Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37332e302f32342d3234203d3e203138363738.roa
File:                     3138312e3232352e37332e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          zlnJxtoxVJdc9Z2G0CUan2vDooyS67INrcuc10TwpLI=
Subject key identifier:   D2:B1:5C:E4:EA:21:0D:69:E6:82:32:F7:BF:26:9D:DE:4A:49:DD:E9
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       79D49DC69A3F9D6B4CDA380D2C0118ED5031E908
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37332e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 19:56:59 +0000
ROA not before:           Tue 04 Feb 2025 19:51:59 +0000
ROA not after:            Tue 03 Feb 2026 19:56:59 +0000
asID:                     18678
IP address blocks:        181.225.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d4:9d:c6:9a:3f:9d:6b:4c:da:38:0d:2c:01:18:ed:50:31:e9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:59 2025 GMT
            Not After : Feb  3 19:56:59 2026 GMT
        Subject: CN=D2B15CE4EA210D69E68232F7BF269DDE4A49DDE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b3:bd:86:1b:17:e3:77:c3:c7:1a:ad:48:97:
                    f2:a8:83:2f:49:1e:a5:9e:fc:fe:38:a9:c6:5e:53:
                    ea:91:d7:fd:cb:26:b2:e0:2e:6d:c3:66:7f:c1:c3:
                    05:3c:c2:07:fc:33:ec:19:e1:4a:57:5b:22:40:e2:
                    28:1b:1a:d0:21:04:00:ac:af:40:3c:af:39:8f:9e:
                    88:c8:06:2b:ad:0c:7b:ca:b1:ef:49:a4:be:1e:02:
                    d3:ed:56:20:09:60:80:56:0e:f2:08:0a:ec:df:cb:
                    17:d3:0c:ac:ce:ac:1d:7a:9f:84:fa:df:d3:f5:a0:
                    f8:1a:5e:ee:7a:42:41:42:2f:12:c7:af:62:70:2b:
                    cc:f8:e3:50:e7:18:5f:c4:53:a8:ed:0a:a4:4d:69:
                    d2:53:e1:20:6c:00:bd:53:dc:af:75:72:18:19:f4:
                    ef:8c:30:d6:82:d6:70:be:9e:49:e8:6e:04:9e:30:
                    d9:09:52:b2:b1:db:2e:20:ec:a7:9a:44:12:1d:35:
                    f4:89:3d:94:f9:02:05:c7:2c:74:e3:33:2a:3f:b2:
                    24:61:7c:31:70:88:68:82:11:d2:99:a7:6f:40:2d:
                    cf:37:8b:05:34:74:8e:94:de:40:89:40:6c:90:33:
                    aa:03:77:18:7c:b2:cb:80:07:9c:49:a6:60:b9:9a:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:5C:E4:EA:21:0D:69:E6:82:32:F7:BF:26:9D:DE:4A:49:DD:E9
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3138312e3232352e37332e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:2a:c1:33:89:99:58:3d:99:09:c6:3a:36:20:72:fc:2a:
         9f:9b:8f:60:bf:b5:85:d0:42:d1:b0:ab:87:59:66:b0:fd:d9:
         b6:e8:15:29:99:00:69:9a:f7:87:b6:4c:43:10:ff:c4:00:cf:
         42:d9:fd:3e:a3:fe:36:2f:c4:4e:28:b3:5f:3d:00:28:23:d1:
         28:48:84:4d:51:2b:59:92:44:42:e4:f3:63:38:e9:96:aa:d3:
         60:31:53:f6:46:db:67:dd:83:45:f9:a2:4a:c8:49:9a:19:77:
         21:5a:7c:78:6d:54:0b:f7:38:b6:d4:e6:e4:17:7b:fe:9f:67:
         56:c3:26:78:f9:56:75:3e:da:fc:9b:d7:49:c8:36:bd:05:55:
         68:59:26:98:e7:f5:0d:7f:b1:a2:b7:03:17:fc:b8:3f:3d:19:
         7e:04:4f:23:4e:e9:6b:7c:00:44:f8:1a:17:8e:56:87:5e:26:
         7c:11:ab:c1:53:30:b4:15:74:bc:e9:95:15:8d:3d:ee:29:64:
         39:c7:66:33:06:ed:10:84:7e:5d:c0:68:87:3d:8b:93:65:44:
         6a:a4:dc:79:6a:d0:78:55:c6:e8:01:54:59:b6:7d:a6:c9:7f:
         28:22:05:0c:2d:a7:6e:50:89:92:3a:ae:74:94:7c:03:41:f7:
         e3:a6:88:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:42 2025 by rpki-client