Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234302e302f32342d3234203d3e203532333233.roa
File:                     3138312e31362e3234302e302f32342d3234203d3e203532333233.roa (raw, json)
Hash identifier:          E+yRHLptV8dh1MNm910/TBE3FjDMzWRPlig5OR21p1I=
Subject key identifier:   20:19:40:C2:9E:4B:E0:D2:24:3F:6F:C5:F7:BB:1F:9C:CD:C4:E2:BF
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       53D67D9C6A43C1E131B3060C2BAC3F8E1D2B6C59
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234302e302f32342d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:37 +0000
ROA not before:           Tue 04 Feb 2025 18:32:37 +0000
ROA not after:            Tue 03 Feb 2026 18:37:37 +0000
asID:                     52323
IP address blocks:        181.16.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d6:7d:9c:6a:43:c1:e1:31:b3:06:0c:2b:ac:3f:8e:1d:2b:6c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:37 2025 GMT
            Not After : Feb  3 18:37:37 2026 GMT
        Subject: CN=201940C29E4BE0D2243F6FC5F7BB1F9CCDC4E2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:a7:43:fd:91:55:6c:81:1f:58:5d:e4:3f:
                    67:b5:62:c3:32:a5:c4:29:0e:76:f8:b0:a0:0e:9f:
                    d9:5e:d6:75:32:1a:43:4c:66:aa:41:e4:ae:22:83:
                    86:dd:1a:68:05:6b:4d:e2:fe:b3:9e:ba:49:06:08:
                    7d:5e:43:a3:69:f9:66:6d:3e:2e:6d:cd:bd:8f:ab:
                    f9:41:86:03:b0:5c:a9:9f:86:c2:02:1a:b9:65:4c:
                    bf:ac:e5:1b:c1:1e:65:3d:ac:fc:a1:1b:42:63:dc:
                    a4:e8:e4:37:27:7d:db:3e:62:67:ca:e9:3d:b3:39:
                    74:44:e6:aa:aa:d4:c4:33:1e:c1:a2:1e:b2:bb:4c:
                    82:ae:7e:c6:ae:35:4c:14:e6:08:ae:5a:e6:89:51:
                    2b:d9:2a:a3:84:36:47:26:5f:87:e6:41:34:85:da:
                    8a:39:56:e3:a4:42:bf:24:78:f1:48:40:4d:77:8c:
                    68:62:06:a3:22:b0:63:ca:44:54:2f:c9:20:4f:ed:
                    96:35:12:dc:08:51:34:2b:39:b5:a0:c2:1f:ea:ef:
                    7a:45:10:df:c2:c8:f1:5f:80:e0:e4:9a:c8:93:fb:
                    05:0f:8b:34:b3:4b:3a:22:6b:a6:6c:f1:92:b8:47:
                    df:34:93:63:13:1d:77:f0:61:97:2e:1d:2d:71:d0:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:19:40:C2:9E:4B:E0:D2:24:3F:6F:C5:F7:BB:1F:9C:CD:C4:E2:BF
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234302e302f32342d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ed:5c:92:e6:74:c4:16:90:97:6e:a1:00:4c:68:7e:f8:e6:
         d0:69:4d:4e:7e:20:f3:ad:81:50:85:53:bf:b4:ef:54:15:f5:
         17:b0:f7:7f:5d:12:7e:32:8f:a3:f9:df:d5:e1:72:31:fc:99:
         67:55:80:20:81:87:57:fb:6a:5e:d6:3f:b7:b4:20:3f:0a:8b:
         15:ca:4b:02:bd:4c:91:fb:55:9a:d3:2c:1b:a4:b0:ae:07:91:
         52:03:23:50:39:80:e1:59:c5:c3:db:0f:7b:b8:15:9f:a3:b7:
         58:3a:2f:1e:1a:8e:9c:d3:d0:93:45:f8:45:bb:b3:f7:64:7c:
         6f:0f:39:38:ac:40:d8:21:1f:74:71:7f:ab:1e:6b:25:4e:ac:
         a9:f4:fb:42:1a:ed:10:8f:b7:fc:f5:e0:5f:e9:52:f8:d2:d9:
         a0:b2:61:31:db:00:bf:06:a6:cd:76:4e:37:ac:58:bd:bd:01:
         f2:0f:81:5a:b0:b9:74:18:4c:86:06:2a:ad:3d:a0:8a:fa:0d:
         f8:91:5b:41:7b:ff:91:07:4b:14:1f:49:4c:29:7f:fb:ac:89:
         b2:9a:2b:30:eb:b8:7f:b5:1e:74:51:c5:9b:89:02:2b:b6:35:
         6f:94:05:03:9e:d1:24:5f:28:ac:15:78:ce:66:0a:c0:66:86:
         44:26:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:58 2025 by rpki-client