Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264808.roa
File:                     AS264808.roa (raw, json)
Hash identifier:          1Qa74WpuikivAw1L0eXqs1WfhfXXTnxaNCWvXlgV4gQ=
Subject key identifier:   65:B4:2C:BA:20:E0:1E:47:95:1A:60:50:22:86:85:1C:2F:91:5A:58
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       1CC3F3F8C14AF39E8F67C81B845E6CD6FA3070D7
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264808.roa
Signing time:             Tue 04 Feb 2025 20:06:57 +0000
ROA not before:           Tue 04 Feb 2025 20:01:57 +0000
ROA not after:            Tue 03 Feb 2026 20:06:57 +0000
asID:                     264808
IP address blocks:        181.13.50.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:f3:f8:c1:4a:f3:9e:8f:67:c8:1b:84:5e:6c:d6:fa:30:70:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:57 2025 GMT
            Not After : Feb  3 20:06:57 2026 GMT
        Subject: CN=65B42CBA20E01E47951A60502286851C2F915A58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:99:0f:6a:26:44:e5:11:7b:a0:89:b6:bb:
                    71:36:82:40:e9:cc:07:c9:a4:8e:2d:48:ba:5e:5c:
                    c8:cf:80:34:89:f3:41:f1:33:b2:85:ac:3f:95:f5:
                    b6:9e:84:e1:47:55:50:20:1a:5c:b2:c2:5e:6b:cc:
                    18:6b:43:aa:89:66:ca:9f:d0:88:b6:b3:f8:4b:26:
                    32:36:89:73:6f:f3:38:1a:49:ad:d3:f3:3d:2f:fd:
                    a5:29:09:e5:ed:af:f6:87:b2:03:88:47:fa:8c:4b:
                    0f:69:ac:42:61:1e:4e:5a:f8:01:a9:ae:e4:a3:6f:
                    0d:9e:b6:82:7d:97:18:aa:5e:a1:d0:a9:67:a8:d3:
                    36:82:8c:24:7d:71:d7:11:62:ec:0d:30:95:8d:10:
                    d4:ff:ad:c6:cf:1d:88:f2:40:ec:84:d7:f7:d9:92:
                    79:52:ef:cb:03:60:46:f7:ef:73:b9:a9:9b:08:46:
                    b8:39:60:ec:a1:18:0d:f0:74:0f:ad:83:ab:be:4b:
                    25:9e:72:59:42:c8:88:92:5e:3c:a7:be:fc:5b:14:
                    5c:16:8c:00:63:5a:cc:9f:ce:19:b8:4b:17:6e:84:
                    9a:68:40:a5:d9:a7:5a:74:7c:b7:a2:5f:d7:ae:75:
                    55:98:fa:1f:e9:55:e9:43:a5:4b:26:be:4a:e1:99:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B4:2C:BA:20:E0:1E:47:95:1A:60:50:22:86:85:1C:2F:91:5A:58
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS264808.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.13.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:19:a4:0c:98:2b:a2:58:19:23:6b:bc:44:8e:6e:5f:54:72:
         1e:41:af:49:fa:1f:22:d5:fd:b3:47:79:ec:76:56:71:bb:44:
         05:49:fb:75:09:3e:a6:49:0c:07:c1:59:94:6f:dd:e8:66:bf:
         5c:4a:e8:4f:85:57:08:e7:b0:91:34:fc:97:a7:a5:8d:20:94:
         b0:ea:c9:0c:60:e5:d0:13:3f:2c:3f:ce:70:fa:c6:70:b6:87:
         f3:e0:27:4c:3c:05:a4:33:0b:27:ed:b3:ff:03:94:3f:c5:86:
         a4:46:f3:97:59:22:e7:aa:b1:ba:39:f4:5f:e8:92:0a:89:d0:
         76:3c:fb:0c:76:72:6f:db:46:2e:44:37:c6:b5:a7:da:b0:54:
         f8:b8:ab:1f:3a:8f:60:87:ff:34:4d:ed:2f:82:0f:96:7e:f2:
         7f:14:0f:b5:67:6b:13:e6:99:35:b9:58:76:df:a6:75:a8:45:
         5c:c9:60:3c:3a:71:1e:6f:58:39:f6:ad:8a:ba:28:cc:bf:34:
         f4:73:57:49:43:55:68:d7:db:3a:41:09:12:45:7a:4d:a8:77:
         20:74:81:71:db:2e:70:e9:ac:c5:5e:12:e8:78:7b:27:11:2c:
         9e:72:c2:eb:2b:0a:5e:81:3e:c4:cd:9b:c9:8c:cb:85:ab:07:
         7b:79:f3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:37 2025 by rpki-client