Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3134382e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          X9QG6yy0tFJxBe6qjOv3xZLWTKfwvNimNG/dNyvHJ6g=
Subject key identifier:   0C:87:73:BB:DC:97:9D:EF:BC:54:76:82:1B:74:42:D6:C4:3B:6B:81
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       2F0085FE0B99490FEACC785B901F2B2FC196907D
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:46 +0000
ROA not before:           Tue 04 Feb 2025 18:32:46 +0000
ROA not after:            Tue 03 Feb 2026 18:37:46 +0000
asID:                     52323
IP address blocks:        181.16.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:00:85:fe:0b:99:49:0f:ea:cc:78:5b:90:1f:2b:2f:c1:96:90:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:46 2025 GMT
            Not After : Feb  3 18:37:46 2026 GMT
        Subject: CN=0C8773BBDC979DEFBC5476821B7442D6C43B6B81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:c9:94:e8:59:74:fc:07:bf:26:0e:24:83:
                    ea:14:40:50:0f:d4:bd:73:90:5c:5f:26:e8:3c:a9:
                    12:8d:7a:61:7e:ee:56:6b:41:24:66:43:51:b0:ae:
                    33:c5:b4:aa:8c:78:97:6b:f0:61:7c:06:fb:ec:2b:
                    ad:26:3f:05:cc:0e:eb:04:af:92:9b:47:2a:35:c5:
                    06:b8:e7:4c:89:cd:13:5b:2f:c6:7d:76:0b:3f:80:
                    6b:9d:88:6f:28:64:98:cb:9a:22:38:85:21:61:96:
                    ba:c2:a8:9b:d0:3f:67:58:03:2e:67:23:81:ad:4c:
                    11:6b:6d:aa:4f:98:52:f3:dd:3f:65:14:07:0b:88:
                    45:a3:72:59:87:98:c3:40:59:28:5e:c0:91:2f:93:
                    7a:bd:1e:37:b3:20:ca:54:5f:3d:30:5f:fd:51:35:
                    d4:35:55:20:67:c2:7f:03:41:69:2c:50:bc:72:74:
                    49:24:d0:47:f1:e2:92:c5:e4:66:cd:3f:41:cc:ba:
                    a5:1e:2b:1e:86:09:9f:70:60:2a:03:9f:40:8f:75:
                    d5:51:b3:f5:a3:b5:d0:10:fb:49:8a:23:65:83:a0:
                    38:37:f3:fa:b0:81:22:4a:cb:bb:00:e0:c3:fc:80:
                    37:4e:95:88:db:0d:9c:87:01:92:5d:ab:1d:bd:d2:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:73:BB:DC:97:9D:EF:BC:54:76:82:1B:74:42:D6:C4:3B:6B:81
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3134382e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d1:b4:24:a6:ee:39:e4:21:92:09:5d:ea:ad:1d:43:b5:10:
         81:5d:38:4d:d3:c9:63:d4:0e:7b:31:2c:e4:9c:d1:00:c7:97:
         4d:fa:d9:cb:36:d1:b5:a7:f9:10:46:d4:de:78:8f:84:29:39:
         6b:37:25:4d:b1:1f:b4:59:cc:c9:0c:a8:07:f3:38:ff:c5:0a:
         ab:8c:1a:e2:30:1f:1d:85:07:c9:d6:97:99:ad:b3:34:99:f4:
         16:63:92:6f:e3:b6:f5:79:64:94:c7:0a:66:64:72:61:98:5c:
         18:53:55:e4:52:4c:b0:0d:bf:b6:6d:fb:9f:96:51:73:1b:5f:
         30:27:77:80:58:97:a0:b3:51:90:89:39:96:fc:e0:c4:18:be:
         e5:fb:fd:e1:dd:ed:6c:e3:7a:88:01:17:de:69:b8:0b:6e:9b:
         3e:09:9e:c9:77:ab:34:36:b8:a0:ef:da:fb:25:3a:eb:4a:40:
         4e:73:36:c4:ba:cf:b1:3e:28:b6:c9:e9:c9:4f:50:c5:fc:4d:
         f4:6f:7a:52:ec:e1:e3:fd:62:bd:e4:ae:40:45:da:de:8a:ee:
         ba:c7:b2:6a:fb:10:ad:3a:86:4b:01:25:ee:51:7f:3a:2d:87:
         f7:c0:42:d2:2c:56:3a:f4:73:23:8e:a4:70:55:c5:01:63:3d:
         6a:98:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:55 2025 by rpki-client