Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234382e302f32322d3234203d3e203532333233.roa
File:                     3138312e31362e3234382e302f32322d3234203d3e203532333233.roa (raw, json)
Hash identifier:          Afj43NcDJmlvURZKLPeJ7oTtyniNaCht6aDNu1nVna4=
Subject key identifier:   1E:34:65:79:6E:97:CF:09:EC:E9:C9:EF:88:88:7A:5E:A1:E7:32:81
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       6E5B078B28E2250E3A27E5CC9217271B1163531C
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234382e302f32322d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:42 +0000
ROA not before:           Tue 04 Feb 2025 18:32:42 +0000
ROA not after:            Tue 03 Feb 2026 18:37:42 +0000
asID:                     52323
IP address blocks:        181.16.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5b:07:8b:28:e2:25:0e:3a:27:e5:cc:92:17:27:1b:11:63:53:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:42 2025 GMT
            Not After : Feb  3 18:37:42 2026 GMT
        Subject: CN=1E3465796E97CF09ECE9C9EF88887A5EA1E73281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:14:f2:76:c3:a4:e6:4d:1f:4d:5f:71:f3:e8:
                    c8:3b:b7:9f:9b:f9:e0:8a:bd:39:d6:ce:b0:58:b2:
                    4c:e3:01:17:d7:12:84:dc:cd:10:27:ee:16:0a:23:
                    3e:a9:32:ce:f1:f0:a7:f7:fb:ee:db:60:cc:63:a8:
                    e7:30:1d:2d:b3:89:34:ba:44:3c:56:00:93:71:92:
                    b1:a8:22:bd:70:80:d8:2b:82:09:d0:85:52:19:06:
                    66:1c:b0:ce:a2:9d:22:e2:3e:da:e9:28:d3:f4:65:
                    19:28:41:15:8f:29:3a:0d:ac:a0:0a:62:89:03:b0:
                    69:39:1b:49:dc:e5:b1:ad:2c:21:a2:35:ec:a6:68:
                    e7:70:bf:a9:95:f6:08:89:4c:6e:a0:43:d1:c1:2c:
                    1d:0b:b2:30:d6:e5:41:32:e7:21:67:dc:1b:62:62:
                    02:df:e6:26:c4:b8:48:dd:a5:6d:4e:c2:b1:1a:71:
                    2f:87:40:c4:0a:88:d7:17:62:60:81:f9:91:37:15:
                    29:7a:2b:47:09:bd:3d:f6:66:f0:c1:a6:d0:ff:18:
                    bb:85:35:b7:6e:6b:f0:5b:04:20:ea:88:7c:ef:17:
                    3d:98:a9:1e:6a:d6:1a:e6:66:e5:cb:f2:0e:e5:1f:
                    b0:8e:a7:b4:f3:c9:3b:8d:0e:8b:d5:74:08:84:51:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:34:65:79:6E:97:CF:09:EC:E9:C9:EF:88:88:7A:5E:A1:E7:32:81
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3234382e302f32322d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:c7:7d:74:54:57:5d:ef:5e:b1:fa:58:d1:b0:6f:e9:5e:31:
         48:c6:1d:ac:28:8f:8d:c5:b3:a0:ba:c5:08:da:f2:f3:06:b7:
         75:ab:c7:97:26:68:cf:49:f9:15:db:fd:44:f1:09:0c:30:cb:
         3b:9f:46:7b:f9:0a:58:9f:f0:36:7b:40:79:a7:bc:16:f6:1a:
         58:38:87:cb:32:8c:82:a6:3c:93:aa:06:08:08:cb:7c:a9:33:
         db:8f:20:ed:29:3d:49:6e:4f:ca:c5:1c:e7:38:98:d8:e4:cd:
         eb:6d:0b:7a:85:8f:60:8f:fe:f2:b4:e1:82:4d:56:af:b6:c9:
         fe:be:1e:63:af:b7:5a:62:8d:84:f2:58:07:c8:01:cf:48:e2:
         67:4f:7b:a0:02:54:38:52:7d:6b:5d:a6:c7:e4:ac:90:94:82:
         7f:4e:a6:15:20:67:01:ba:9f:4a:2d:b6:2e:7d:aa:f0:50:9b:
         99:f9:ae:51:a4:af:3d:83:4d:7c:67:51:11:fb:cb:69:e6:26:
         fd:5b:09:3d:00:cf:7a:5d:e6:19:ba:b9:ac:cb:4e:55:08:08:
         9d:15:f1:68:2b:89:d7:73:a9:69:02:5c:d7:f5:71:62:16:54:
         30:13:81:a6:f1:0b:00:e6:6b:51:5f:0a:4b:9c:77:dc:ee:5e:
         70:5a:9d:c4
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUblsHiyjiJQ46J+XMkhcnGxFjUxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU2QjVGNTZCRkJFNjlGNzRDRTdCMDEzM0VCRTkxODgw
MEQ1NTY2MjAeFw0yNTAyMDQxODMyNDJaFw0yNjAyMDMxODM3NDJaMDMxMTAvBgNV
BAMTKDFFMzQ2NTc5NkU5N0NGMDlFQ0U5QzlFRjg4ODg3QTVFQTFFNzMyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFPJ2w6TmTR9NX3Hz6Mg7t5+b
+eCKvTnWzrBYskzjARfXEoTczRAn7hYKIz6pMs7x8Kf3++7bYMxjqOcwHS2ziTS6
RDxWAJNxkrGoIr1wgNgrggnQhVIZBmYcsM6inSLiPtrpKNP0ZRkoQRWPKToNrKAK
YokDsGk5G0nc5bGtLCGiNeymaOdwv6mV9giJTG6gQ9HBLB0LsjDW5UEy5yFn3Bti
YgLf5ibEuEjdpW1OwrEacS+HQMQKiNcXYmCB+ZE3FSl6K0cJvT32ZvDBptD/GLuF
Nbdua/BbBCDqiHzvFz2YqR5q1hrmZuXL8g7lH7COp7TzyTuNDovVdAiEUbNvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHjRleW6Xzwns6cnviIh6XqHnMoEwHwYDVR0j
BBgwFoAUjmtfVr++afdM57ATPr6RiADVVmIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNjEyNDk0QUE0QTM5NENDRTg3MEZGQkNBQjdEQ0VBNTg0
NEJBRjUxQzI3MzE2QzQ1MjkyQjM5NTg0OUUwQkNDLzAvOEU2QjVGNTZCRkJFNjlG
NzRDRTdCMDEzM0VCRTkxODgwMEQ1NTY2Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTZCNUY1NkJGQkU2OUY3NENF
N0IwMTMzRUJFOTE4ODAwRDU1NjYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTYxMjQ5NEFBNEEzOTRDQ0U4NzBGRkJDQUI3RENFQTU4NDRCQUY1MUMy
NzMxNkM0NTI5MkIzOTU4NDlFMEJDQy8wLzMxMzgzMTJlMzEzNjJlMzIzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArUQ+DAN
BgkqhkiG9w0BAQsFAAOCAQEAH8d9dFRXXe9esfpY0bBv6V4xSMYdrCiPjcWzoLrF
CNry8wa3davHlyZoz0n5Fdv9RPEJDDDLO59Ge/kKWJ/wNntAeae8FvYaWDiHyzKM
gqY8k6oGCAjLfKkz248g7Sk9SW5PysUc5ziY2OTN620LeoWPYI/+8rThgk1Wr7bJ
/r4eY6+3WmKNhPJYB8gBz0jiZ097oAJUOFJ9a12mx+SskJSCf06mFSBnAbqfSi22
Ln2q8FCbmfmuUaSvPYNNfGdREfvLaeYm/VsJPQDPel3mGbq5rMtOVQgInRXxaCuJ
13OpaQJc1/VxYhZUMBOBpvELAOZrUV8KS5x33O5ecFqdxA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:53 2025 by rpki-client