Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138382e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3138382e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          PC469VyLaqwOX6mWGAkNcKnG53ZfNrDnIo+uBCjOaSE=
Subject key identifier:   F2:7A:87:1E:09:EB:5C:EB:20:35:B9:0B:D6:12:05:9B:99:2A:E1:29
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       0AB19A7C87A3A954A72AE732017F42DF4F4F3C37
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138382e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:46 +0000
ROA not before:           Tue 04 Feb 2025 18:32:46 +0000
ROA not after:            Tue 03 Feb 2026 18:37:46 +0000
asID:                     52323
IP address blocks:        181.16.188.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b1:9a:7c:87:a3:a9:54:a7:2a:e7:32:01:7f:42:df:4f:4f:3c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:46 2025 GMT
            Not After : Feb  3 18:37:46 2026 GMT
        Subject: CN=F27A871E09EB5CEB2035B90BD612059B992AE129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:fe:bc:99:63:8e:0f:6d:54:78:8b:15:ea:
                    2b:77:39:42:81:0a:d8:a2:74:56:26:85:b3:b9:32:
                    19:7e:fc:d6:f0:8d:07:2b:26:8d:b1:1a:a7:c4:c9:
                    d0:1d:cf:51:f9:9d:d6:b8:24:fa:f5:61:5d:30:38:
                    34:0e:fb:df:b6:3a:41:54:de:2e:5f:0a:c7:fe:6c:
                    60:89:85:fa:b9:a8:dc:c9:fd:29:44:32:7b:65:43:
                    f6:11:b2:a3:16:f4:9b:0f:27:4c:fc:cd:91:b8:9d:
                    f1:8a:e5:b9:1f:57:48:e7:47:bc:59:f2:65:4b:ce:
                    0c:db:4f:3f:36:b5:3a:26:d2:45:9f:0e:5f:88:41:
                    87:66:a4:e2:4d:0b:05:2d:41:53:93:8d:30:45:96:
                    3d:85:22:5e:87:2d:48:57:db:57:4d:34:6b:d5:62:
                    1e:ae:a6:b2:1b:19:ea:25:cb:80:a1:17:9e:ec:da:
                    ce:c1:13:14:82:32:54:98:4c:7e:90:67:50:9c:23:
                    c8:59:99:2c:44:fa:ec:f7:be:30:39:a7:5a:dc:c5:
                    b6:11:72:f6:08:96:c1:75:39:9e:d2:c5:8c:43:3f:
                    f3:a6:5b:c6:15:53:be:d3:20:95:c9:98:eb:6f:52:
                    6d:e8:48:29:b5:ff:85:c0:25:9d:a6:b4:90:ac:1a:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:87:1E:09:EB:5C:EB:20:35:B9:0B:D6:12:05:9B:99:2A:E1:29
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3138382e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:b9:b5:36:df:f4:31:7d:f3:8c:7d:f4:fd:1b:dd:38:ac:
         c5:4a:fb:a7:76:b8:b8:bc:ba:fc:ba:ed:d1:69:bf:b2:5a:1a:
         5c:bd:76:ae:e2:13:b7:70:b0:e3:8b:b8:80:c4:1e:39:3f:62:
         c4:1f:6a:d5:d0:56:e8:c6:b7:32:39:5e:e0:59:ea:ce:cc:d7:
         bd:a9:50:c8:17:f6:83:5a:d3:36:16:0b:e1:5c:43:34:38:bb:
         4f:e8:dd:ad:0f:f5:65:c2:44:ba:7a:0c:6c:90:82:10:ef:73:
         62:66:d4:78:dd:a3:13:18:c2:0c:49:25:db:bd:92:a7:f3:64:
         75:03:24:1c:2d:f4:7b:40:8c:9f:1c:87:72:4e:bd:32:7c:52:
         fc:ad:d9:78:a2:d6:52:0c:25:3c:8c:5e:f2:a5:97:e0:ab:6d:
         5e:05:06:90:2f:91:ea:eb:d9:fd:ce:cc:a6:df:32:53:37:83:
         d9:f8:23:42:82:1e:20:83:f3:c7:72:cb:53:10:09:df:c4:a8:
         fa:52:97:4e:95:10:5a:92:6e:c8:19:99:b6:2f:df:b1:13:42:
         5f:f9:a5:6a:50:e7:cb:10:c9:1d:88:f5:96:3a:fa:23:58:b5:
         0a:97:2f:e0:a3:ae:f9:9a:25:f2:1a:0a:8b:6f:e6:7a:ba:3d:
         fd:78:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:07 2025 by rpki-client