Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136302e302e302f31352d3234203d3e2037343138.roa
File:                     3138312e3136302e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          h776PmPeDwvOSjsR7gOue1ou6WFYWGhE0iFQEDOFFFg=
Subject key identifier:   41:F2:6B:23:0C:A1:5E:9F:AA:CD:73:17:BA:C5:51:FB:15:4C:CA:DC
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       7D079F45468D1DE1808709595B84E73E42B2D067
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136302e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:55 +0000
ROA not before:           Tue 04 Feb 2025 18:24:55 +0000
ROA not after:            Tue 03 Feb 2026 18:29:55 +0000
asID:                     7418
IP address blocks:        181.160.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:07:9f:45:46:8d:1d:e1:80:87:09:59:5b:84:e7:3e:42:b2:d0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:55 2025 GMT
            Not After : Feb  3 18:29:55 2026 GMT
        Subject: CN=41F26B230CA15E9FAACD7317BAC551FB154CCADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:66:a0:e0:4c:0e:b8:88:2d:52:51:52:5f:fb:
                    3a:97:4a:28:ea:37:52:ff:a6:3b:ee:89:82:99:57:
                    79:17:ce:0a:ce:ac:b2:29:2e:5d:7a:d6:29:e8:79:
                    b1:40:8c:c7:a8:dd:66:9e:62:a9:6a:78:76:79:81:
                    35:3a:b9:cd:bd:28:e9:81:5c:98:70:21:87:8e:77:
                    ef:93:82:41:d3:71:56:53:d8:ca:0e:76:0a:9a:93:
                    ea:78:b8:62:13:25:cb:53:81:dc:42:0e:d5:7f:dc:
                    04:0f:53:df:91:06:42:f4:fa:57:42:1d:a5:0d:ba:
                    bb:7d:9d:49:29:84:28:6b:49:20:f2:d2:4c:6f:d7:
                    4a:94:88:fc:58:fe:c2:d0:71:06:28:0d:10:f3:fa:
                    2f:f9:7a:b1:b7:e6:29:bd:72:d7:7d:26:1b:f9:9a:
                    35:73:1a:e2:4b:59:cb:d4:54:b8:94:06:ea:08:e4:
                    fe:e2:a4:a6:de:cf:15:35:7a:3b:2f:00:b5:3e:77:
                    7b:55:fa:7e:e0:a8:c4:5b:63:ab:69:cd:3e:38:3f:
                    e9:5e:ad:1d:3d:50:96:80:8d:96:69:8c:59:eb:b4:
                    42:73:58:db:cb:74:17:d9:9a:a3:a7:0c:8f:98:8a:
                    bf:21:90:17:e9:0f:8e:87:9f:85:61:f3:b2:20:67:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:6B:23:0C:A1:5E:9F:AA:CD:73:17:BA:C5:51:FB:15:4C:CA:DC
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136302e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.160.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         27:94:7f:cd:c5:c3:3f:ce:02:64:dd:98:93:41:32:1b:59:c3:
         6f:23:59:9e:3c:5d:c9:33:43:b7:b3:f5:06:0a:c0:23:b5:4e:
         9e:8b:e2:1a:01:38:80:1b:61:9c:ea:de:52:35:db:73:ce:bf:
         bc:e8:06:79:b8:75:7a:82:b7:e1:e5:b5:b2:86:68:ea:52:5b:
         4a:ad:1c:29:2b:33:5a:c4:de:32:4a:2c:10:58:9f:48:a3:8b:
         25:b1:2b:53:e6:86:9b:fa:3c:3d:78:a8:25:c4:89:58:b3:ce:
         21:1b:a7:8f:9d:61:a2:c6:78:c2:56:47:a2:f9:0b:a1:f6:11:
         99:de:5a:ca:fc:72:d0:b3:51:e5:9d:8b:74:40:1e:d6:f7:1d:
         c1:18:45:60:5f:50:8e:83:94:f0:a9:5b:27:49:c5:c6:39:f4:
         61:7f:b8:c4:15:b6:80:3c:a1:a5:5f:9c:e6:b7:81:f5:d3:81:
         18:3c:a1:40:05:a8:bb:0d:59:c7:6f:ad:3b:11:f5:7c:97:9b:
         4f:4a:1d:38:30:cf:3d:13:fd:8f:f9:23:3c:b3:bf:8a:d4:2a:
         04:3a:c3:e4:d0:ae:ac:de:25:cf:94:e2:5b:b9:fe:6a:51:7a:
         f6:7f:27:28:9f:84:1a:f3:83:33:c1:86:b0:99:76:8d:64:34:
         b1:e9:10:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----