Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138312e3139392e3134312e302f32342d3234203d3e203332303334.roa
File:                     3138312e3139392e3134312e302f32342d3234203d3e203332303334.roa (raw, json)
Hash identifier:          by/zYzH9sTJ9Ag2PeXhNM7w0fMQkrQB/+R+yWMQwzeg=
Subject key identifier:   A4:05:2C:45:4D:D5:D4:49:A5:C7:44:46:F4:E4:45:54:9B:B7:40:4C
Certificate issuer:       /CN=DC553BD05B33548C342568566291E719B4FA73B9
Certificate serial:       1539126D7F67CD49EBD5CCBE781E4EC96B9A74BD
Authority key identifier: DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138312e3139392e3134312e302f32342d3234203d3e203332303334.roa
Signing time:             Tue 04 Feb 2025 18:19:46 +0000
ROA not before:           Tue 04 Feb 2025 18:14:46 +0000
ROA not after:            Tue 03 Feb 2026 18:19:46 +0000
asID:                     32034
IP address blocks:        181.199.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:39:12:6d:7f:67:cd:49:eb:d5:cc:be:78:1e:4e:c9:6b:9a:74:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC553BD05B33548C342568566291E719B4FA73B9
        Validity
            Not Before: Feb  4 18:14:46 2025 GMT
            Not After : Feb  3 18:19:46 2026 GMT
        Subject: CN=A4052C454DD5D449A5C74446F4E445549BB7404C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:c7:9b:ac:39:64:b6:3f:cf:ef:84:06:12:
                    54:58:8c:71:2a:19:73:76:69:a6:cc:37:5b:01:07:
                    ce:25:69:79:cc:7d:62:f6:1a:c1:f9:b8:40:21:b6:
                    9a:57:b2:38:95:10:88:3f:9c:d4:86:02:da:d0:96:
                    85:7a:88:a9:6a:e4:2c:b7:da:3c:a5:47:8f:99:09:
                    1d:c2:70:19:dd:56:4e:2a:7e:e4:e0:86:8c:50:7e:
                    3e:c8:b7:6b:16:14:a8:89:1b:f4:09:29:a3:cc:42:
                    97:4b:75:74:3f:dd:58:51:06:2a:cf:7c:24:59:b6:
                    e2:a8:29:f5:8c:f8:8b:5b:a9:87:9d:6d:e4:fc:da:
                    00:84:c8:13:ac:d6:30:e5:ae:20:11:21:1b:7b:65:
                    2d:9a:29:51:d8:6e:bd:02:b6:c5:13:48:00:a9:6b:
                    a5:db:dd:0a:a6:b1:55:28:86:3c:aa:17:13:cb:06:
                    02:d8:ad:a9:f1:89:86:44:e7:62:fc:00:76:7f:3e:
                    fa:b3:bb:44:25:e9:5c:a5:37:2f:8a:fc:61:4a:e1:
                    0e:fa:ed:72:35:84:34:61:a4:5a:6e:99:a4:c8:62:
                    2c:25:ca:66:9b:97:49:51:b4:c9:bd:bb:00:6a:ec:
                    8c:9f:a6:01:85:c6:2c:f2:44:f7:3c:87:de:19:ba:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:05:2C:45:4D:D5:D4:49:A5:C7:44:46:F4:E4:45:54:9B:B7:40:4C
            X509v3 Authority Key Identifier:
                keyid:DC:55:3B:D0:5B:33:54:8C:34:25:68:56:62:91:E7:19:B4:FA:73:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/DC553BD05B33548C342568566291E719B4FA73B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DC553BD05B33548C342568566291E719B4FA73B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAC2BC754BFDD4535D49F99D0671743C3C0825A6B6D57B48E7350451BA87E9EF/0/3138312e3139392e3134312e302f32342d3234203d3e203332303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:ca:8c:c9:c6:b7:0f:1a:a2:8c:b1:07:3a:c5:77:8e:b9:
         97:12:8e:95:81:00:79:0f:d9:27:1e:3f:56:ca:69:cb:e7:90:
         5b:d1:72:7e:25:9c:8d:78:ed:27:4b:86:4c:10:26:60:c5:86:
         07:db:54:37:ec:55:60:72:27:08:34:64:4d:24:a7:a7:55:ea:
         a8:01:23:7e:d2:a1:0b:09:3e:3b:a4:5e:8d:5d:2f:45:1f:6e:
         a2:18:4c:b2:61:cb:b5:15:e7:08:d1:8b:56:c2:c2:fc:a5:1e:
         8d:4e:a4:d0:ba:9f:89:72:3a:ef:0c:7c:86:5f:eb:16:21:e2:
         91:93:07:62:81:a1:91:5f:c7:13:21:ac:25:74:63:8e:05:77:
         5e:b3:6f:85:46:25:18:17:48:69:b9:08:e3:59:a7:4a:8d:3b:
         3f:57:ff:a4:fd:5f:98:1d:c9:40:38:15:65:a7:3f:27:fd:17:
         27:d6:5c:59:c4:1f:44:d4:98:4b:71:c1:ac:1e:5a:0f:11:24:
         e7:4e:d8:bd:87:12:cb:29:af:bb:6a:7f:d2:0f:e6:9c:6a:87:
         a6:49:d7:73:8b:8d:eb:b7:d6:92:8c:15:cd:64:c8:46:f5:96:
         a1:fa:70:77:74:f9:ad:52:f9:8c:75:93:72:96:8b:72:6a:36:
         27:6c:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:41 2025 by rpki-client