Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235322e302f32332d3234203d3e203532333233.roa
File:                     3138312e31362e3235322e302f32332d3234203d3e203532333233.roa (raw, json)
Hash identifier:          W/Ch9jfPfm7lEwEpAHCKKkb0DRVK2bLPkv3KjYDDC8E=
Subject key identifier:   B2:3C:4F:07:25:4A:B3:FD:D3:A2:CB:F0:24:5E:0B:16:04:86:A7:5B
Certificate issuer:       /CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
Certificate serial:       6FA933B75D5281607AC15FF816841E2FD3DC1884
Authority key identifier: 8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235322e302f32332d3234203d3e203532333233.roa
Signing time:             Tue 04 Feb 2025 18:37:38 +0000
ROA not before:           Tue 04 Feb 2025 18:32:38 +0000
ROA not after:            Tue 03 Feb 2026 18:37:38 +0000
asID:                     52323
IP address blocks:        181.16.252.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a9:33:b7:5d:52:81:60:7a:c1:5f:f8:16:84:1e:2f:d3:dc:18:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E6B5F56BFBE69F74CE7B0133EBE918800D55662
        Validity
            Not Before: Feb  4 18:32:38 2025 GMT
            Not After : Feb  3 18:37:38 2026 GMT
        Subject: CN=B23C4F07254AB3FDD3A2CBF0245E0B160486A75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:7b:bb:32:8d:8a:c1:d0:be:53:da:62:a5:
                    aa:1b:75:4a:aa:e8:21:f6:53:92:56:de:72:2b:78:
                    c7:99:2d:94:f1:36:32:37:d4:5a:69:17:0c:dc:ed:
                    a5:06:6c:41:ca:5a:a5:51:d8:2f:f3:6f:f1:4a:67:
                    ad:6a:68:d7:a3:b1:ef:f6:26:3a:4f:24:2d:50:d0:
                    69:23:0f:5c:b3:14:a1:eb:a6:80:0a:cd:74:41:40:
                    82:59:be:7f:03:c5:8e:ba:40:e1:6c:1b:37:17:52:
                    01:10:ef:2b:d2:06:4d:06:59:c0:40:11:56:22:ff:
                    33:a9:63:17:8b:a4:fc:1e:71:ac:a7:73:1a:2f:4f:
                    b7:0f:00:bb:87:53:0a:cd:26:1d:50:16:c1:01:1f:
                    fd:b6:9b:ea:83:79:44:7a:e3:e5:c2:fc:45:2f:a5:
                    72:b5:c3:62:a9:7c:b1:52:b2:1e:46:bb:96:eb:bb:
                    85:0f:68:02:e3:36:87:b9:14:af:27:7f:dd:24:a0:
                    73:6c:e3:85:29:40:52:5e:b7:2e:7c:a8:cd:d4:67:
                    4c:ab:61:05:f8:29:de:50:b6:6d:fc:88:30:d2:74:
                    9a:5c:55:e5:92:d7:40:d5:32:c8:2f:62:5b:be:1a:
                    3b:15:b0:c3:78:d0:bd:df:5e:c0:5f:79:f8:f4:cc:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3C:4F:07:25:4A:B3:FD:D3:A2:CB:F0:24:5E:0B:16:04:86:A7:5B
            X509v3 Authority Key Identifier:
                keyid:8E:6B:5F:56:BF:BE:69:F7:4C:E7:B0:13:3E:BE:91:88:00:D5:56:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E6B5F56BFBE69F74CE7B0133EBE918800D55662.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E612494AA4A394CCE870FFBCAB7DCEA5844BAF51C27316C45292B395849E0BCC/0/3138312e31362e3235322e302f32332d3234203d3e203532333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:9d:08:27:3a:5e:c1:0a:7f:f8:fb:0e:61:86:ee:93:7a:cf:
         9b:f1:62:8f:75:86:00:22:38:5c:58:96:90:c5:b1:f9:ef:4d:
         57:de:46:dc:6b:b1:50:41:62:c2:f6:af:b4:ed:db:80:88:c9:
         99:86:17:58:f3:73:5d:f7:a8:2e:9e:6e:8f:f8:6a:e3:d1:02:
         00:30:bc:e9:e7:92:b3:25:2c:9f:20:9d:30:b8:d3:60:7d:f6:
         35:f9:cc:7f:fe:93:c3:04:73:c1:95:55:8d:b8:58:e8:3d:f5:
         f9:dc:ca:1d:b2:42:db:3b:c8:ba:80:bb:0a:60:91:41:e7:d7:
         99:73:2c:75:32:10:7b:39:a0:1c:68:bc:c9:b0:a0:71:7c:1a:
         84:df:e8:8b:2a:f4:4c:59:4b:85:cb:2c:ad:0a:03:a4:3d:11:
         eb:91:cf:31:b9:f8:79:68:d5:b5:5c:bf:0f:5e:a8:71:37:e1:
         a8:fd:c6:3b:1d:13:be:41:5d:3c:40:9e:61:75:1e:60:34:c5:
         72:b4:35:17:4e:f9:f3:32:43:15:77:fd:f0:e3:3d:b6:7c:ed:
         29:3c:e8:00:c8:02:d0:9b:52:25:1c:21:12:97:1f:20:35:2f:
         c9:6f:2a:f8:1a:b6:37:e4:ef:c3:bb:25:33:82:09:79:06:0f:
         b2:00:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:56 2025 by rpki-client