Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139362e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3139362e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          VnFm/yhFCMfpoFsXS6TA82SL0rIxf4LlDT3wiXEvdtA=
Subject key identifier:   DE:81:5D:4E:F8:32:79:D8:F4:AB:B9:09:6C:0F:80:7E:95:B8:86:5F
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       09C4E7E449D5C91932BD5DFAEB69D4912D142FD6
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139362e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:51 +0000
ROA not before:           Tue 04 Feb 2025 18:32:51 +0000
ROA not after:            Tue 03 Feb 2026 18:37:51 +0000
asID:                     52323
IP address blocks:        181.16.196.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c4:e7:e4:49:d5:c9:19:32:bd:5d:fa:eb:69:d4:91:2d:14:2f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:51 2025 GMT
            Not After : Feb  3 18:37:51 2026 GMT
        Subject: CN=DE815D4EF83279D8F4ABB9096C0F807E95B8865F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c9:f2:80:07:b6:ec:cb:28:9c:85:8f:bb:c2:
                    ed:89:2a:be:c6:cb:12:fa:67:27:89:a0:1e:38:8e:
                    5d:3a:fb:38:6c:3e:93:72:6d:b0:ce:b5:5a:f0:b9:
                    c9:df:71:2b:78:0f:ba:34:4a:08:fa:b0:b5:dd:06:
                    da:f1:d3:b2:47:60:7c:47:aa:47:1f:7b:cc:07:ba:
                    5d:35:4e:2d:ec:cd:71:88:78:b6:ec:04:c3:c2:b1:
                    cc:11:f4:3f:f0:1f:00:32:24:4b:eb:d8:ff:d4:71:
                    9d:43:19:87:1b:25:67:7d:f7:f7:d5:4e:61:7e:11:
                    d4:c2:18:fb:1f:ed:20:57:b2:58:20:81:c0:ec:13:
                    97:c1:7a:22:5a:54:db:f7:6d:52:2d:30:87:73:1c:
                    8e:d0:76:84:3a:9b:3e:44:34:b2:25:1f:d2:8b:14:
                    5c:70:8d:27:2c:1a:05:f9:01:d8:e5:09:aa:ba:53:
                    72:6b:70:27:bd:7f:65:e9:d7:d8:0e:8f:15:e9:88:
                    38:2f:f1:98:9e:99:b4:8a:f5:e8:d3:1d:3e:fb:70:
                    09:dc:de:c2:c5:5d:02:df:4c:30:52:53:37:44:3b:
                    f8:1f:ac:86:b0:b7:79:a6:d1:a9:6f:20:c4:ee:e0:
                    87:15:1f:ea:c7:6f:bb:ff:fd:27:2a:24:01:07:61:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:5D:4E:F8:32:79:D8:F4:AB:B9:09:6C:0F:80:7E:95:B8:86:5F
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3139362e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:09:18:44:98:aa:6c:a3:50:b3:b3:4e:d3:d0:45:01:d7:8e:
         5c:51:c1:37:43:3a:ec:f0:bb:c8:ec:f0:c4:bf:c2:2b:51:c4:
         d7:61:d4:0b:26:19:66:0e:05:af:84:fc:14:42:96:26:50:c2:
         29:f5:08:85:b6:b0:d4:88:de:4a:55:fa:6b:39:9e:a1:cb:85:
         19:da:7a:12:49:79:57:16:cf:a3:51:c8:c9:3b:9f:db:94:71:
         31:b3:08:a5:62:7f:52:8c:70:9c:cb:d2:1a:39:7e:b3:5d:04:
         63:c4:21:0f:3c:0c:94:13:ed:5f:fd:fc:cd:8f:7b:4f:93:7c:
         a9:fa:29:39:1c:85:b5:68:b9:5d:7e:a9:a7:5b:e3:18:63:42:
         d9:f0:9f:23:80:ff:0d:ef:15:41:95:11:54:88:66:0d:6e:62:
         65:a9:04:95:0e:65:fd:c5:88:ea:e8:ba:82:96:2b:33:c4:56:
         a7:35:b8:2a:64:ea:c6:ca:23:f1:57:76:36:5e:b3:41:b6:05:
         2d:54:57:57:85:10:f4:62:0e:62:06:c3:ee:fd:da:dd:1d:b7:
         30:79:66:b2:55:62:7f:77:d9:98:6e:31:9d:82:78:92:06:5c:
         c4:71:4b:f1:97:51:c1:df:19:1a:8a:46:19:02:6c:ce:a6:8a:
         e0:22:2b:35
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCcTn5EnVyRkyvV3662nUkS0UL9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNTFaFw0yNjAyMDMxODM3NTFaMDMxMTAvBgNV
BAMTKERFODE1RDRFRjgzMjc5RDhGNEFCQjkwOTZDMEY4MDdFOTVCODg2NUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjyfKAB7bsyyichY+7wu2JKr7G
yxL6ZyeJoB44jl06+zhsPpNybbDOtVrwucnfcSt4D7o0Sgj6sLXdBtrx07JHYHxH
qkcfe8wHul01Ti3szXGIeLbsBMPCscwR9D/wHwAyJEvr2P/UcZ1DGYcbJWd99/fV
TmF+EdTCGPsf7SBXslgggcDsE5fBeiJaVNv3bVItMIdzHI7QdoQ6mz5ENLIlH9KL
FFxwjScsGgX5AdjlCaq6U3JrcCe9f2Xp19gOjxXpiDgv8ZiembSK9ejTHT77cAnc
3sLFXQLfTDBSUzdEO/gfrIawt3mm0alvIMTu4IcVH+rHb7v//ScqJAEHYetPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3oFdTvgyedj0q7kJbA+AfpW4hl8wHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzEzOTM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbUQxDAN
BgkqhkiG9w0BAQsFAAOCAQEAjgkYRJiqbKNQs7NO09BFAdeOXFHBN0M67PC7yOzw
xL/CK1HE12HUCyYZZg4Fr4T8FEKWJlDCKfUIhbaw1IjeSlX6azmeocuFGdp6Ekl5
VxbPo1HIyTuf25RxMbMIpWJ/UoxwnMvSGjl+s10EY8QhDzwMlBPtX/38zY97T5N8
qfopORyFtWi5XX6pp1vjGGNC2fCfI4D/De8VQZURVIhmDW5iZakElQ5l/cWI6ui6
gpYrM8RWpzW4KmTqxsoj8Vd2Nl6zQbYFLVRXV4UQ9GIOYgbD7v3a3R23MHlmslVi
f3fZmG4xnYJ4kgZcxHFL8ZdRwd8ZGopGGQJszqaK4CIrNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:55 2025 by rpki-client