Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e203136363239.roa
File:                     3138312e3230322e302e302f31362d3234203d3e203136363239.roa (raw, json)
Hash identifier:          92AeG4zk/suTIVVu2GmAOI6kt1cLpCVOHUllIk3cv5c=
Subject key identifier:   65:A1:E8:FD:4D:D1:79:3D:D7:5F:11:42:94:A1:9D:00:6D:E4:9B:F9
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       3FC7C5BFB684D07995C8F44436FC29522F6D8764
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:12:57 +0000
ROA not before:           Tue 04 Feb 2025 18:07:57 +0000
ROA not after:            Tue 03 Feb 2026 18:12:57 +0000
asID:                     16629
IP address blocks:        181.202.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c7:c5:bf:b6:84:d0:79:95:c8:f4:44:36:fc:29:52:2f:6d:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:57 2025 GMT
            Not After : Feb  3 18:12:57 2026 GMT
        Subject: CN=65A1E8FD4DD1793DD75F114294A19D006DE49BF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:81:6f:8d:56:76:a4:f7:0c:93:73:16:88:
                    ce:9c:44:9e:9c:3d:3f:18:f0:36:1d:e1:94:54:64:
                    da:7d:7b:cf:77:ae:12:99:67:0c:ca:a1:95:91:0c:
                    02:93:3a:6a:e9:73:79:7b:45:6e:ae:55:11:2b:c6:
                    e6:92:50:4f:40:04:c9:30:e1:61:3f:52:3b:16:13:
                    04:cf:68:f1:18:3c:34:a7:eb:2a:61:24:51:0d:3f:
                    da:fc:11:ca:10:53:9f:11:74:d4:92:64:a0:d4:1a:
                    40:62:23:2e:9c:d4:cb:a2:a0:c3:81:c0:80:28:3c:
                    e4:e3:06:fb:20:c2:da:0d:fc:61:64:d8:60:06:49:
                    7b:bb:78:aa:79:42:e7:87:60:77:d0:36:d2:7a:b0:
                    54:51:ad:86:19:32:da:3a:eb:fb:66:2a:24:57:38:
                    7c:09:6a:cf:07:5d:bb:69:3a:73:f2:56:88:a8:5a:
                    b7:0e:44:09:7a:a9:e5:fb:25:de:34:e0:61:ca:3b:
                    68:93:10:f3:5e:7d:6d:a2:fb:72:51:ca:23:05:99:
                    dd:10:68:2b:cf:5e:5d:69:d9:09:04:3f:73:3f:73:
                    a9:44:36:af:4d:62:ae:f1:2b:5b:eb:36:bf:0b:6b:
                    53:5c:05:52:6c:00:85:e3:c9:ea:fe:cc:55:5f:6e:
                    d9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A1:E8:FD:4D:D1:79:3D:D7:5F:11:42:94:A1:9D:00:6D:E4:9B:F9
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230322e302e302f31362d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.202.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:68:aa:a1:b3:78:7f:9a:ff:7c:85:c3:31:27:69:30:71:51:
         19:f9:6f:aa:4d:43:0d:79:61:c5:67:7d:86:a3:49:13:74:d5:
         55:6b:3b:b5:ec:42:89:cd:16:2b:a8:70:e9:f2:6e:cb:44:06:
         a5:fb:f7:b3:cd:ec:ab:6c:b6:03:d4:c4:99:4e:1f:71:5b:74:
         b9:2d:82:d0:bd:04:2e:4d:7f:c3:11:35:4b:68:77:3d:d9:24:
         93:c6:e6:4a:92:c2:fa:90:37:cd:8e:7c:91:8d:64:6f:f1:81:
         d6:ac:89:4d:5c:8d:2a:1a:64:de:7b:c2:ea:98:87:02:d6:dc:
         54:d4:87:ca:7e:89:29:c8:02:1e:94:c6:c2:80:7a:f4:e8:e9:
         25:59:47:55:2b:49:7e:5c:a2:13:cf:2b:bc:8f:55:06:1d:e5:
         5f:bc:10:f7:14:aa:b3:0a:a9:59:aa:6c:d3:b5:70:55:45:78:
         f5:20:01:ce:75:4e:ee:f5:53:6c:a0:44:26:e0:1f:c1:36:b5:
         27:1d:0f:78:04:81:5c:94:55:41:eb:0f:5b:66:8a:fc:73:2a:
         2c:1c:68:34:c5:f3:6e:3a:45:5e:b5:26:06:ed:93:6b:b4:c8:
         40:b8:2a:cf:cb:eb:0d:cd:ff:44:94:6c:af:06:dd:8d:a9:8b:
         bb:90:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----