Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138322e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3138322e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          9xjdZUUh0x2EVHF4NOqZUnzTv69KY7L2wk1COh5pvn4=
Subject key identifier:   8E:2B:B6:7F:D2:68:47:B9:39:24:7B:AC:D6:A4:83:B3:31:87:3A:12
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7E535315CF14CA7E1F7113583E380B6C5CD9C697
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138322e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:37 +0000
ROA not before:           Tue 04 Feb 2025 18:32:37 +0000
ROA not after:            Tue 03 Feb 2026 18:37:37 +0000
asID:                     52323
IP address blocks:        181.16.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:53:53:15:cf:14:ca:7e:1f:71:13:58:3e:38:0b:6c:5c:d9:c6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:37 2025 GMT
            Not After : Feb  3 18:37:37 2026 GMT
        Subject: CN=8E2BB67FD26847B939247BACD6A483B331873A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:c4:d4:ff:b9:f1:91:1c:0d:4d:03:ee:70:
                    01:60:ea:71:2c:75:d8:58:0d:e0:95:05:62:eb:ba:
                    94:43:eb:4f:74:47:7d:7c:f3:fb:5a:7f:83:5d:82:
                    55:c1:94:ae:e6:00:95:13:7f:a9:8c:7e:4c:d6:1a:
                    85:b6:0c:34:3c:44:ca:48:f0:50:f6:50:19:7a:8b:
                    4c:76:ac:99:55:ea:c9:d0:8d:29:ac:09:1e:16:e4:
                    6a:14:93:9c:f0:34:49:fb:cc:81:c3:a6:3f:17:ac:
                    9f:a6:ba:a5:08:90:a5:e1:8f:07:7f:93:37:fd:b6:
                    4f:3f:24:4c:2d:c9:74:46:3f:37:8a:7e:81:c4:69:
                    21:58:4c:20:db:2a:3a:4c:67:09:f5:6f:99:9f:11:
                    44:0b:64:c9:93:a4:77:a2:9e:d3:da:07:ce:e1:01:
                    f5:13:b1:6b:eb:c6:bc:6d:da:1b:4e:b7:d1:f7:c2:
                    4d:ea:f2:01:c0:87:ed:9d:f4:99:09:c3:fc:b4:c9:
                    fa:91:35:d7:bc:43:8b:77:7c:1f:ca:9a:25:6c:6e:
                    21:94:f2:a1:9c:90:f7:5d:4f:86:82:6a:0e:85:10:
                    ab:df:b3:9e:77:48:09:cd:ca:4c:27:93:a1:88:ce:
                    fc:6f:63:64:5b:0a:eb:f6:2d:45:47:6c:00:8d:c2:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2B:B6:7F:D2:68:47:B9:39:24:7B:AC:D6:A4:83:B3:31:87:3A:12
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138322e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ec:f2:ab:4e:4e:9a:4c:ce:da:74:07:40:7e:7a:62:f5:0a:
         20:78:b6:56:37:fa:b4:74:e7:35:2d:b6:65:97:be:91:42:2b:
         17:00:c4:38:2f:25:46:0a:3d:30:38:b5:1b:dc:d5:3f:57:ea:
         2a:c6:5c:3f:86:df:7b:a3:75:9f:09:bf:05:32:ed:95:80:d6:
         e3:3d:f2:c0:61:26:bd:a6:15:71:f4:56:4e:16:6f:6e:03:c3:
         26:3f:59:da:c4:f0:1f:11:86:4a:d5:fb:d4:2d:d7:c7:63:f3:
         4f:9c:43:86:cf:a3:ab:d0:57:8c:a9:7a:ba:23:47:0f:4b:6c:
         b9:95:8e:e1:c3:64:75:b9:b2:a2:5d:88:df:38:e4:b0:e3:a1:
         4a:34:a2:17:84:50:ba:6b:b9:e3:cd:f1:a6:40:0d:0a:08:7d:
         33:bd:c6:0c:ba:e6:f1:45:2f:bc:0f:23:26:df:79:ea:5d:5c:
         a0:1a:45:ad:b3:a9:40:ce:cf:90:7a:82:b0:e6:02:19:d6:7c:
         48:e2:20:0e:45:5d:08:6d:a3:8d:66:bc:57:be:54:a8:74:ec:
         e3:30:3f:f5:ee:fd:56:d2:ee:b7:07:14:13:9e:68:2f:c4:ed:
         d1:b1:9f:f5:44:bf:cf:c3:9c:74:64:e0:0f:3c:f0:68:5c:ce:
         cc:14:3f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:14 2025 by rpki-client