Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233342e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3233342e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          g0A54LWYI3ZoXGUqp3Qs7dc2CzKakCNPHHbFBrgmDLY=
Subject key identifier:   93:7C:D7:AE:D2:C3:7D:2B:97:4F:70:55:E3:EA:27:3C:89:83:2B:49
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       574E33936642E39BD170D50B5504DD7CCDF74A73
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233342e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:50 +0000
ROA not before:           Tue 04 Feb 2025 18:32:50 +0000
ROA not after:            Tue 03 Feb 2026 18:37:50 +0000
asID:                     52323
IP address blocks:        181.16.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4e:33:93:66:42:e3:9b:d1:70:d5:0b:55:04:dd:7c:cd:f7:4a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:50 2025 GMT
            Not After : Feb  3 18:37:50 2026 GMT
        Subject: CN=937CD7AED2C37D2B974F7055E3EA273C89832B49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:2e:01:9e:15:cc:c6:30:6f:6f:92:0f:8a:
                    b4:ab:e5:f5:6b:cc:51:61:06:07:8a:31:b3:0c:35:
                    0f:96:56:0b:15:93:77:14:ee:48:f2:2f:6a:95:de:
                    03:fa:49:e7:1f:a5:0a:23:59:b3:47:a1:a5:f5:63:
                    46:d5:1e:1b:b5:54:d5:e8:f5:8a:53:09:bd:5c:99:
                    d6:40:22:3c:d3:e7:88:d9:e6:fa:b7:96:7b:0c:1a:
                    be:95:a2:6b:91:48:36:ce:50:0b:a3:fd:86:4a:6c:
                    3d:d2:be:a4:80:05:d9:be:41:0f:ed:dc:20:2b:01:
                    cc:5e:04:37:40:b7:68:7e:9f:cb:e8:65:e0:44:5d:
                    6c:42:a8:ba:27:ee:a5:0c:6b:c2:39:5a:36:e6:85:
                    43:f5:57:18:d4:9d:b1:fb:4a:80:19:79:fb:68:75:
                    e1:80:c6:fe:8f:3a:79:df:39:98:65:19:16:5a:cf:
                    f2:99:4a:05:26:c8:0a:ce:3d:60:5d:95:a9:48:97:
                    df:73:78:9e:8f:83:d5:af:f9:ea:99:f3:30:e1:d4:
                    66:13:75:a8:31:14:65:06:9e:49:a5:14:20:ef:0a:
                    c1:2b:2e:b4:2c:60:f2:2a:1e:90:16:db:9e:36:17:
                    75:5b:36:0d:de:1b:42:1c:4c:00:7f:97:98:d4:cc:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7C:D7:AE:D2:C3:7D:2B:97:4F:70:55:E3:EA:27:3C:89:83:2B:49
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3233342e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:b6:98:c9:25:67:84:a6:2d:09:b3:b1:bc:8e:5c:c7:86:61:
         76:8c:73:a0:40:6b:54:c0:a2:01:aa:19:26:19:e3:6e:75:9f:
         16:4f:7a:14:79:e5:79:e5:41:6c:79:ba:f4:a2:70:a9:d7:b1:
         77:da:d6:8a:aa:d0:d1:9c:1e:d0:ce:fc:c0:f1:c3:ea:05:6d:
         00:12:ed:13:7e:93:ad:a3:02:e0:28:bf:78:c6:4f:a2:d6:3b:
         09:31:d2:1c:a4:55:d9:d0:a3:fe:36:5f:94:0f:9c:2c:7b:5f:
         f6:e6:16:a3:dc:3b:3f:30:1a:71:b0:06:f6:ff:ed:e3:17:69:
         ce:cd:df:a0:7d:79:c2:72:d2:39:5a:36:8f:2b:18:df:2d:7d:
         c5:7a:2f:00:2b:6c:d9:eb:92:63:3c:0a:c9:65:7c:84:c9:9e:
         57:b4:d3:43:0e:bc:45:c0:67:89:9a:63:00:47:df:dd:78:ed:
         a6:50:56:e8:7c:b3:fa:29:07:1a:ed:98:61:41:2d:a1:bd:a8:
         e5:75:ea:be:db:12:15:bf:69:c0:5a:9c:1d:aa:bf:e6:22:a3:
         dd:87:a3:97:de:58:c1:99:5f:aa:69:43:94:13:69:f6:fc:f8:
         64:4b:ac:58:8f:4a:a7:0a:3d:ff:08:d2:13:cb:be:3b:cc:f3:
         48:ad:54:70
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUV04zk2ZC45vRcNULVQTdfM33SnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNTBaFw0yNjAyMDMxODM3NTBaMDMxMTAvBgNV
BAMTKDkzN0NEN0FFRDJDMzdEMkI5NzRGNzA1NUUzRUEyNzNDODk4MzJCNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTS4BnhXMxjBvb5IPirSr5fVr
zFFhBgeKMbMMNQ+WVgsVk3cU7kjyL2qV3gP6SecfpQojWbNHoaX1Y0bVHhu1VNXo
9YpTCb1cmdZAIjzT54jZ5vq3lnsMGr6VomuRSDbOUAuj/YZKbD3SvqSABdm+QQ/t
3CArAcxeBDdAt2h+n8voZeBEXWxCqLon7qUMa8I5WjbmhUP1VxjUnbH7SoAZefto
deGAxv6POnnfOZhlGRZaz/KZSgUmyArOPWBdlalIl99zeJ6Pg9Wv+eqZ8zDh1GYT
dagxFGUGnkmlFCDvCsErLrQsYPIqHpAW2542F3VbNg3eG0IcTAB/l5jUzMnzAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUk3zXrtLDfSuXT3BV4+onPImDK0kwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzMzM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALUQ6jAN
BgkqhkiG9w0BAQsFAAOCAQEAvraYySVnhKYtCbOxvI5cx4ZhdoxzoEBrVMCiAaoZ
JhnjbnWfFk96FHnleeVBbHm69KJwqdexd9rWiqrQ0Zwe0M78wPHD6gVtABLtE36T
raMC4Ci/eMZPotY7CTHSHKRV2dCj/jZflA+cLHtf9uYWo9w7PzAacbAG9v/t4xdp
zs3foH15wnLSOVo2jysY3y19xXovACts2euSYzwKyWV8hMmeV7TTQw68RcBniZpj
AEff3XjtplBW6Hyz+ikHGu2YYUEtob2o5XXqvtsSFb9pwFqcHaq/5iKj3Yejl95Y
wZlfqmlDlBNp9vz4ZEusWI9Kpwo9/wjSE8u+O8zzSK1UcA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:25 2025 by rpki-client