:
         3c:12:67:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:08:08 2025 by rpki-client