Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D860F45E0F2E01536EF259C146AE7906D3E1AB1ACEA0E58A23419367746B0031/0/3138312e3232342e3232322e302f32352d3235203d3e20323731393237.roa
File:                     3138312e3232342e3232322e302f32352d3235203d3e20323731393237.roa (raw, json)
Hash identifier:          J/4Q+sWOvg8wpHrRNHFIYziyjPt78DDoPmBhXKR2bNQ=
Subject key identifier:   FB:45:F6:71:A8:94:3D:B4:D0:B5:10:85:BC:92:8F:6A:86:93:95:50
Certificate issuer:       /CN=B54237E250F5EEDE052CF77EEA60F174089F9D4E
Certificate serial:       721C0B817390BFF4C611C5C1E5E4863DB09858AF
Authority key identifier: B5:42:37:E2:50:F5:EE:DE:05:2C:F7:7E:EA:60:F1:74:08:9F:9D:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B54237E250F5EEDE052CF77EEA60F174089F9D4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D860F45E0F2E01536EF259C146AE7906D3E1AB1ACEA0E58A23419367746B0031/0/3138312e3232342e3232322e302f32352d3235203d3e20323731393237.roa
Signing time:             Wed 04 Dec 2024 10:05:00 +0000
ROA not before:           Wed 04 Dec 2024 10:00:00 +0000
ROA not after:            Wed 03 Dec 2025 10:05:00 +0000
asID:                     271927
IP address blocks:        181.224.222.0/25 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1c:0b:81:73:90:bf:f4:c6:11:c5:c1:e5:e4:86:3d:b0:98:58:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B54237E250F5EEDE052CF77EEA60F174089F9D4E
        Validity
            Not Before: Dec  4 10:00:00 2024 GMT
            Not After : Dec  3 10:05:00 2025 GMT
        Subject: CN=FB45F671A8943DB4D0B51085BC928F6A86939550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c3:06:e1:7c:38:70:ca:05:15:2d:6e:ee:5f:
                    b8:71:91:9c:72:ab:50:25:65:00:ef:46:3c:bd:9d:
                    7f:cb:7f:a5:b7:23:e5:20:65:be:c5:51:e1:51:b1:
                    f3:bc:d6:b3:39:44:57:2d:0b:5e:7e:29:05:1a:40:
                    57:30:0b:cb:57:2c:ba:b4:2b:ba:d4:3d:4d:db:f0:
                    1e:33:d6:f7:91:4a:9f:f1:de:f6:2d:46:62:23:49:
                    2f:52:5f:51:5a:fc:a9:e8:d0:7c:c4:91:77:86:31:
                    04:d0:b5:f8:43:e4:da:da:a2:24:80:39:88:74:53:
                    c3:0f:24:fb:14:7d:39:08:d6:d2:33:de:1e:21:30:
                    bc:27:d0:cf:b7:76:cb:b3:17:35:10:37:83:c5:d8:
                    ad:8e:2b:28:4c:98:6f:1c:81:0e:47:00:bc:ff:21:
                    12:b0:ae:e8:34:91:53:06:44:c0:21:5a:6e:1d:bd:
                    05:0b:f3:2d:e8:65:f4:a2:1f:e4:bf:72:24:eb:c8:
                    ac:79:b7:eb:6e:d4:14:be:41:88:0f:32:51:bb:d3:
                    43:14:47:91:66:76:42:72:71:db:98:85:6e:cc:eb:
                    4a:2d:3e:01:27:2b:73:00:38:3e:44:0b:34:68:f4:
                    d2:74:0e:fb:33:53:2b:96:3c:2e:98:09:e1:ba:7f:
                    7b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:F6:71:A8:94:3D:B4:D0:B5:10:85:BC:92:8F:6A:86:93:95:50
            X509v3 Authority Key Identifier:
                keyid:B5:42:37:E2:50:F5:EE:DE:05:2C:F7:7E:EA:60:F1:74:08:9F:9D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D860F45E0F2E01536EF259C146AE7906D3E1AB1ACEA0E58A23419367746B0031/0/B54237E250F5EEDE052CF77EEA60F174089F9D4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B54237E250F5EEDE052CF77EEA60F174089F9D4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D860F45E0F2E01536EF259C146AE7906D3E1AB1ACEA0E58A23419367746B0031/0/3138312e3232342e3232322e302f32352d3235203d3e20323731393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.222.0/25

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:f5:00:2c:70:e7:5e:8d:e7:96:c4:28:9f:8c:73:9d:c3:
         69:ee:2f:c5:1c:a6:60:2e:cf:3d:4e:bc:eb:2d:31:7e:97:14:
         17:3c:ed:9f:72:3c:13:00:f7:4b:03:0c:e3:2e:58:e3:56:ea:
         ae:44:ab:62:88:43:9a:ed:2e:fb:a0:7b:83:ac:43:57:bc:99:
         8d:a1:35:34:aa:f6:8a:30:d1:c1:38:65:d1:a1:f5:77:68:4c:
         9c:da:d7:78:54:e6:f2:6c:71:44:b2:4a:4d:ea:89:d0:df:cc:
         87:2c:ee:38:6d:8a:39:a0:5d:f3:00:12:15:17:39:82:be:23:
         dd:65:08:09:7c:61:62:84:68:31:6f:d0:01:96:b6:c2:3e:18:
         78:fd:4f:dc:8b:bf:b4:a3:42:a9:63:88:04:b4:8f:52:e2:51:
         9b:59:e0:61:6f:d6:18:d8:b5:69:23:99:04:9e:e7:ba:07:90:
         da:a0:47:f8:42:8a:26:1c:69:de:17:ef:1a:c4:1b:6f:27:a4:
         a6:e4:8a:20:4e:a6:72:9a:9b:5a:93:07:83:d7:56:56:cd:c1:
         02:4e:08:d3:fb:34:36:11:c2:18:96:82:73:97:0c:b5:2c:d6:
         17:fb:69:a6:3c:b0:a6:38:7e:97:43:a2:52:c9:13:f4:c0:5a:
         a8:8c:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:50 2025 by rpki-client