Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa
File:                     3138312e31362e3231362e302f32312d3234203d3e203532323731.roa (raw, json)
Hash identifier:          lEZNB4J00s9lbF7kQOOfLIDAnOK26fwwSdf4FFPqgjg=
Subject key identifier:   EB:E4:F3:EF:6D:7E:F6:C1:C7:85:69:B0:67:6F:8F:80:99:DA:B3:60
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       1BEA543DFDE91CDA0A8F6CF7455ECA58E47965F3
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:37:39 +0000
ROA not before:           Tue 04 Feb 2025 18:32:39 +0000
ROA not after:            Tue 03 Feb 2026 18:37:39 +0000
asID:                     52271
IP address blocks:        181.16.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ea:54:3d:fd:e9:1c:da:0a:8f:6c:f7:45:5e:ca:58:e4:79:65:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:39 2025 GMT
            Not After : Feb  3 18:37:39 2026 GMT
        Subject: CN=EBE4F3EF6D7EF6C1C78569B0676F8F8099DAB360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:e5:43:38:79:0b:79:c9:da:69:ed:49:2f:
                    28:14:77:2e:6d:39:e8:44:1e:26:47:2c:80:8a:1f:
                    bd:8c:84:66:42:a7:ef:16:bf:bb:07:4b:4b:7e:de:
                    89:d0:c9:9d:c0:9c:c9:c7:d6:1b:cb:44:c9:ce:63:
                    1a:0f:37:66:8c:51:66:38:94:01:a9:99:ee:54:df:
                    27:ce:d8:83:4d:a0:f6:fc:dd:73:c7:81:29:09:0f:
                    7d:8b:0d:0f:3a:a7:0f:d0:ce:ea:ec:90:49:14:33:
                    88:9f:29:6e:69:19:fb:0e:6d:b2:f7:7e:1b:58:a1:
                    9c:c4:43:dd:3a:f4:43:83:2f:ea:40:60:9a:1d:13:
                    ce:a9:6b:de:b0:1f:f7:87:07:74:71:6e:ab:01:d0:
                    92:a5:d3:a5:a8:e4:c9:2c:29:31:e9:8e:17:95:5d:
                    02:8d:b3:74:24:35:62:40:3c:c7:6e:61:e2:37:55:
                    e8:3a:c2:79:a6:ac:fd:b8:8c:f8:64:61:54:c8:27:
                    ae:34:98:03:24:2e:a9:bc:70:7f:fb:02:11:f7:f6:
                    8c:f0:28:48:a6:e8:9c:81:fa:26:d8:3d:1f:81:c7:
                    85:cd:81:ef:ff:c6:80:10:58:90:de:d3:17:a4:e4:
                    09:c6:b6:09:dc:f6:07:e0:9c:48:bf:82:0f:28:12:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:F3:EF:6D:7E:F6:C1:C7:85:69:B0:67:6F:8F:80:99:DA:B3:60
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3231362e302f32312d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:a3:ef:78:7e:5e:93:55:88:0d:20:63:57:3c:0f:75:7a:
         3f:0c:10:66:1d:32:dd:9f:7e:38:75:75:e8:72:ab:3c:f0:90:
         1f:57:2d:7c:ae:a1:cc:9f:c3:e7:d4:43:ad:18:0d:89:f2:47:
         e0:e5:99:26:6c:40:37:fa:45:ac:62:32:9c:79:15:ab:f3:71:
         4c:4c:b7:da:50:05:c2:e5:7e:fa:51:5d:a4:cf:1f:02:f4:3a:
         77:d5:fd:98:df:3b:8c:ca:f7:7d:76:c1:16:4b:7a:33:c2:d9:
         46:74:7e:ff:e7:a5:f6:48:6f:84:08:63:e1:13:a1:84:53:f9:
         64:15:e5:b4:61:f2:b6:40:ca:b6:9f:28:01:d9:c2:96:33:48:
         af:8a:9d:78:0d:5b:1d:ad:1d:ed:83:51:57:82:7f:8d:58:93:
         81:2c:29:4c:34:36:3d:b8:3a:cf:bb:4c:f1:a4:e7:b4:d7:ea:
         53:63:58:7a:68:1c:8d:09:cc:35:ee:20:a4:c4:7e:3c:70:d0:
         69:6d:1c:28:d0:bd:dc:c7:a7:74:ac:f1:74:b7:3f:61:3f:cf:
         1a:d0:4c:79:31:44:a2:c5:75:89:60:10:63:0c:27:1c:47:2c:
         25:ce:6f:d7:da:a7:28:a2:27:5c:06:76:7e:63:a5:b1:6e:2d:
         47:d4:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:13:14 2025 by rpki-client