Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/3138312e3233332e33362e302f32322d3234203d3e203634313338.roa
File:                     3138312e3233332e33362e302f32322d3234203d3e203634313338.roa (raw, json)
Hash identifier:          uCgg47vHpuyePVz2xJkjy6wgrFfd6u8IQNEDvDApwo4=
Subject key identifier:   43:16:60:FE:91:D1:AB:FD:0F:3D:B3:BE:DB:03:C8:14:32:7D:99:61
Certificate issuer:       /CN=F27F8EF2828CEB5B65F65287F92E566557B19FDD
Certificate serial:       78539DC0354D3484B54086A7FBD7B880559E515F
Authority key identifier: F2:7F:8E:F2:82:8C:EB:5B:65:F6:52:87:F9:2E:56:65:57:B1:9F:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27F8EF2828CEB5B65F65287F92E566557B19FDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/3138312e3233332e33362e302f32322d3234203d3e203634313338.roa
Signing time:             Tue 04 Feb 2025 20:07:45 +0000
ROA not before:           Tue 04 Feb 2025 20:02:45 +0000
ROA not after:            Tue 03 Feb 2026 20:07:45 +0000
asID:                     64138
IP address blocks:        181.233.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:53:9d:c0:35:4d:34:84:b5:40:86:a7:fb:d7:b8:80:55:9e:51:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27F8EF2828CEB5B65F65287F92E566557B19FDD
        Validity
            Not Before: Feb  4 20:02:45 2025 GMT
            Not After : Feb  3 20:07:45 2026 GMT
        Subject: CN=431660FE91D1ABFD0F3DB3BEDB03C814327D9961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:c2:aa:8c:f5:3b:4e:85:5c:d7:62:7c:b7:
                    67:af:79:f8:dd:be:ad:4d:3f:64:2d:24:90:b6:96:
                    9b:6c:0d:7a:e0:72:83:ff:02:86:37:b1:d9:31:cf:
                    76:cb:ec:1c:30:85:c4:2a:5f:88:19:5c:7f:2e:99:
                    8c:15:54:6e:3e:72:8e:f3:d6:5f:77:5f:ee:b2:ee:
                    77:46:0d:f6:73:56:a0:9e:2f:81:9b:f7:9e:8e:3b:
                    10:c7:be:18:d7:e5:38:fc:c3:fd:f5:a0:7f:0a:41:
                    96:ca:28:85:f8:cf:d6:d9:4f:dc:57:94:f0:83:4f:
                    70:ed:bf:2b:d3:d0:d0:65:78:2e:f5:7f:73:7a:03:
                    ac:0e:19:9d:0a:ca:7c:7a:80:a9:a4:cb:c0:f3:ca:
                    16:57:a4:6c:94:79:ec:ef:ae:31:34:cb:eb:94:66:
                    6c:3e:56:f6:21:da:0e:a1:56:ab:96:83:1e:4e:00:
                    92:f5:46:42:05:73:20:41:e1:3a:98:91:c2:05:1e:
                    00:45:e9:ea:03:3a:7d:35:0f:f2:85:9d:6b:1a:e7:
                    b4:71:61:ae:ba:77:47:1f:93:7f:21:08:80:08:f9:
                    b5:46:d3:c1:47:be:7d:52:8c:f2:2e:82:df:12:16:
                    d2:8f:b8:6b:b9:ca:6c:2e:cc:88:b0:b1:dd:ef:ee:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:16:60:FE:91:D1:AB:FD:0F:3D:B3:BE:DB:03:C8:14:32:7D:99:61
            X509v3 Authority Key Identifier:
                keyid:F2:7F:8E:F2:82:8C:EB:5B:65:F6:52:87:F9:2E:56:65:57:B1:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/F27F8EF2828CEB5B65F65287F92E566557B19FDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F27F8EF2828CEB5B65F65287F92E566557B19FDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7233B99D080B49C63C492372ADAEF642843A12A0D69CB14039AF943523A9088/0/3138312e3233332e33362e302f32322d3234203d3e203634313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:71:f5:71:09:0d:81:43:f2:db:23:36:e1:51:df:af:34:49:
         82:01:17:cd:13:39:b2:ca:ed:aa:82:85:b2:b0:e1:6a:d4:dd:
         72:54:85:e0:26:61:58:60:aa:f1:38:5e:7f:9b:67:78:7f:13:
         f5:7f:79:b1:c5:58:e2:84:5e:4c:32:79:19:25:6e:6b:ee:99:
         13:f9:79:e0:12:5c:1c:8e:3f:4c:9c:89:61:53:ba:a8:e3:17:
         24:84:47:14:a0:af:fb:16:b8:7a:07:98:8e:64:77:00:6b:ac:
         69:11:8b:fd:db:60:74:a8:bf:b6:df:e0:c4:c8:92:6c:2d:9f:
         32:41:2e:34:23:ae:f0:61:46:76:f0:60:3d:f8:c1:6e:99:4e:
         b6:47:04:c1:df:47:50:8e:0f:8c:f4:d7:ab:f1:74:c9:4e:6d:
         d3:dd:e0:70:97:f5:ea:47:5e:83:5c:da:41:96:ba:8e:18:46:
         79:e7:17:ad:91:a0:f9:51:09:04:62:da:01:70:95:04:aa:10:
         57:23:1c:06:e5:3b:cb:3f:04:8e:fb:6b:27:ba:6f:aa:78:49:
         5d:6f:67:e0:56:d8:b8:53:ee:f2:f4:af:10:9f:10:8e:62:58:
         3d:9b:00:86:2c:7f:1d:89:3d:05:81:ef:50:d0:85:bf:b6:09:
         19:fb:b2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:18 2025 by rpki-client