Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138302e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3138302e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          dO4xv9CvAGDcovAo1Anltw33ytSkpCOgs2NZrZ72PkU=
Subject key identifier:   12:DE:CA:DE:1F:7B:1B:36:30:E2:E0:2D:32:FA:98:3B:9E:AC:D2:47
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       67938E3D3E13599470334CFECC7B28E066DE9811
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138302e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:53 +0000
ROA not before:           Tue 04 Feb 2025 18:32:53 +0000
ROA not after:            Tue 03 Feb 2026 18:37:53 +0000
asID:                     52323
IP address blocks:        181.16.180.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:93:8e:3d:3e:13:59:94:70:33:4c:fe:cc:7b:28:e0:66:de:98:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:53 2025 GMT
            Not After : Feb  3 18:37:53 2026 GMT
        Subject: CN=12DECADE1F7B1B3630E2E02D32FA983B9EACD247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:90:1e:05:c2:06:6e:ae:28:eb:01:e7:78:
                    97:31:6e:f1:74:94:fd:71:9d:08:18:f1:ea:cf:9c:
                    67:15:04:bb:d2:f0:a5:e8:84:be:b0:38:ad:55:a7:
                    bb:77:84:95:4a:ac:31:89:4d:e8:cc:4c:8f:71:cd:
                    4d:db:a3:75:08:7d:b7:40:5d:3a:fe:db:5f:b1:2f:
                    51:52:51:f1:48:07:3b:23:e7:81:aa:b9:1b:82:71:
                    a8:f8:99:10:2d:ce:24:46:58:2b:92:09:91:7d:1c:
                    3f:73:0c:9a:87:bc:d0:74:57:10:21:3d:b3:69:44:
                    67:d6:85:b7:ac:98:e5:87:d2:36:b7:72:6b:d1:38:
                    91:aa:36:2c:3a:8d:bd:29:76:bf:35:46:55:32:5a:
                    b9:4c:92:b7:04:d2:d1:71:f2:09:e0:43:63:50:a4:
                    c5:a1:74:e4:d4:81:be:d0:e3:d1:03:30:55:46:6c:
                    01:21:69:7c:5a:41:83:36:ec:3e:73:2d:99:0a:0b:
                    81:d1:04:a1:19:3f:55:f2:b4:80:ef:4c:93:2d:3b:
                    7a:2c:cd:de:2c:df:c3:e8:5c:16:cb:e2:fd:67:ad:
                    48:77:13:e9:ae:dd:0d:30:a6:e7:8a:2a:16:ef:34:
                    bb:40:64:f5:93:29:10:a3:c3:f3:d3:64:ed:cb:fb:
                    b8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DE:CA:DE:1F:7B:1B:36:30:E2:E0:2D:32:FA:98:3B:9E:AC:D2:47
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138302e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:9f:06:da:1f:7d:ad:ca:5c:eb:4a:31:32:eb:73:12:8a:55:
         7d:0e:b7:ce:c6:cd:ae:c3:ed:e6:8c:03:c1:9d:d4:91:17:62:
         36:cc:10:2b:f5:50:06:f8:f3:e5:da:21:b9:e4:2a:1c:75:3d:
         d6:68:ab:44:e3:2c:c6:ad:5b:c2:d3:80:7a:8d:0a:f0:2e:c0:
         57:38:17:71:29:7b:99:72:5b:5d:f9:39:bb:24:a7:4c:f7:1d:
         73:f9:18:00:26:96:ea:d5:83:e0:49:82:0e:5c:af:e1:b5:51:
         25:d2:09:ab:0c:8d:08:5b:bd:b4:10:e0:51:48:0d:e2:92:07:
         f3:2f:fe:f5:d6:d6:9c:09:1d:c0:85:b7:18:52:51:42:18:94:
         43:09:6a:52:65:ab:bd:59:1e:f0:b2:f4:5d:bd:5e:61:a7:a6:
         7c:5f:3a:df:1b:33:d4:b7:c6:ae:a5:5f:0d:15:28:1d:1e:33:
         37:71:00:8b:46:49:f2:88:58:53:22:7d:56:54:39:1d:97:7a:
         d0:d1:f7:2c:51:f2:e7:02:2d:0b:0f:9f:48:9f:1b:1c:ab:ff:
         e4:85:d8:29:6e:2e:77:f1:bc:9c:b6:b0:f0:0f:b9:08:c0:35:
         21:3f:0a:0b:13:19:a1:4d:8a:69:4e:6b:c2:40:0a:b2:e2:ce:
         da:46:50:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZ5OOPT4TWZRwM0z+zHso4GbemBEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNTNaFw0yNjAyMDMxODM3NTNaMDMxMTAvBgNV
BAMTKDEyREVDQURFMUY3QjFCMzYzMEUyRTAyRDMyRkE5ODNCOUVBQ0QyNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZR5AeBcIGbq4o6wHneJcxbvF0
lP1xnQgY8erPnGcVBLvS8KXohL6wOK1Vp7t3hJVKrDGJTejMTI9xzU3bo3UIfbdA
XTr+21+xL1FSUfFIBzsj54GquRuCcaj4mRAtziRGWCuSCZF9HD9zDJqHvNB0VxAh
PbNpRGfWhbesmOWH0ja3cmvROJGqNiw6jb0pdr81RlUyWrlMkrcE0tFx8gngQ2NQ
pMWhdOTUgb7Q49EDMFVGbAEhaXxaQYM27D5zLZkKC4HRBKEZP1XytIDvTJMtO3os
zd4s38PoXBbL4v1nrUh3E+mu3Q0wpueKKhbvNLtAZPWTKRCjw/PTZO3L+7iBAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEt7K3h97GzYw4uAtMvqYO56s0kcwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzODMwMmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQtDAN
BgkqhkiG9w0BAQsFAAOCAQEAd58G2h99rcpc60oxMutzEopVfQ63zsbNrsPt5owD
wZ3UkRdiNswQK/VQBvjz5dohueQqHHU91mirROMsxq1bwtOAeo0K8C7AVzgXcSl7
mXJbXfk5uySnTPcdc/kYACaW6tWD4EmCDlyv4bVRJdIJqwyNCFu9tBDgUUgN4pIH
8y/+9dbWnAkdwIW3GFJRQhiUQwlqUmWrvVke8LL0Xb1eYaemfF863xsz1LfGrqVf
DRUoHR4zN3EAi0ZJ8ohYUyJ9VlQ5HZd60NH3LFHy5wItCw+fSJ8bHKv/5IXYKW4u
d/G8nLaw8A+5CMA1IT8KCxMZoU2KaU5rwkAKsuLO2kZQ4Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:21 2025 by rpki-client