Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
File:                     3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa (raw, json)
Hash identifier:          1b6mDhJSZuZ2HNrdf7JTx5CWzVzNHD46Z65fgtyD+7A=
Subject key identifier:   0A:50:A2:35:12:EF:94:AA:D5:98:A0:AB:63:60:5B:A0:86:70:59:C8
Certificate issuer:       /CN=845FC621EC41AE7512D63082015413006FEF3E35
Certificate serial:       31D1094F437EECDB9A581618FDFEA085859D271D
Authority key identifier: 84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:56:13 +0000
ROA not before:           Tue 04 Feb 2025 18:51:13 +0000
ROA not after:            Tue 03 Feb 2026 18:56:13 +0000
asID:                     20207
IP address blocks:        181.174.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d1:09:4f:43:7e:ec:db:9a:58:16:18:fd:fe:a0:85:85:9d:27:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845FC621EC41AE7512D63082015413006FEF3E35
        Validity
            Not Before: Feb  4 18:51:13 2025 GMT
            Not After : Feb  3 18:56:13 2026 GMT
        Subject: CN=0A50A23512EF94AAD598A0AB63605BA0867059C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:c0:35:e8:44:61:4d:c7:e7:36:96:b9:b5:
                    59:f2:28:8c:56:f4:32:5d:41:81:3e:b1:f1:5e:42:
                    12:72:a5:83:fd:9b:fe:88:50:d3:7c:39:2c:86:46:
                    b8:5c:1c:a9:a9:a4:16:e7:e7:c2:d5:42:bc:4c:2c:
                    16:bc:47:7e:6b:c6:71:a6:b2:b2:79:cd:f2:10:ec:
                    93:73:98:69:e6:cf:cc:2d:31:75:2d:81:a2:71:9d:
                    e7:a7:da:4f:75:f7:b6:fb:99:48:e6:79:9a:40:b9:
                    d8:03:81:ab:d4:92:53:e9:54:2b:98:ca:24:0e:34:
                    a1:b9:3c:35:90:e4:42:51:46:5b:48:f5:88:3a:b2:
                    1f:2e:fa:4e:8e:83:b9:1c:b6:e6:f6:44:d4:73:4c:
                    46:90:31:d5:71:3d:83:d9:d9:06:a5:2c:5a:ba:ff:
                    11:d2:9e:1b:68:78:60:ac:d9:3d:cd:c5:2b:37:81:
                    c0:d7:11:1b:f1:e2:87:80:f8:7a:86:04:05:7c:1b:
                    b9:0b:4d:6f:a6:a6:0a:ba:ae:82:02:8a:9f:7c:47:
                    35:ca:aa:62:35:8e:ec:1c:15:de:5c:86:6e:a6:7b:
                    27:16:a8:01:89:f8:65:71:1c:84:cb:24:d8:b1:81:
                    00:57:8b:8e:ec:69:1b:83:b4:03:68:f5:50:3c:ef:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:50:A2:35:12:EF:94:AA:D5:98:A0:AB:63:60:5B:A0:86:70:59:C8
            X509v3 Authority Key Identifier:
                keyid:84:5F:C6:21:EC:41:AE:75:12:D6:30:82:01:54:13:00:6F:EF:3E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/845FC621EC41AE7512D63082015413006FEF3E35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/845FC621EC41AE7512D63082015413006FEF3E35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5F255A001017B89E4755212415E4A07B50DEA0A9B93A7C0F8672EACC8951C47/0/3138312e3137342e3137362e302f32312d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8f:eb:15:45:cd:fc:b2:37:cd:ef:4a:95:5f:cb:0e:9b:ae:c0:
         8b:05:f5:4a:38:58:6e:a0:ca:e0:31:59:c3:15:4c:91:93:ba:
         81:dc:3f:5b:48:0b:51:48:e6:a1:bf:9b:60:cd:c4:fc:dd:aa:
         57:f3:7f:43:96:2e:e9:47:f3:95:0f:f9:87:95:ac:3f:71:29:
         94:bb:e4:90:bc:16:34:9f:d7:0a:93:6f:60:ee:bf:cf:69:0a:
         6a:91:1b:c1:37:6c:36:e7:9a:5d:81:f1:fd:53:00:66:e7:b7:
         41:07:5d:0c:2e:32:18:73:e5:8e:a4:c3:51:2f:34:92:b9:23:
         ff:17:83:27:31:c4:9b:f4:54:d2:2d:38:fa:11:a9:8f:5d:b2:
         ed:17:83:12:61:45:1a:40:df:30:03:ef:85:ab:e7:dd:51:67:
         e2:15:17:03:f7:c3:a3:84:d7:60:49:2a:7b:ae:fb:d3:89:be:
         3c:d2:cc:72:b6:27:72:7f:57:11:e1:ca:4d:60:63:e1:80:fc:
         fc:39:f4:dd:b9:a7:21:39:0c:34:44:29:b4:ec:ff:16:fd:72:
         18:9c:01:7e:2c:85:c5:67:53:3e:09:0d:00:9e:19:4d:dc:0d:
         5c:5d:73:aa:1b:0b:f2:36:33:cd:80:49:87:20:27:9f:a4:d0:
         66:ce:e0:16
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMdEJT0N+7NuaWBYY/f6ghYWdJx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1RkM2MjFFQzQxQUU3NTEyRDYzMDgyMDE1NDEzMDA2
RkVGM0UzNTAeFw0yNTAyMDQxODUxMTNaFw0yNjAyMDMxODU2MTNaMDMxMTAvBgNV
BAMTKDBBNTBBMjM1MTJFRjk0QUFENTk4QTBBQjYzNjA1QkEwODY3MDU5QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp08A16ERhTcfnNpa5tVnyKIxW
9DJdQYE+sfFeQhJypYP9m/6IUNN8OSyGRrhcHKmppBbn58LVQrxMLBa8R35rxnGm
srJ5zfIQ7JNzmGnmz8wtMXUtgaJxneen2k9197b7mUjmeZpAudgDgavUklPpVCuY
yiQONKG5PDWQ5EJRRltI9Yg6sh8u+k6Og7kctub2RNRzTEaQMdVxPYPZ2QalLFq6
/xHSnhtoeGCs2T3NxSs3gcDXERvx4oeA+HqGBAV8G7kLTW+mpgq6roICip98RzXK
qmI1juwcFd5chm6meycWqAGJ+GVxHITLJNixgQBXi47saRuDtANo9VA878F1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUClCiNRLvlKrVmKCrY2BboIZwWcgwHwYDVR0j
BBgwFoAUhF/GIexBrnUS1jCCAVQTAG/vPjUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUYyNTVBMDAxMDE3Qjg5RTQ3NTUyMTI0MTVFNEEwN0I1
MERFQTBBOUI5M0E3QzBGODY3MkVBQ0M4OTUxQzQ3LzAvODQ1RkM2MjFFQzQxQUU3
NTEyRDYzMDgyMDE1NDEzMDA2RkVGM0UzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NDVGQzYyMUVDNDFBRTc1MTJE
NjMwODIwMTU0MTMwMDZGRUYzRTM1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVGMjU1QTAwMTAxN0I4OUU0NzU1MjEyNDE1RTRBMDdCNTBERUEwQTlC
OTNBN0MwRjg2NzJFQUNDODk1MUM0Ny8wLzMxMzgzMTJlMzEzNzM0MmUzMTM3MzYy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjMwMzIzMDM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDta6w
MA0GCSqGSIb3DQEBCwUAA4IBAQCP6xVFzfyyN83vSpVfyw6brsCLBfVKOFhuoMrg
MVnDFUyRk7qB3D9bSAtRSOahv5tgzcT83apX839Dli7pR/OVD/mHlaw/cSmUu+SQ
vBY0n9cKk29g7r/PaQpqkRvBN2w255pdgfH9UwBm57dBB10MLjIYc+WOpMNRLzSS
uSP/F4MnMcSb9FTSLTj6EamPXbLtF4MSYUUaQN8wA++Fq+fdUWfiFRcD98OjhNdg
SSp7rvvTib480sxytidyf1cR4cpNYGPhgPz8OfTduachOQw0RCm07P8W/XIYnAF+
LIXFZ1M+CQ0AnhlN3A1cXXOqGwvyNjPNgEmHICefpNBmzuAW
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:07:39 2025 by rpki-client