Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3131382e3134392e302f32342d3234203d3e20323636373437.roa
File:                     3138312e3131382e3134392e302f32342d3234203d3e20323636373437.roa (raw, json)
Hash identifier:          vgCV9wvQIsUTw1m904vz7U0fV31vBPP98OfhfSVCHb8=
Subject key identifier:   61:95:0D:7F:48:57:81:C4:E2:40:D5:52:4D:F0:AF:A7:8D:C8:8E:D3
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       067EA320647206DF5CA68C3B868CE6CF4A1AD34E
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3131382e3134392e302f32342d3234203d3e20323636373437.roa
Signing time:             Tue 04 Feb 2025 19:56:55 +0000
ROA not before:           Tue 04 Feb 2025 19:51:55 +0000
ROA not after:            Tue 03 Feb 2026 19:56:55 +0000
asID:                     266747
IP address blocks:        181.118.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7e:a3:20:64:72:06:df:5c:a6:8c:3b:86:8c:e6:cf:4a:1a:d3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:55 2025 GMT
            Not After : Feb  3 19:56:55 2026 GMT
        Subject: CN=61950D7F485781C4E240D5524DF0AFA78DC88ED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:3e:e0:6c:e4:5a:14:83:2b:cd:ba:07:b8:
                    29:f7:d6:1c:7a:30:32:bc:c3:59:0d:5c:55:1b:1d:
                    64:d7:29:81:25:10:4e:55:f0:68:13:c6:dd:1a:74:
                    d2:a6:51:22:59:8f:69:f4:88:ff:9c:47:ad:dc:e3:
                    fe:dd:c1:57:bb:8e:8f:a3:fb:4e:24:4d:4c:20:32:
                    44:a1:29:82:d2:6c:52:c0:3e:fc:45:1e:17:ae:df:
                    a8:97:f8:4a:de:35:3b:d8:6c:60:b7:c2:fa:34:fc:
                    25:53:c9:6a:9b:25:37:17:af:de:82:92:0c:ce:c9:
                    17:ca:4a:ca:ab:aa:3c:47:0e:ad:48:9e:09:4e:4d:
                    94:7b:fd:f3:df:3c:16:52:76:08:2b:fd:08:7a:7a:
                    80:11:f6:54:87:1d:e7:6c:d2:b4:ad:4a:74:82:15:
                    5f:c4:84:77:3a:9a:e3:b6:86:f1:63:3c:ca:a6:f1:
                    c9:66:04:22:8c:bb:ef:83:f2:27:34:bb:ec:df:67:
                    8d:dc:1f:ea:c1:5f:e4:00:64:d9:0c:24:57:e1:6a:
                    94:0e:b9:d7:66:17:3a:81:eb:23:69:cc:6a:34:0e:
                    4c:65:f5:96:20:b8:d9:74:2a:aa:d4:08:41:57:56:
                    e9:97:eb:1f:49:6b:a4:3e:c7:45:08:44:f5:b3:57:
                    50:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:0D:7F:48:57:81:C4:E2:40:D5:52:4D:F0:AF:A7:8D:C8:8E:D3
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3131382e3134392e302f32342d3234203d3e20323636373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:cf:4b:0a:cd:8c:4c:1d:33:0d:6f:b3:a2:c8:a2:89:0b:e0:
         dc:4a:2f:ba:e0:ae:49:00:bb:18:f1:81:04:ce:c6:b8:52:7e:
         bb:73:41:ea:fd:cf:c7:6d:17:2b:a3:5e:33:14:8c:25:ad:cf:
         5a:c0:79:af:64:40:49:25:67:2e:ec:a4:28:37:60:18:4a:06:
         9f:6e:a2:9c:97:cc:3e:30:54:8b:9f:85:68:f3:08:40:48:4d:
         64:5f:a3:c8:28:93:98:bd:27:a1:4a:49:45:45:f9:77:3f:cb:
         00:75:db:57:c8:73:2f:9c:9a:7c:16:2e:0d:14:42:b0:5b:ed:
         e2:ea:5a:42:15:9e:a4:0f:27:1e:57:03:6e:89:06:5b:37:12:
         08:b0:7d:a0:7d:a4:36:75:e6:3d:2a:18:12:20:a8:ee:99:fd:
         bd:81:7d:34:b7:ba:fe:e9:13:29:92:28:78:3b:9a:19:b3:f6:
         b4:f9:2a:56:01:0f:0a:65:79:26:16:28:f1:58:57:1b:e3:7f:
         3c:3d:2b:b0:23:9c:30:4d:37:80:c1:7a:26:99:5e:67:b5:af:
         f8:29:46:df:d7:ea:b1:58:2f:88:09:be:5f:30:63:37:b7:18:
         5b:44:db:24:35:b5:42:ee:35:8e:9f:fa:b4:c0:d5:a0:92:5a:
         59:df:55:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:14 2025 by rpki-client