Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132392e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3132392e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          8aC2JZKXCbf0gRn6KH7ujGz1UQhsLzFVj//ci04e9+A=
Subject key identifier:   85:4C:A3:8F:9C:25:62:8E:B7:D1:74:96:8E:9B:6B:C8:8E:18:47:96
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       4CA39F4D0BCB9DFC24E8BA90F33B5BC4BC023A5A
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132392e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:52 +0000
ROA not before:           Tue 04 Feb 2025 18:32:52 +0000
ROA not after:            Tue 03 Feb 2026 18:37:52 +0000
asID:                     52323
IP address blocks:        181.16.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a3:9f:4d:0b:cb:9d:fc:24:e8:ba:90:f3:3b:5b:c4:bc:02:3a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:52 2025 GMT
            Not After : Feb  3 18:37:52 2026 GMT
        Subject: CN=854CA38F9C25628EB7D174968E9B6BC88E184796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:bc:98:b7:4e:b8:f4:cd:50:70:b5:df:34:
                    d8:20:53:77:19:2d:45:d8:57:8f:19:de:09:c8:72:
                    0f:ce:e3:45:99:b5:58:ea:03:ab:e3:a5:85:9d:42:
                    e8:b3:d3:f6:ca:3f:c7:7d:31:5d:ef:12:a3:d8:a0:
                    a2:63:e6:3f:67:05:23:a6:70:b3:23:34:c1:a6:b5:
                    73:93:a9:89:cc:a8:4f:c8:a3:30:bb:8a:67:e9:1b:
                    f5:7e:1d:c6:40:6e:9a:5c:d8:c3:f5:60:34:78:c7:
                    bc:c6:8b:51:4c:c0:ec:9d:b7:78:02:8b:de:1c:2c:
                    63:6a:44:09:82:2b:af:b8:49:29:31:41:98:6f:05:
                    7a:37:0f:2d:12:39:84:49:a9:dc:72:c8:50:dd:19:
                    41:c6:ec:9b:69:ce:a5:d5:a8:f5:69:f7:4b:e0:4c:
                    ae:a2:4d:84:a0:0d:e5:44:02:c2:d0:3b:7a:9e:f3:
                    34:83:37:a8:3b:24:0b:a1:1b:cf:05:31:b7:87:d5:
                    f7:10:cb:2b:e7:e7:f7:2c:46:64:12:fc:f8:a0:1f:
                    a6:aa:11:c0:6f:5d:05:b1:8a:92:4e:31:bb:76:29:
                    22:30:f8:57:1b:e0:d1:04:a3:aa:ae:ef:61:b0:92:
                    4a:1c:68:82:59:27:b8:91:fe:9b:76:6c:d7:ac:b5:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4C:A3:8F:9C:25:62:8E:B7:D1:74:96:8E:9B:6B:C8:8E:18:47:96
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3132392e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:94:d8:60:02:5b:c1:d2:15:4e:bf:40:53:16:1f:4a:a1:a3:
         26:38:91:31:59:97:d1:ec:a7:2d:b6:08:a6:43:0a:99:8c:a4:
         ea:e3:5a:b8:bd:29:5d:bf:7f:0b:2a:ee:5f:a6:ad:6c:ae:8b:
         df:9d:a2:1b:44:fb:6d:bf:78:f9:05:9b:14:f4:fd:52:fd:fb:
         e5:57:7d:80:32:8b:c3:66:8e:19:a2:f4:4d:94:a6:df:23:d7:
         a1:9c:db:39:df:f6:1e:7b:02:76:01:52:ab:44:0e:7b:4a:0a:
         7d:9b:21:ad:21:95:9d:05:04:ed:00:04:e8:00:97:fb:df:af:
         f8:3a:eb:8e:4e:01:de:8e:c5:da:0b:5d:1c:49:07:5b:16:c4:
         0e:95:c5:18:a0:60:be:d4:18:e2:59:83:ef:1d:93:b2:70:37:
         53:7d:e4:ba:4e:35:0e:0c:70:e4:46:7f:23:66:2c:4c:fc:39:
         5b:c6:44:65:97:50:6a:6e:85:0d:ab:28:39:4d:3a:43:cd:26:
         ac:39:da:0c:06:74:39:ae:b5:0f:bb:1d:d5:0a:b8:9a:0d:1b:
         c2:dd:cb:9b:a5:d7:56:6a:71:9a:3c:cc:8c:a7:2c:8d:ca:5f:
         ca:65:51:f0:77:6f:fe:01:e2:91:b2:98:53:59:cb:99:14:05:
         7a:a3:6b:b5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTKOfTQvLnfwk6LqQ8ztbxLwCOlowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNTJaFw0yNjAyMDMxODM3NTJaMDMxMTAvBgNV
BAMTKDg1NENBMzhGOUMyNTYyOEVCN0QxNzQ5NjhFOUI2QkM4OEUxODQ3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsryYt0649M1QcLXfNNggU3cZ
LUXYV48Z3gnIcg/O40WZtVjqA6vjpYWdQuiz0/bKP8d9MV3vEqPYoKJj5j9nBSOm
cLMjNMGmtXOTqYnMqE/IozC7imfpG/V+HcZAbppc2MP1YDR4x7zGi1FMwOydt3gC
i94cLGNqRAmCK6+4SSkxQZhvBXo3Dy0SOYRJqdxyyFDdGUHG7JtpzqXVqPVp90vg
TK6iTYSgDeVEAsLQO3qe8zSDN6g7JAuhG88FMbeH1fcQyyvn5/csRmQS/PigH6aq
EcBvXQWxipJOMbt2KSIw+Fcb4NEEo6qu72GwkkocaIJZJ7iR/pt2bNestQM9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhUyjj5wlYo630XSWjptryI4YR5YwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzMjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALUQgTAN
BgkqhkiG9w0BAQsFAAOCAQEAnZTYYAJbwdIVTr9AUxYfSqGjJjiRMVmX0eynLbYI
pkMKmYyk6uNauL0pXb9/CyruX6atbK6L352iG0T7bb94+QWbFPT9Uv375Vd9gDKL
w2aOGaL0TZSm3yPXoZzbOd/2HnsCdgFSq0QOe0oKfZshrSGVnQUE7QAE6ACX+9+v
+Drrjk4B3o7F2gtdHEkHWxbEDpXFGKBgvtQY4lmD7x2TsnA3U33kuk41Dgxw5EZ/
I2YsTPw5W8ZEZZdQam6FDasoOU06Q80mrDnaDAZ0Oa61D7sd1Qq4mg0bwt3Lm6XX
VmpxmjzMjKcsjcpfymVR8Hdv/gHikbKYU1nLmRQFeqNrtQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:40 2025 by rpki-client