Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa
File:                     3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa (raw, json)
Hash identifier:          7gp2vgY+AGrq9CmoMQ4cdqfyFNToaY52P2gNC84AeXw=
Subject key identifier:   28:C2:E0:C5:B9:31:D7:4D:A8:6C:B8:E3:6F:66:C8:BB:83:8A:22:23
Certificate issuer:       /CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
Certificate serial:       09A97898B596F64D2094F0A3508929591A22EE60
Authority key identifier: E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa
Signing time:             Tue 04 Feb 2025 18:49:02 +0000
ROA not before:           Tue 04 Feb 2025 18:44:02 +0000
ROA not after:            Tue 03 Feb 2026 18:49:02 +0000
asID:                     264831
IP address blocks:        181.114.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a9:78:98:b5:96:f6:4d:20:94:f0:a3:50:89:29:59:1a:22:ee:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91120749BBFC9A09C6A5455EF3C216072739D2A
        Validity
            Not Before: Feb  4 18:44:02 2025 GMT
            Not After : Feb  3 18:49:02 2026 GMT
        Subject: CN=28C2E0C5B931D74DA86CB8E36F66C8BB838A2223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:57:9c:cb:07:98:8b:f0:f2:0a:c5:aa:8c:
                    24:f6:13:fc:04:b7:79:c8:3f:b1:94:6d:33:f8:7a:
                    f1:a6:70:f5:f6:d9:7b:65:0c:44:5e:1f:f7:89:0d:
                    fc:de:4c:41:8f:76:1a:69:19:1d:f1:6e:a9:40:09:
                    67:50:f1:d7:d5:64:29:c9:1d:e8:e7:c4:7f:aa:2a:
                    02:6f:0b:8f:1f:4c:36:cc:39:8a:08:0d:69:63:ef:
                    36:93:d4:ab:e2:ab:4a:fe:4e:ce:e6:18:e2:f1:ba:
                    25:25:b5:46:df:01:46:74:a4:54:44:62:2a:28:04:
                    86:17:09:95:7b:fa:7a:3c:55:03:17:b3:3e:a5:ca:
                    22:74:be:c3:db:78:37:e0:d5:8d:e8:3c:15:2a:d8:
                    e2:83:00:7e:e9:cf:20:da:6b:a4:00:05:c9:b5:56:
                    86:5a:4f:e9:57:71:85:f0:cf:73:b7:b7:e5:ea:63:
                    83:32:65:55:74:bc:21:b1:ba:3b:df:7e:75:78:02:
                    3e:57:26:18:ff:e2:60:23:63:b3:9c:34:65:32:f3:
                    d7:17:89:a3:5b:9a:f9:d0:63:5d:5a:43:6a:c8:1e:
                    c7:6f:04:0f:c0:0b:5c:16:38:9a:24:8c:e1:97:8b:
                    6d:3d:d3:81:14:1c:42:00:38:ba:d7:65:e3:8a:16:
                    e7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C2:E0:C5:B9:31:D7:4D:A8:6C:B8:E3:6F:66:C8:BB:83:8A:22:23
            X509v3 Authority Key Identifier:
                keyid:E9:11:20:74:9B:BF:C9:A0:9C:6A:54:55:EF:3C:21:60:72:73:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E91120749BBFC9A09C6A5455EF3C216072739D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E96C9A8A037EA14EF3179FCA1185A0490CC46468ADBC22DC50843389E8C8F778/0/3138312e3131342e36312e302f32342d3234203d3e20323634383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:e0:97:f8:ee:5e:04:f8:be:58:da:9c:97:81:48:47:cc:
         49:d3:aa:33:52:39:90:2e:54:d7:88:bd:0b:cf:90:4d:8b:42:
         27:c5:5f:6e:df:57:fe:02:3b:93:69:1c:24:30:ae:88:a9:21:
         bf:86:94:c3:a5:a7:8a:97:2d:f2:0e:9e:ed:95:cb:79:ff:40:
         83:3a:24:4d:61:7f:58:69:37:7d:77:06:a5:9e:72:9b:50:ee:
         5f:2b:e3:fb:f0:2e:62:37:90:71:f7:a9:1e:7f:82:c1:ba:41:
         93:91:81:40:65:e3:40:31:0a:53:68:29:b7:a0:16:4a:d2:61:
         b1:a6:90:13:a7:7d:db:b6:90:d7:74:be:eb:87:70:4f:d7:d5:
         a6:71:38:dd:fd:36:3e:79:3e:a9:12:76:83:b3:0d:68:a5:5a:
         87:23:3a:1d:67:fd:f5:12:6f:06:59:0c:69:06:36:e3:bc:70:
         1c:dc:11:33:71:79:79:67:10:47:37:b3:71:4e:7a:98:c7:87:
         88:cd:ae:25:23:d1:f4:83:71:cd:7d:75:ce:40:4f:ed:06:20:
         f6:4e:12:26:c5:3e:b2:6b:d6:61:d3:02:22:6e:a4:6d:52:3e:
         9a:a8:c5:72:94:d4:99:9d:db:55:f7:85:bd:2e:75:a1:2e:2c:
         0e:ae:a3:1a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCal4mLWW9k0glPCjUIkpWRoi7mAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkxMTIwNzQ5QkJGQzlBMDlDNkE1NDU1RUYzQzIxNjA3
MjczOUQyQTAeFw0yNTAyMDQxODQ0MDJaFw0yNjAyMDMxODQ5MDJaMDMxMTAvBgNV
BAMTKDI4QzJFMEM1QjkzMUQ3NERBODZDQjhFMzZGNjZDOEJCODM4QTIyMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeVecyweYi/DyCsWqjCT2E/wE
t3nIP7GUbTP4evGmcPX22XtlDEReH/eJDfzeTEGPdhppGR3xbqlACWdQ8dfVZCnJ
HejnxH+qKgJvC48fTDbMOYoIDWlj7zaT1Kviq0r+Ts7mGOLxuiUltUbfAUZ0pFRE
YiooBIYXCZV7+no8VQMXsz6lyiJ0vsPbeDfg1Y3oPBUq2OKDAH7pzyDaa6QABcm1
VoZaT+lXcYXwz3O3t+XqY4MyZVV0vCGxujvffnV4Aj5XJhj/4mAjY7OcNGUy89cX
iaNbmvnQY11aQ2rIHsdvBA/AC1wWOJokjOGXi20904EUHEIAOLrXZeOKFudXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUKMLgxbkx102obLjjb2bIu4OKIiMwHwYDVR0j
BBgwFoAU6REgdJu/yaCcalRV7zwhYHJznSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FOTZDOUE4QTAzN0VBMTRFRjMxNzlGQ0ExMTg1QTA0OTBD
QzQ2NDY4QURCQzIyREM1MDg0MzM4OUU4QzhGNzc4LzAvRTkxMTIwNzQ5QkJGQzlB
MDlDNkE1NDU1RUYzQzIxNjA3MjczOUQyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FOTExMjA3NDlCQkZDOUEwOUM2
QTU0NTVFRjNDMjE2MDcyNzM5RDJBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTk2QzlBOEEwMzdFQTE0RUYzMTc5RkNBMTE4NUEwNDkwQ0M0NjQ2OEFE
QkMyMkRDNTA4NDMzODlFOEM4Rjc3OC8wLzMxMzgzMTJlMzEzMTM0MmUzNjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAtXI9
MA0GCSqGSIb3DQEBCwUAA4IBAQA2S+CX+O5eBPi+WNqcl4FIR8xJ06ozUjmQLlTX
iL0Lz5BNi0InxV9u31f+AjuTaRwkMK6IqSG/hpTDpaeKly3yDp7tlct5/0CDOiRN
YX9YaTd9dwalnnKbUO5fK+P78C5iN5Bx96kef4LBukGTkYFAZeNAMQpTaCm3oBZK
0mGxppATp33btpDXdL7rh3BP19WmcTjd/TY+eT6pEnaDsw1opVqHIzodZ/31Em8G
WQxpBjbjvHAc3BEzcXl5ZxBHN7NxTnqYx4eIza4lI9H0g3HNfXXOQE/tBiD2ThIm
xT6ya9Zh0wIibqRtUj6aqMVylNSZndtV94W9LnWhLiwOrqMa
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:41 2025 by rpki-client