Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137352e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3137352e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          aymeQkBqhh9320/hWrQwNNkVzNusxhPgpJx2LHYatsA=
Subject key identifier:   F3:E4:D4:AA:4D:E8:35:6B:6B:57:5F:F5:13:A6:E0:9B:AB:0A:8B:09
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7FA6265679D41BD15FF8500750925C873943B8FE
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137352e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:41 +0000
ROA not before:           Tue 04 Feb 2025 18:32:41 +0000
ROA not after:            Tue 03 Feb 2026 18:37:41 +0000
asID:                     52323
IP address blocks:        181.16.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a6:26:56:79:d4:1b:d1:5f:f8:50:07:50:92:5c:87:39:43:b8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:41 2025 GMT
            Not After : Feb  3 18:37:41 2026 GMT
        Subject: CN=F3E4D4AA4DE8356B6B575FF513A6E09BAB0A8B09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:92:0d:06:d8:c2:ed:8c:4e:17:e4:8d:e7:
                    63:ba:78:71:b9:ec:b5:be:29:83:e5:85:2a:57:b3:
                    16:02:02:ee:b8:f8:4a:46:49:83:61:51:69:52:4b:
                    df:f8:f8:57:db:ef:0e:63:df:08:6a:cf:08:c9:82:
                    f4:b6:c1:84:af:b9:6b:b3:3d:d0:d8:67:07:c6:36:
                    64:5c:b5:fe:9f:06:31:57:34:e6:53:15:bb:1b:fd:
                    7e:1d:07:ec:05:3a:9a:d8:30:c5:1b:18:74:38:0a:
                    4e:9e:fc:07:ac:68:6e:bc:a4:55:c5:78:7d:c9:49:
                    dd:2c:72:f1:c8:e5:29:c2:6b:bf:7c:9c:e1:ff:48:
                    e5:61:2d:ec:c7:2c:88:e3:00:29:94:b6:88:94:ac:
                    a0:44:a8:71:a9:6a:74:dd:2e:4c:43:d8:81:37:51:
                    ff:a6:81:69:b0:60:c1:31:b5:1c:ea:b0:91:a2:07:
                    5f:a8:1a:13:f8:2a:2b:4e:c9:23:08:c5:18:cc:14:
                    91:bb:98:90:2d:33:1f:da:33:f8:0e:7b:18:ad:1c:
                    a0:4e:d9:3f:ab:1b:02:8b:95:d1:47:10:16:ea:ca:
                    65:08:f6:78:fe:71:fb:65:2f:59:da:22:e2:be:ca:
                    dd:c1:3f:39:e6:d9:76:0c:d5:df:d8:cd:c8:c7:45:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E4:D4:AA:4D:E8:35:6B:6B:57:5F:F5:13:A6:E0:9B:AB:0A:8B:09
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3137352e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:05:8f:0c:ac:db:0c:e8:92:0c:61:b5:25:5f:95:3d:ff:5d:
         15:0b:a8:ee:41:0b:5c:9a:61:e0:a5:db:51:9f:7c:51:db:2e:
         27:1f:b4:aa:6a:22:60:13:bd:ab:06:ab:b7:91:ef:82:f8:91:
         73:90:04:86:e9:af:81:71:b0:4e:d1:9a:96:23:97:68:6f:e4:
         b3:09:fe:93:05:b8:5f:1f:ed:62:80:8f:dd:08:5d:04:9a:0f:
         2b:3f:da:3e:72:f5:5e:70:4f:85:70:8f:ab:db:da:e0:f3:1e:
         06:56:fe:dc:d0:31:47:6f:22:f9:1d:33:4d:9a:b5:e7:7c:22:
         0f:c7:a0:e9:48:40:4e:30:b7:34:0d:16:bb:83:7d:e9:b5:a9:
         07:a8:f6:c4:e4:59:e7:41:cd:77:23:86:54:03:3a:14:45:42:
         19:3b:69:dc:4a:b8:31:12:c5:88:02:c9:ac:c9:86:6f:f1:21:
         03:a8:8f:d6:28:5b:9a:53:d1:11:c9:f5:ed:9b:d3:34:b7:10:
         41:2b:18:36:18:6e:1b:42:87:d4:1e:d8:47:23:f1:08:a6:ac:
         42:fe:b7:e1:7b:69:8f:0e:9e:d7:cc:ff:1a:5c:b6:a4:a3:77:
         a2:07:dc:05:a0:d6:f2:44:4b:5b:3b:af:aa:87:b7:6d:41:a9:
         93:2b:a5:32
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUf6YmVnnUG9Ff+FAHUJJchzlDuP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNDFaFw0yNjAyMDMxODM3NDFaMDMxMTAvBgNV
BAMTKEYzRTRENEFBNERFODM1NkI2QjU3NUZGNTEzQTZFMDlCQUIwQThCMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxJINBtjC7YxOF+SN52O6eHG5
7LW+KYPlhSpXsxYCAu64+EpGSYNhUWlSS9/4+Ffb7w5j3whqzwjJgvS2wYSvuWuz
PdDYZwfGNmRctf6fBjFXNOZTFbsb/X4dB+wFOprYMMUbGHQ4Ck6e/AesaG68pFXF
eH3JSd0scvHI5SnCa798nOH/SOVhLezHLIjjACmUtoiUrKBEqHGpanTdLkxD2IE3
Uf+mgWmwYMExtRzqsJGiB1+oGhP4KitOySMIxRjMFJG7mJAtMx/aM/gOexitHKBO
2T+rGwKLldFHEBbqymUI9nj+cftlL1naIuK+yt3BPznm2XYM1d/YzcjHRUUTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8+TUqk3oNWtrV1/1E6bgm6sKiwkwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzNzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALUQrzAN
BgkqhkiG9w0BAQsFAAOCAQEAngWPDKzbDOiSDGG1JV+VPf9dFQuo7kELXJph4KXb
UZ98UdsuJx+0qmoiYBO9qwart5HvgviRc5AEhumvgXGwTtGaliOXaG/kswn+kwW4
Xx/tYoCP3QhdBJoPKz/aPnL1XnBPhXCPq9va4PMeBlb+3NAxR28i+R0zTZq153wi
D8eg6UhATjC3NA0Wu4N96bWpB6j2xORZ50HNdyOGVAM6FEVCGTtp3Eq4MRLFiALJ
rMmGb/EhA6iP1ihbmlPREcn17ZvTNLcQQSsYNhhuG0KH1B7YRyPxCKasQv634Xtp
jw6e18z/Gly2pKN3ogfcBaDW8kRLWzuvqoe3bUGpkyulMg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:51 2025 by rpki-client