Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e36352e302f32342d3234203d3e20323632353839.roa
File:                     3138312e3232352e36352e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          O7JrAbfx8c0cdaUCRXOf1ck/zKAisIkeTpSf5c28qgI=
Subject key identifier:   66:5B:81:60:7E:EB:83:A3:2A:B0:D6:D0:5E:88:C4:0C:27:1F:6A:41
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       758B8E516C55671A6010921D022FDF56E1037791
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e36352e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:57:08 +0000
ROA not before:           Tue 04 Feb 2025 19:52:08 +0000
ROA not after:            Tue 03 Feb 2026 19:57:08 +0000
asID:                     262589
IP address blocks:        181.225.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8b:8e:51:6c:55:67:1a:60:10:92:1d:02:2f:df:56:e1:03:77:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:08 2025 GMT
            Not After : Feb  3 19:57:08 2026 GMT
        Subject: CN=665B81607EEB83A32AB0D6D05E88C40C271F6A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:7f:3b:c2:8c:71:64:ae:9d:e8:f1:a7:7a:
                    68:73:a2:62:a9:b4:e1:d1:ad:c0:d6:0b:d6:e0:af:
                    38:40:24:2e:48:79:86:56:7d:1a:a6:e0:ee:da:9b:
                    24:5f:71:53:67:4b:3e:8e:97:5d:b3:4e:2b:d6:43:
                    66:1d:5e:e0:27:62:bc:5b:10:3d:0f:b3:5b:0f:6a:
                    fa:93:6d:cd:0c:62:ce:8e:f7:08:6d:33:9b:74:f4:
                    38:83:3d:32:90:0a:36:a7:4a:e5:0d:0f:1d:b6:da:
                    0e:7e:ee:1e:c3:8a:a9:75:78:60:7f:fb:23:a9:a1:
                    a6:c6:ae:8c:05:92:5e:fd:47:49:92:bf:57:70:78:
                    10:6c:e2:80:ce:32:b2:5c:b9:84:5f:a5:77:b5:03:
                    bf:eb:a2:e1:2c:57:98:86:5f:2c:e8:44:75:6b:62:
                    ba:ed:c8:94:f3:9d:5b:f0:43:3d:c0:3d:f7:92:83:
                    e3:de:21:25:d7:4b:64:c1:95:dc:b1:1d:99:c6:93:
                    cb:f9:db:94:f4:fb:5b:e9:fd:d2:c1:d4:6d:65:ee:
                    eb:24:eb:b2:37:a2:4e:b9:32:e2:d3:5d:32:33:1c:
                    4f:58:b4:19:7d:2a:cf:4d:06:90:38:56:74:ff:a2:
                    f1:97:82:c6:96:e2:a9:a1:5a:50:56:59:0b:1b:a8:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5B:81:60:7E:EB:83:A3:2A:B0:D6:D0:5E:88:C4:0C:27:1F:6A:41
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e36352e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:44:c4:ad:5d:c8:d0:ca:a0:9a:be:37:c2:0a:c3:dd:bf:a7:
         5d:02:1d:c1:56:9d:f5:c9:62:1a:73:07:0c:b7:c5:8c:93:73:
         e2:9d:17:9c:40:b4:42:0b:35:b0:7d:c9:e2:2e:bb:ff:77:dc:
         8f:a6:31:55:bc:0f:87:eb:a8:ca:1c:5b:3c:b0:9f:93:69:ba:
         4b:38:25:1a:dd:39:b6:b2:dc:df:60:ff:d6:b2:f8:a4:5f:69:
         07:e6:8b:82:01:77:cd:9d:89:86:11:62:ac:68:98:87:51:2a:
         92:da:7f:e7:2f:4e:3f:12:32:f3:c1:1b:c0:10:c0:80:86:df:
         a8:de:91:7d:ee:a1:38:93:31:60:e6:ac:a7:ff:32:bb:5d:71:
         b1:98:96:04:25:fd:17:36:3c:ed:5a:e5:15:e5:61:28:bb:86:
         ac:c0:e8:e3:18:13:56:69:ea:ad:b4:ef:0e:ea:83:ce:88:ad:
         80:6f:74:ab:e1:87:ae:1b:85:00:8c:d7:92:ed:47:81:e7:b4:
         8b:07:dc:d7:2b:3b:e0:37:9e:32:84:bb:2e:84:50:18:77:8f:
         19:45:66:9d:96:9e:55:68:0c:3c:00:ca:a7:e5:66:4d:dc:d0:
         0c:14:fe:96:6d:46:ff:b7:44:63:7b:88:43:13:30:8d:32:70:
         9e:ae:c6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:52 2025 by rpki-client