Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3135362e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          UsaMWQNv9MIyBRxMy4Yrg3ZigdZvNFE3//bkAUPArAQ=
Subject key identifier:   0B:70:FF:15:54:3E:03:00:0A:FF:DD:2F:38:9E:2E:0D:67:6A:AF:00
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       5FC29AAB70792D2B8814E8282D21643D34AE6E7C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:36 +0000
ROA not before:           Tue 04 Feb 2025 18:32:36 +0000
ROA not after:            Tue 03 Feb 2026 18:37:36 +0000
asID:                     52323
IP address blocks:        181.16.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c2:9a:ab:70:79:2d:2b:88:14:e8:28:2d:21:64:3d:34:ae:6e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:36 2025 GMT
            Not After : Feb  3 18:37:36 2026 GMT
        Subject: CN=0B70FF15543E03000AFFDD2F389E2E0D676AAF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:ef:f7:69:e1:b0:29:d5:a3:af:3f:b7:b0:
                    38:a2:11:d9:8d:b4:13:4c:b7:66:7b:7c:d2:83:07:
                    b1:ab:e0:46:9f:12:83:7f:7c:72:42:85:51:aa:63:
                    d1:82:ef:6f:f1:e6:72:c5:df:e3:01:92:34:a8:6f:
                    10:c6:b1:c4:32:0a:a8:02:94:d8:b0:dd:d9:b4:11:
                    18:7e:db:fe:b1:ba:e9:36:34:ad:22:66:28:64:49:
                    ec:99:59:51:49:8b:e1:c3:11:ae:4d:7b:90:0c:55:
                    f3:ad:89:7e:63:97:a0:20:75:7f:dc:e7:be:0d:2f:
                    a4:d2:3b:65:de:2e:4b:24:2f:93:82:40:c9:20:4a:
                    47:d7:1a:93:61:e8:dd:fd:da:85:40:9d:0e:f0:c4:
                    4b:d9:47:e1:35:8f:af:72:a9:cb:03:7e:87:d2:01:
                    eb:48:ba:12:80:0d:ea:cb:c7:8e:d1:93:cf:bb:a7:
                    84:6d:25:e0:03:c4:fc:99:98:23:c2:cc:00:1d:50:
                    bc:e8:7e:10:15:d5:d2:c0:39:85:27:de:c5:16:33:
                    ae:d3:2a:44:5d:f3:b9:68:77:db:90:4a:a4:18:02:
                    c3:a3:26:3b:ea:9a:c8:d2:f9:c5:a4:12:61:86:c6:
                    e6:bc:d1:bf:a3:0a:10:d5:e9:d2:45:57:06:1b:04:
                    c5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:70:FF:15:54:3E:03:00:0A:FF:DD:2F:38:9E:2E:0D:67:6A:AF:00
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3135362e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:50:7a:d1:74:c1:e0:f7:38:5c:d3:af:fd:4a:61:f2:fc:28:
         ff:cd:1f:c7:4f:28:10:30:63:53:bd:a5:52:a9:29:b2:3c:d4:
         35:98:8e:f9:9a:ca:0b:af:27:8f:6c:30:63:7d:6a:78:3d:46:
         95:97:46:5d:38:d0:13:fd:4a:8f:7a:67:bf:17:a2:be:c0:c7:
         3a:06:f9:af:0b:b4:ce:42:cc:e7:f0:ca:14:27:d2:71:5e:cf:
         0e:06:56:76:81:62:ba:d3:0b:96:1a:23:f1:3c:0d:d2:0c:90:
         a1:3d:6c:8b:32:22:6b:fd:3e:fb:51:4b:09:27:fe:82:f2:6a:
         6d:4f:66:ca:15:a7:82:c1:3a:c5:8d:4c:b0:45:cb:42:a4:d8:
         b1:dc:08:83:3f:a1:d9:18:24:ea:cd:db:be:fa:ae:3f:a6:c0:
         ae:98:a6:de:13:f9:48:5f:a9:e2:79:3f:80:f5:1a:30:5c:12:
         58:3e:dd:dd:c4:92:89:63:38:31:56:6d:c1:97:4d:b2:1e:e3:
         cb:81:0b:61:c7:e9:6c:72:70:da:94:cc:c3:08:2b:3f:92:4c:
         cf:c4:0f:b0:8f:bd:20:8e:85:92:4b:dc:ce:0a:8f:2a:7b:85:
         ba:75:c9:ca:17:24:33:d2:9d:09:11:7c:bf:4e:0a:21:45:34:
         27:ad:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:41 2025 by rpki-client