Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3138312e3131352e302e302f31372d3234203d3e203134373534.roa
File:                     3138312e3131352e302e302f31372d3234203d3e203134373534.roa (raw, json)
Hash identifier:          JktX1yo/QdojIV2xLMImUv/DNIwHgT9kazENDuKFC28=
Subject key identifier:   90:0D:6D:21:F5:09:FB:A4:38:AA:E5:B1:58:32:4D:7D:E2:17:87:0C
Certificate issuer:       /CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
Certificate serial:       76DF665769BA7C1395EE995344C4502620907242
Authority key identifier: 78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3138312e3131352e302e302f31372d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:56:02 +0000
ROA not before:           Tue 04 Feb 2025 18:51:02 +0000
ROA not after:            Tue 03 Feb 2026 18:56:02 +0000
asID:                     14754
IP address blocks:        181.115.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:df:66:57:69:ba:7c:13:95:ee:99:53:44:c4:50:26:20:90:72:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78533EB3FC1F0B8C193CBD87000A8F6754AAFE91
        Validity
            Not Before: Feb  4 18:51:02 2025 GMT
            Not After : Feb  3 18:56:02 2026 GMT
        Subject: CN=900D6D21F509FBA438AAE5B158324D7DE217870C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:e0:a4:05:4e:b7:0a:74:98:45:3a:ce:c5:
                    1d:d3:72:c1:09:00:81:37:70:8a:6c:d8:a1:69:0c:
                    c4:67:99:7a:0e:09:f1:9a:c3:71:14:e8:69:33:fe:
                    1a:2d:27:2e:64:2c:31:fc:bd:af:6a:2c:0a:3d:36:
                    5c:39:52:d5:ab:4a:46:c2:b9:22:67:c4:61:42:5f:
                    15:8e:35:54:ab:8f:30:32:50:1e:bf:5b:08:40:df:
                    cf:25:47:0f:96:56:11:16:0a:a2:52:f9:e7:5d:01:
                    f0:cf:ed:0d:45:b3:1a:73:d7:47:54:9e:32:f3:10:
                    e5:ee:97:6d:73:a3:6b:3a:80:cd:77:70:65:0b:19:
                    33:6a:67:a1:c6:8c:1a:a3:03:65:e4:ef:2a:cb:2a:
                    4d:9a:83:12:0f:80:c7:f1:4b:3f:5f:5c:4e:6b:c3:
                    55:1e:92:a7:f4:c5:e0:94:f2:a2:33:76:93:96:c0:
                    35:ec:55:c4:d2:db:7d:5c:7f:87:ea:26:ac:7a:59:
                    8f:dc:dc:c1:3b:49:68:39:d9:6b:a4:5a:6f:a6:f0:
                    79:ff:ac:a7:4a:bd:5f:c8:0f:cf:1c:b1:5c:48:74:
                    51:32:b2:b2:9a:88:0a:ff:12:5f:92:9e:20:e6:b0:
                    19:81:8c:2e:a0:5b:ba:b3:f3:8e:9d:6a:9c:74:ad:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0D:6D:21:F5:09:FB:A4:38:AA:E5:B1:58:32:4D:7D:E2:17:87:0C
            X509v3 Authority Key Identifier:
                keyid:78:53:3E:B3:FC:1F:0B:8C:19:3C:BD:87:00:0A:8F:67:54:AA:FE:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78533EB3FC1F0B8C193CBD87000A8F6754AAFE91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F9F582B5E6E3D9ADB07291B00AB30EF4C84E211575C500C933DD3766C6B0D85/0/3138312e3131352e302e302f31372d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.115.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         36:0c:e3:3d:6f:82:78:13:5a:5d:b9:c7:21:a8:e6:de:eb:e4:
         1e:20:e9:66:ed:fb:56:b3:a5:b0:78:da:cf:9d:74:c6:2d:81:
         6a:e9:b2:e5:fd:bc:fd:d2:f5:e1:1a:75:2c:27:8a:c7:bc:a8:
         e2:26:4d:7b:56:93:c4:24:9f:12:c2:23:92:3d:5c:86:1a:44:
         59:58:87:97:6e:37:53:13:c2:c4:88:01:09:a7:f3:3f:22:0a:
         b1:33:88:46:36:c3:9f:a1:b5:cd:bc:47:58:28:3a:2a:e6:b9:
         76:2f:1c:05:52:42:32:ea:f3:99:d1:39:bf:7c:d4:e5:45:d3:
         34:02:3c:6d:9d:ed:b9:b1:e3:20:c3:2d:a4:bd:ae:70:54:99:
         38:65:17:f0:0f:6d:60:30:a4:5b:c5:46:a1:bc:e3:61:00:41:
         5e:c8:ec:4a:83:00:0b:65:a4:3c:f0:b1:7e:86:8c:fe:38:08:
         b5:c6:5a:12:31:71:0d:c3:c6:9e:88:5d:34:81:b5:16:3f:93:
         b4:94:2e:f6:87:3f:f7:f8:35:d9:d8:7c:b8:a7:7e:b5:91:4f:
         62:1c:6e:83:94:8a:9a:31:96:0f:33:b2:6a:59:ee:58:0d:7e:
         54:b1:70:26:89:34:1b:96:4b:c0:4d:67:82:1f:d8:75:93:fc:
         8e:f0:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:21 2025 by rpki-client