Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa
File:                     3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa (raw, json)
Hash identifier:          vZPSBjm4cCeukc4wAsJtEpWWpoUKSJnLgw0GKsxit7E=
Subject key identifier:   44:13:4E:38:1D:AF:95:9F:F2:E0:ED:5C:E4:CB:EB:7E:1B:3A:8A:7E
Certificate issuer:       /CN=B38BDE76E463241532282B264A16F479CD7D0224
Certificate serial:       7C46999007BD4F216141CC51F7535A944EA8EF43
Authority key identifier: B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa
Signing time:             Tue 04 Feb 2025 18:39:50 +0000
ROA not before:           Tue 04 Feb 2025 18:34:50 +0000
ROA not after:            Tue 03 Feb 2026 18:39:50 +0000
asID:                     262199
IP address blocks:        181.225.128.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:46:99:90:07:bd:4f:21:61:41:cc:51:f7:53:5a:94:4e:a8:ef:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B38BDE76E463241532282B264A16F479CD7D0224
        Validity
            Not Before: Feb  4 18:34:50 2025 GMT
            Not After : Feb  3 18:39:50 2026 GMT
        Subject: CN=44134E381DAF959FF2E0ED5CE4CBEB7E1B3A8A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:3f:ff:43:0b:9c:21:7e:fc:85:9a:ea:84:
                    15:9e:d4:c5:78:22:c2:69:67:dd:96:68:b4:f5:67:
                    3d:de:b2:30:f8:f8:00:c8:57:6f:8e:b7:37:03:48:
                    1d:5a:7d:04:11:5d:02:f0:5e:bc:08:24:89:66:c4:
                    9f:22:f6:38:cd:06:1f:41:85:25:fb:c4:af:4c:a4:
                    a9:3e:10:a1:e2:09:30:cf:44:0d:08:b2:23:58:30:
                    9e:98:3c:90:9b:fb:3d:e2:bf:0f:6b:28:31:57:36:
                    2f:05:29:de:8b:74:0c:64:df:1d:2f:8b:71:76:ca:
                    db:d6:7c:d1:24:50:cf:8d:92:22:f2:3e:6e:f2:84:
                    91:0e:01:5e:8e:f1:1a:75:f6:c6:19:dd:d0:f4:7b:
                    c5:17:09:12:37:c0:de:91:0d:6a:b7:62:84:53:ab:
                    a5:ff:55:a1:fc:76:c9:d9:f5:d9:c6:5f:95:eb:50:
                    b4:14:22:dc:6a:98:f6:01:2c:d8:8b:4a:a5:c7:ec:
                    ed:6b:4a:d2:05:d0:10:04:09:18:e8:3d:7e:b1:27:
                    fa:6f:66:d3:0a:7a:8f:de:fb:17:7b:a7:fb:3d:04:
                    0a:ff:69:87:8c:68:f3:47:00:48:8d:90:1a:96:82:
                    5f:ee:fc:53:59:ce:6b:1a:cd:05:55:aa:9b:60:09:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:13:4E:38:1D:AF:95:9F:F2:E0:ED:5C:E4:CB:EB:7E:1B:3A:8A:7E
            X509v3 Authority Key Identifier:
                keyid:B3:8B:DE:76:E4:63:24:15:32:28:2B:26:4A:16:F4:79:CD:7D:02:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/B38BDE76E463241532282B264A16F479CD7D0224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B38BDE76E463241532282B264A16F479CD7D0224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF416BA52A17B78F7D57F16A98E5D9A0B7DC328D02D2CC14A9D7467235748F04/0/3138312e3232352e3132382e302f32312d3234203d3e20323632313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:d7:d8:3e:69:2f:bf:82:c9:6e:4a:b2:c8:8e:61:cb:a4:
         f5:28:d7:f3:be:15:c7:56:4d:7e:4a:f4:dc:5a:63:30:05:dd:
         06:e2:93:c1:a4:20:36:a3:b4:bc:1f:7a:12:39:1c:7c:47:b5:
         5b:14:28:36:33:8d:71:0b:b8:c4:fc:c2:25:74:02:bc:95:c1:
         a2:f1:d2:82:8e:eb:bb:8c:55:ce:9e:ad:77:07:6c:c7:65:ef:
         06:3a:95:44:cc:c5:f7:9e:74:c0:3e:7b:50:e4:8d:44:d1:2e:
         7b:e4:e8:7b:dd:63:68:86:76:c1:42:19:2a:7a:ff:88:8a:15:
         41:a5:d3:56:68:76:e3:21:5b:24:89:c6:67:82:18:47:50:dc:
         58:6e:02:41:ff:0f:fe:f3:07:92:01:7c:ec:a1:12:14:ab:92:
         08:2f:6f:45:20:01:cc:f5:9f:ee:b9:2b:e1:57:33:5b:3d:44:
         09:c8:69:05:0c:c1:4b:b2:e6:88:68:c9:94:9f:0f:ea:6e:dc:
         74:ea:02:08:46:17:e0:5f:6e:ba:37:14:95:9e:ab:10:1f:e6:
         a9:6c:3f:48:6c:ae:5c:41:ce:92:89:96:d9:a2:de:7f:03:43:
         6e:a0:e8:41:7b:59:6e:43:06:24:d4:9d:59:56:76:15:3b:85:
         94:89:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:45:34 2025 by rpki-client