Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e2037343138.roa
File:                     3138312e3230332e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          O+rsHMPcEhCDmfmNEX7st7AugD34NGgU8EzJ0A/lokY=
Subject key identifier:   63:4A:05:EC:5C:EC:23:14:89:BC:1E:3F:14:A2:76:9B:61:B3:6F:31
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       57786359A19F8595BEAA3B014E7F7DDAFF34BFC4
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:12:55 +0000
ROA not before:           Tue 04 Feb 2025 18:07:55 +0000
ROA not after:            Tue 03 Feb 2026 18:12:55 +0000
asID:                     7418
IP address blocks:        181.203.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:78:63:59:a1:9f:85:95:be:aa:3b:01:4e:7f:7d:da:ff:34:bf:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:07:55 2025 GMT
            Not After : Feb  3 18:12:55 2026 GMT
        Subject: CN=634A05EC5CEC231489BC1E3F14A2769B61B36F31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:eb:c8:e2:05:39:90:0b:54:7b:55:97:97:
                    25:ad:7d:c1:c2:50:f9:f4:b2:dd:2f:cb:5f:2a:52:
                    3e:6d:6a:b8:5a:3a:4f:5a:9d:7b:5b:62:15:ad:72:
                    2d:38:2f:e8:50:17:c5:eb:e9:a3:06:37:1e:9e:fc:
                    cd:f8:b6:e9:d5:84:a3:2a:1a:44:80:ab:7a:b1:22:
                    b5:19:d2:35:8b:1f:a3:65:04:0f:6d:34:e0:e0:61:
                    38:df:ef:fb:6c:9f:74:d0:39:10:25:05:89:27:6c:
                    c0:a7:c8:46:32:ba:0c:27:bd:e8:c8:fd:c5:dd:90:
                    ae:6a:1a:15:5e:54:e3:d1:6b:30:df:97:46:35:a0:
                    aa:1e:d8:d0:0f:5d:47:60:30:4e:4e:a8:12:b4:19:
                    1b:42:a0:58:c0:39:99:eb:84:aa:79:a0:d8:51:62:
                    c3:a9:3c:41:5e:b2:68:1e:dd:cc:3f:c0:cb:d1:35:
                    06:80:18:51:e6:14:6a:f6:af:0e:08:30:02:8a:c7:
                    4d:63:5f:0c:ad:0d:26:f2:d5:e2:f6:f3:c2:f4:e5:
                    3b:c7:86:3a:b3:36:c5:2b:d7:8f:99:5a:38:38:c2:
                    2d:c9:75:be:b3:97:fc:cf:cc:cb:db:bf:6e:18:6f:
                    85:22:1d:09:98:89:d5:fe:99:ef:1a:95:1d:af:03:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4A:05:EC:5C:EC:23:14:89:BC:1E:3F:14:A2:76:9B:61:B3:6F:31
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3138312e3230332e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.203.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:65:c5:b8:05:b1:79:24:9c:78:2a:0b:6c:68:c6:ca:06:83:
         ed:49:bb:b0:7a:b3:7a:23:12:13:4a:b7:59:68:54:a5:fc:27:
         6a:f3:48:2a:5d:ef:31:82:47:d9:da:4e:c0:78:4b:23:e1:db:
         51:3e:a1:be:43:a6:96:89:ab:77:f5:77:7a:96:68:6a:85:03:
         f8:6d:0e:a2:ae:d2:2d:f0:0e:cd:89:21:c9:09:94:d0:3d:1b:
         3e:79:0c:0a:72:2e:9f:7b:18:c6:32:1d:be:3c:77:17:06:ab:
         92:85:9c:f4:1a:a6:e0:c6:c4:bf:69:f9:11:54:10:00:84:c3:
         23:8e:e9:44:54:78:99:64:8d:fb:bb:e1:16:96:33:af:57:e0:
         4d:06:d1:ac:e0:57:5f:0c:5c:a3:72:cf:94:c6:e6:79:4c:50:
         2c:a6:af:72:da:98:7e:6b:72:9c:f1:e4:09:79:b5:9c:a5:b7:
         7e:51:4b:cc:d9:e5:56:76:02:07:75:a9:e9:63:13:2f:a5:6b:
         a3:c5:b9:ca:8a:63:ee:cf:fe:88:86:7b:6e:e5:f1:65:65:4d:
         ae:89:88:70:48:1b:4b:e9:75:24:77:25:00:f8:81:66:a8:15:
         d1:e8:24:36:1d:1a:fd:92:fa:2a:f8:ba:64:5d:2a:f4:b1:f4:
         50:12:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:55:11 2025 by rpki-client