Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230332e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3230332e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          K64qhrmEeSXyDYtnZb2KyIRFeahsmHx7n6x/XVuL8CI=
Subject key identifier:   18:DF:14:9E:25:64:A4:26:3E:30:50:A2:2A:E7:ED:4E:EB:19:24:FA
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       7094EE84C7C7D3767A4F07D0149F1464EEFCAA09
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230332e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:40 +0000
ROA not before:           Tue 04 Feb 2025 18:32:40 +0000
ROA not after:            Tue 03 Feb 2026 18:37:40 +0000
asID:                     52323
IP address blocks:        181.16.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:94:ee:84:c7:c7:d3:76:7a:4f:07:d0:14:9f:14:64:ee:fc:aa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:40 2025 GMT
            Not After : Feb  3 18:37:40 2026 GMT
        Subject: CN=18DF149E2564A4263E3050A22AE7ED4EEB1924FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:75:93:1a:e7:35:ba:08:90:4d:c8:3d:7b:
                    fd:16:82:d3:75:01:3d:64:6a:71:33:0c:4c:aa:8b:
                    81:0a:02:2d:ae:f0:ed:d6:98:9e:2a:67:bc:b8:3a:
                    d4:47:82:fd:34:bc:89:86:e0:ab:a5:45:df:5e:e0:
                    40:f1:ea:a8:c4:ba:8a:23:33:3f:6d:fb:04:d2:03:
                    dd:a4:bb:61:8e:49:50:35:08:a7:ac:1d:1c:20:eb:
                    1a:d7:01:ba:1d:11:cc:08:23:69:82:00:5c:19:21:
                    94:17:d7:7e:dc:60:b9:62:9d:27:32:a9:bf:f4:5c:
                    db:8b:fa:8e:d7:ea:c5:34:41:01:7a:67:3e:0e:6e:
                    28:1c:a9:06:cb:07:28:ed:3b:32:cf:e4:04:cb:f0:
                    db:5c:aa:72:ea:0a:c5:e2:16:23:1c:27:8a:42:04:
                    7a:ac:69:81:b4:d2:da:88:a2:a3:ed:05:4f:9a:fb:
                    f0:83:56:31:57:a5:c9:b5:5f:75:b5:d4:17:0f:de:
                    67:d0:a5:d5:56:d2:53:ba:ef:65:4f:b0:cc:2b:b6:
                    4c:ca:ec:79:d4:a0:18:ae:2e:fa:43:89:28:3a:18:
                    ce:16:00:0b:6b:8d:86:af:a1:3a:d6:5b:26:33:67:
                    93:7e:e6:ad:20:9e:ab:75:b7:6b:96:c7:0e:93:f2:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:14:9E:25:64:A4:26:3E:30:50:A2:2A:E7:ED:4E:EB:19:24:FA
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3230332e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:7b:28:73:4f:6e:83:da:4c:3b:0f:56:ba:cf:f4:de:71:78:
         f3:98:ff:47:d3:b4:59:6d:e7:0b:8d:f7:e6:b0:6c:cf:7c:ca:
         9b:ad:7e:32:9a:2e:6d:38:b8:30:1c:44:f4:c9:f1:32:84:f7:
         3f:a1:68:6f:26:40:9f:65:d4:b1:e8:33:80:3c:b1:b4:08:28:
         bf:ed:47:3b:2d:fa:2e:a6:ad:e0:fa:a5:48:25:0a:88:54:d3:
         b0:32:3b:fb:6c:ef:d4:d6:84:e4:06:4a:f4:0a:7d:62:fb:58:
         c0:8c:0f:c2:1b:c9:a9:20:81:18:f4:6f:ee:2c:8d:4d:66:e5:
         0e:64:3f:e7:e8:a6:51:d1:97:19:45:67:28:66:d7:4b:f9:54:
         83:2a:dd:da:68:12:0a:d7:b3:fb:37:58:f5:0f:70:5d:6c:9d:
         60:95:0a:f2:36:b6:a0:51:98:c9:ab:08:4e:b5:54:2e:58:26:
         02:65:01:c4:1c:cf:e8:24:36:32:93:a1:d6:9b:7a:2b:88:a4:
         42:33:be:09:9e:f6:d7:8e:b9:9d:6d:2b:5c:de:a9:41:9e:84:
         98:ae:da:6e:11:9c:ab:78:87:8c:c7:a9:a8:37:00:d7:3b:13:
         cd:72:3d:a5:51:a8:3b:31:4c:14:0b:28:7d:69:a2:f5:7b:32:
         cc:25:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:14 2025 by rpki-client