Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa
File:                     3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa (raw, json)
Hash identifier:          eIkbCaCPHqA2aBmNNJzfBk5Sbqe6RZK/+95ZWTLl5sA=
Subject key identifier:   C1:D4:5B:75:02:5C:C7:25:BD:4E:74:65:C6:8C:52:3F:44:A6:C5:B2
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       69299D95804001FDE01BF19669F39F924A3A7C32
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa
Signing time:             Tue 04 Feb 2025 18:16:43 +0000
ROA not before:           Tue 04 Feb 2025 18:11:43 +0000
ROA not after:            Tue 03 Feb 2026 18:16:43 +0000
asID:                     27839
IP address blocks:        181.177.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:29:9d:95:80:40:01:fd:e0:1b:f1:96:69:f3:9f:92:4a:3a:7c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Feb  4 18:11:43 2025 GMT
            Not After : Feb  3 18:16:43 2026 GMT
        Subject: CN=C1D45B75025CC725BD4E7465C68C523F44A6C5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:01:25:6f:f5:95:a5:e2:d3:41:bd:12:d9:ec:
                    84:bb:b8:71:bf:04:42:09:f2:2b:c9:ae:a8:d0:68:
                    d8:6c:aa:c3:4c:0b:d0:af:b1:c4:6a:20:9f:b6:7b:
                    22:ec:0d:7e:87:8e:6e:11:20:87:53:ed:d6:4b:28:
                    61:b7:77:66:0b:a4:3f:99:c0:eb:47:da:0e:ad:95:
                    9a:56:b8:41:37:f4:05:55:ac:a8:e8:93:b7:b4:98:
                    69:2d:de:74:db:ac:28:47:4d:d1:b9:02:a9:82:9c:
                    8a:af:f1:9d:5d:6a:96:ec:2e:a9:18:0a:8d:e0:10:
                    c5:9e:b5:27:19:cb:c7:a9:6f:40:ba:a1:b3:ac:01:
                    9d:10:59:00:3b:28:73:64:6a:4c:88:81:3d:49:b3:
                    5d:6c:7b:78:ba:82:5a:41:71:58:31:c4:14:2b:e4:
                    db:7a:76:34:21:4c:82:27:d3:ab:c4:f5:b5:14:66:
                    f4:34:49:11:8f:7a:26:bd:95:9a:38:20:1b:82:76:
                    c0:ec:ac:e2:ba:6e:c8:20:3c:a3:e1:9c:8f:ac:d3:
                    c6:82:e0:e5:a1:23:da:fa:ad:23:d7:54:d4:2b:6a:
                    b7:5e:59:83:de:98:ed:f8:af:a7:81:12:18:c3:75:
                    fc:98:d5:6f:cc:ac:24:2c:dc:9c:04:a5:96:34:61:
                    2e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D4:5B:75:02:5C:C7:25:BD:4E:74:65:C6:8C:52:3F:44:A6:C5:B2
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3138312e3137372e3132382e302f31382d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:70:4f:c1:00:df:d5:9a:6e:b0:e4:2c:d8:b6:1a:5b:cb:86:
         06:44:3b:2f:b0:d6:b7:44:39:84:13:65:a0:3a:3b:2e:b3:e9:
         e5:af:c3:9d:c3:b9:7d:ff:c7:5f:00:ca:60:33:2b:03:a0:82:
         a1:f6:db:ac:8c:41:68:99:4d:85:38:ba:b9:73:33:12:8c:a4:
         70:eb:ae:dc:c3:f9:fa:ee:b4:2c:f3:88:75:05:9f:ae:c0:47:
         77:84:cd:ae:6c:43:26:75:14:3b:2b:bc:cd:7a:80:2e:50:d0:
         66:28:38:60:ac:d2:5b:ae:63:b2:66:fa:59:91:3b:70:d6:65:
         06:63:c1:19:e9:20:83:02:20:f9:a3:42:3b:8c:e2:b8:cd:2f:
         b1:02:bd:94:27:23:8d:08:53:33:b8:d4:fc:b3:20:d0:4b:be:
         fa:cc:8d:d5:58:20:1a:20:71:b8:46:46:16:9b:2f:f7:70:c6:
         df:26:a1:12:1b:03:8c:3d:ee:3a:67:5a:cc:b2:e8:f1:85:c2:
         33:9a:9f:11:3e:7e:64:1c:08:93:88:1c:ca:c5:b1:08:f7:92:
         d2:03:5d:7e:80:b2:51:b5:c1:73:71:60:b6:41:8c:4b:e6:00:
         93:18:43:3c:50:f0:b9:36:9b:8e:89:9c:e8:3a:e7:f6:75:31:
         9e:1b:39:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:26:18 2025 by rpki-client