Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136322e302e302f31352d3234203d3e2037343138.roa
File:                     3138312e3136322e302e302f31352d3234203d3e2037343138.roa (raw, json)
Hash identifier:          6+zwBuwvgmYR2au9r0en2JusElFHoNu4vEJZP03xXhE=
Subject key identifier:   2E:93:06:0D:A0:81:38:C8:0A:5E:8D:E8:7D:F7:6D:EA:1F:74:F1:E2
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       16635DE46016E74ED73A188F52E36A69B5D1AF55
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136322e302e302f31352d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:52 +0000
ROA not before:           Tue 04 Feb 2025 18:24:52 +0000
ROA not after:            Tue 03 Feb 2026 18:29:52 +0000
asID:                     7418
IP address blocks:        181.162.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:63:5d:e4:60:16:e7:4e:d7:3a:18:8f:52:e3:6a:69:b5:d1:af:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:52 2025 GMT
            Not After : Feb  3 18:29:52 2026 GMT
        Subject: CN=2E93060DA08138C80A5E8DE87DF76DEA1F74F1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:23:73:c9:90:44:a3:ab:cd:42:9f:25:58:
                    37:a9:97:00:62:d9:14:92:ba:da:73:85:12:52:d8:
                    05:e3:d8:a3:d1:df:b7:32:8e:60:90:c5:bc:c8:7a:
                    a2:33:bb:05:6f:90:ed:16:14:e1:12:f1:c5:ac:2c:
                    bd:b4:2b:47:21:e2:17:86:4e:c2:1f:5b:a1:73:6a:
                    45:4f:a6:eb:7a:36:2d:95:ef:3c:5d:31:80:f5:15:
                    ec:78:db:a9:1b:9c:99:6a:e2:00:db:c9:2f:fa:5c:
                    12:76:9a:c7:51:31:2c:04:dd:46:7e:ad:76:29:d3:
                    6b:85:55:49:08:63:fc:0f:e0:37:a7:5a:6a:ec:2e:
                    cd:2e:bb:10:dc:c3:09:dd:50:0a:26:13:0c:19:09:
                    a3:93:51:10:ba:b5:3c:2a:60:23:e7:82:c2:28:89:
                    fe:d5:00:a3:63:09:31:b0:59:cd:ef:16:20:84:15:
                    03:93:ec:a3:f0:6c:58:df:5b:69:fb:84:60:41:1b:
                    54:c1:10:91:c2:a0:df:d1:14:cb:b3:54:e2:cf:db:
                    8d:d7:04:c7:02:56:97:5f:60:bb:b3:f8:63:6b:82:
                    48:64:b4:85:0b:f3:95:ec:f3:4e:88:94:3d:b0:80:
                    f4:02:03:cf:df:a6:56:80:c0:e8:e1:82:8a:c1:a4:
                    07:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:06:0D:A0:81:38:C8:0A:5E:8D:E8:7D:F7:6D:EA:1F:74:F1:E2
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3136322e302e302f31352d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8a:cb:81:b3:c6:dd:8f:e7:ef:a2:52:90:53:26:f6:f8:05:99:
         ea:e6:ef:1a:c8:78:6f:5a:13:86:9c:8e:99:46:2a:25:f2:6b:
         f4:ee:2f:e0:b7:b5:63:3f:b0:9a:de:c5:e0:a5:8f:31:a4:91:
         8f:12:27:3f:bd:b2:af:56:e9:9e:42:0b:b8:88:4d:ee:50:b9:
         22:fa:f9:8b:8a:0b:6b:1b:11:f5:83:7e:ac:0b:83:fe:88:5f:
         14:d9:dc:79:a7:e9:f8:b5:b5:ab:97:0b:4b:4f:8b:0d:1c:5d:
         ce:2a:a6:55:a8:c8:48:0c:5b:a4:4e:8b:8b:e7:1a:d6:6d:61:
         5c:fb:28:a3:a1:25:da:68:a4:38:28:fe:db:23:60:3e:21:98:
         6a:9c:63:28:f4:11:ec:47:34:fc:17:4d:e1:f6:42:5d:97:78:
         67:ec:66:a2:65:41:67:48:73:1b:71:fc:83:87:ae:ad:39:9a:
         e9:f4:65:3c:99:7a:4e:a7:7e:39:79:71:0f:1e:b5:48:d6:7d:
         49:29:71:b6:a8:64:fe:6a:70:05:1e:91:c3:ae:30:bb:4a:e1:
         0e:a9:f2:ad:82:03:b6:73:b9:a8:7f:fe:e6:f4:19:c2:ec:b9:
         9f:f5:a8:17:7d:f8:47:74:1e:9a:84:88:c0:99:a6:2b:ab:a6:
         3e:02:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:41:43 2025 by rpki-client