Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139312e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3139312e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          +JL4/gg85SDWgYVk7+5OkRyre+1ZpHK9j8QJkeFoycY=
Subject key identifier:   2F:6E:E8:88:32:71:66:A9:6B:26:05:B7:1D:D1:D6:57:E9:8C:6E:2A
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       33FD97B1EE5B07402C27A5AD612CD1D5F12B838F
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139312e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:42 +0000
ROA not before:           Tue 04 Feb 2025 18:32:42 +0000
ROA not after:            Tue 03 Feb 2026 18:37:42 +0000
asID:                     52323
IP address blocks:        181.16.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fd:97:b1:ee:5b:07:40:2c:27:a5:ad:61:2c:d1:d5:f1:2b:83:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:42 2025 GMT
            Not After : Feb  3 18:37:42 2026 GMT
        Subject: CN=2F6EE888327166A96B2605B71DD1D657E98C6E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:69:e4:14:97:5f:14:18:f9:b8:18:e6:b2:
                    ad:55:12:57:78:c1:b5:84:7b:2e:4c:82:3b:55:37:
                    cb:21:3d:0b:ba:d0:46:58:5b:2e:8e:a3:f9:44:39:
                    ef:bc:eb:66:0a:ea:b1:23:10:6c:9a:fa:5f:11:06:
                    84:d4:fd:36:14:aa:ea:f9:54:8c:ab:70:d4:79:f5:
                    2a:a3:9d:a3:8f:5a:8c:fb:62:01:23:cf:9e:58:3d:
                    d5:60:76:3e:7c:74:9a:bc:cb:90:9b:57:75:1e:91:
                    0c:20:63:d2:58:0f:8c:92:85:f4:7c:96:0d:5a:47:
                    cd:4c:12:fb:74:79:ba:97:d6:8f:cd:ea:26:14:f7:
                    02:a3:19:64:03:24:b3:24:c6:a8:3a:df:98:25:1c:
                    9b:c9:6e:9b:9c:07:f6:c9:e0:9a:1a:22:6c:93:11:
                    21:93:96:15:ab:87:40:bb:25:14:90:7c:40:bd:69:
                    b7:0f:6d:95:02:fa:f0:87:a8:f5:52:16:86:f9:f2:
                    f8:0b:59:74:22:bb:f1:7c:b5:77:41:c4:f2:f9:a2:
                    cf:2d:84:80:b4:eb:e4:c8:5b:18:b0:e3:f1:d1:7a:
                    45:d2:d6:68:aa:3f:75:ea:66:09:ec:94:b1:d9:18:
                    8a:9d:aa:8e:22:69:51:bc:8a:ca:95:04:04:57:26:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6E:E8:88:32:71:66:A9:6B:26:05:B7:1D:D1:D6:57:E9:8C:6E:2A
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139312e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:65:dd:c4:0c:31:ab:72:fe:0a:17:27:78:4d:c9:d0:3d:3b:
         05:b0:4d:1f:b3:bc:4b:35:8f:94:22:b9:30:d5:cd:df:f1:0d:
         79:56:0e:18:bc:fa:9d:23:a9:2a:54:34:84:87:89:ef:23:84:
         77:e8:ee:63:e5:aa:62:bd:c8:31:ba:27:6e:8a:65:bd:44:f1:
         a4:31:51:77:ec:03:e1:67:d4:d5:67:d8:2b:fe:c6:69:7c:04:
         50:08:25:b9:0d:d0:04:d5:69:3f:ad:bd:dd:4e:14:a4:d9:8d:
         8d:c2:20:dd:22:9b:d7:7e:69:50:3c:55:77:8c:b3:c6:08:d5:
         1c:15:0e:f8:7a:67:e1:0c:c0:1b:c1:19:83:5e:67:8b:68:fb:
         80:d8:ef:c8:43:33:2e:3e:c5:5c:98:90:2a:23:c6:10:10:1a:
         61:61:a0:d4:05:21:18:76:3f:50:7c:b2:25:80:ef:a1:cd:1e:
         9e:a4:9f:36:f9:aa:96:cd:2c:fe:df:23:55:5e:72:f5:2e:15:
         8c:49:e6:4e:5c:95:1f:3a:ba:43:27:2a:77:19:8b:ed:04:7b:
         b1:ce:4f:de:be:00:94:43:43:c8:1d:b7:e7:89:e8:a6:93:11:
         da:27:86:c1:f0:3c:1a:bb:5a:e9:77:45:ea:71:cb:0b:69:14:
         bb:63:db:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:49 2025 by rpki-client