Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          xItFX2Bcq/k7/+EsNZSe4bRT6GJN0gQpjYdhliygI1o=
Subject key identifier:   7D:1C:71:76:30:68:DD:B8:A2:42:B6:F4:BF:D7:71:3D:1E:5D:EB:9E
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       6E70B9E6E9D0EFB3D19CF9906C3FF90C4B93AEFF
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 04 Feb 2025 18:49:01 +0000
ROA not before:           Tue 04 Feb 2025 18:44:01 +0000
ROA not after:            Tue 03 Feb 2026 18:49:01 +0000
asID:                     264831
IP address blocks:        181.114.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:70:b9:e6:e9:d0:ef:b3:d1:9c:f9:90:6c:3f:f9:0c:4b:93:ae:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Feb  4 18:44:01 2025 GMT
            Not After : Feb  3 18:49:01 2026 GMT
        Subject: CN=7D1C71763068DDB8A242B6F4BFD7713D1E5DEB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:d7:6a:16:3d:4a:67:b9:f3:95:44:e6:f4:
                    9f:6d:f0:64:f4:9f:b3:dc:7e:d4:1f:a2:3a:d3:8d:
                    34:82:62:a4:bf:58:50:c3:f8:0e:2f:ab:a6:58:0b:
                    0a:96:1e:7a:a3:4a:e2:5d:45:37:41:15:4a:c7:d0:
                    5e:0f:41:5b:d2:80:1a:c9:34:b2:b4:88:68:6f:02:
                    14:15:a1:72:d0:7e:3a:59:c6:eb:b1:c3:8c:1c:da:
                    ce:85:7c:c4:d9:22:89:b6:f5:04:57:79:23:3f:94:
                    3c:2e:3e:7b:96:17:3b:c0:95:b7:a4:35:e2:9b:46:
                    15:b8:6f:bf:b1:e0:80:77:f0:57:8a:f3:f8:48:f1:
                    8b:c0:37:63:01:04:a2:83:14:d6:1b:04:6b:9f:17:
                    13:c1:fb:92:84:e6:7e:94:0c:ac:53:69:39:fa:01:
                    72:b1:34:7e:62:8d:ce:e1:1b:cf:37:31:be:60:07:
                    fd:d8:47:a2:8a:90:6a:ee:39:ff:de:07:c5:64:d2:
                    a6:3e:65:e1:92:0c:70:85:fc:ad:13:88:3d:57:cc:
                    0a:4b:51:94:bb:a4:18:dd:3b:9c:72:c3:85:3b:bb:
                    0e:11:00:71:57:00:86:5d:43:c9:ce:9d:20:e5:3f:
                    d9:7a:bb:ab:90:9c:b2:2a:35:2a:1d:eb:d6:04:db:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1C:71:76:30:68:DD:B8:A2:42:B6:F4:BF:D7:71:3D:1E:5D:EB:9E
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36302e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:51:c5:fa:6b:ae:d0:43:06:a3:5d:70:21:0a:7c:f7:fb:67:
         51:88:70:92:3e:35:0d:39:7e:e1:da:aa:d4:09:d9:32:e4:1c:
         4f:96:40:39:d8:2d:ab:d0:43:d0:1e:1a:b7:35:e6:2a:f6:25:
         68:f5:66:b9:a5:07:42:a5:00:80:18:51:6d:0b:87:d9:c4:af:
         5a:d8:0b:90:76:28:fc:37:de:31:35:f4:9b:e6:1f:e0:01:e5:
         75:bf:65:1b:7d:31:65:0d:a2:ef:7a:85:af:95:c8:d8:d7:6b:
         71:f6:11:08:05:16:74:44:ad:9f:11:4f:74:0b:5c:fd:45:3f:
         d2:ab:45:32:e8:63:6b:2d:f1:4e:9a:2c:d8:10:5b:08:5c:64:
         35:34:a5:d4:d7:3e:88:a1:5c:e2:fe:90:de:c5:cd:9f:25:00:
         ff:9f:a6:a5:73:aa:67:45:2d:19:e2:ba:bf:2f:23:2b:91:37:
         eb:8c:7f:6a:da:5c:d8:14:dd:b8:15:fc:41:93:b3:55:12:33:
         0e:36:af:96:06:cc:ef:8e:eb:70:7f:ef:51:6a:df:e6:b9:fa:
         48:4d:e8:2a:3b:11:0c:e9:f5:a8:4a:59:b1:72:9d:ad:e7:51:
         70:2c:de:5f:58:86:f2:f1:77:ca:3f:d8:09:d1:11:e0:c6:f7:
         d2:d3:ea:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:40 2025 by rpki-client