Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37322e302f32342d3234203d3e203131383330.roa
File:                     3138312e3232342e37322e302f32342d3234203d3e203131383330.roa (raw, json)
Hash identifier:          QZ/z+9PHjja+5UVbVIRNegWqWwyL8rS1OJpnLctL5Fw=
Subject key identifier:   7F:1D:16:F5:08:77:E5:9B:11:5C:BA:E5:8B:1E:B1:A5:BD:B3:1E:5F
Certificate issuer:       /CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
Certificate serial:       7A345938F05B5BA562456BCCDCD7AF5145868017
Authority key identifier: 43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37322e302f32342d3234203d3e203131383330.roa
Signing time:             Tue 04 Feb 2025 18:45:08 +0000
ROA not before:           Tue 04 Feb 2025 18:40:08 +0000
ROA not after:            Tue 03 Feb 2026 18:45:08 +0000
asID:                     11830
IP address blocks:        181.224.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:34:59:38:f0:5b:5b:a5:62:45:6b:cc:dc:d7:af:51:45:86:80:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279
        Validity
            Not Before: Feb  4 18:40:08 2025 GMT
            Not After : Feb  3 18:45:08 2026 GMT
        Subject: CN=7F1D16F50877E59B115CBAE58B1EB1A5BDB31E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:3e:24:b5:27:13:d6:36:f3:7a:e9:2d:a9:
                    5d:3d:40:4b:75:c1:63:73:fc:59:b1:45:fb:39:3b:
                    b2:2e:94:74:0d:4c:d2:10:07:96:e9:e4:4f:e6:06:
                    b6:ef:39:7d:dc:44:95:82:72:b7:a3:98:60:3e:db:
                    c4:93:b8:3d:ed:5c:e6:1a:d7:5f:24:39:4b:9a:83:
                    2c:67:86:0e:fb:a3:0f:a2:86:be:ae:80:e7:55:29:
                    38:af:18:97:e0:6b:2e:a6:8d:74:1e:50:91:07:a8:
                    f0:d7:87:2e:1b:24:0c:c0:38:6d:dc:83:23:5c:76:
                    6d:52:e6:cf:b0:19:4f:3d:22:e6:c1:75:fb:f4:bd:
                    63:77:71:ea:98:a7:9f:95:4e:c8:62:3c:5d:f6:c4:
                    82:97:62:c7:c2:28:8f:f0:59:bd:49:47:11:9e:8f:
                    cc:95:06:8c:0f:b6:ea:b1:7e:b2:c9:6a:e5:3e:0f:
                    b8:b1:99:6d:50:ba:96:8a:29:3d:ea:14:b9:ce:e4:
                    99:4c:ff:5c:0c:04:d5:fb:77:ca:2e:3c:6a:f8:0c:
                    62:b3:87:21:ce:a8:25:3e:77:75:68:80:0e:b7:a1:
                    3d:50:63:2a:8a:df:9e:9a:09:1d:08:3f:71:09:d1:
                    6b:aa:da:5d:95:5b:fa:ba:97:e4:e2:f6:5f:a9:5e:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:16:F5:08:77:E5:9B:11:5C:BA:E5:8B:1E:B1:A5:BD:B3:1E:5F
            X509v3 Authority Key Identifier:
                keyid:43:12:AC:B2:22:6F:8B:88:E5:E8:9E:F2:F1:44:2B:8E:EF:B3:B2:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4312ACB2226F8B88E5E89EF2F1442B8EEFB3B279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB815C78DDD40B4927D980FA94E8D07AD34C343AA1F23CD5DDE95FEF9FBCF1A4/0/3138312e3232342e37322e302f32342d3234203d3e203131383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:f9:e3:a5:8e:e6:1d:de:74:16:1f:7f:36:e2:5a:b2:7b:8f:
         0a:86:f7:42:a6:0f:d8:6e:f7:6c:04:1f:e2:4a:84:d3:64:4f:
         90:04:09:16:4f:d2:d9:d0:69:ad:80:8c:6a:4f:c1:bd:05:36:
         bb:42:8b:04:0d:f5:b6:f2:55:42:19:94:94:3c:97:94:6a:85:
         38:f5:16:89:fe:6e:11:80:16:cc:ba:e1:eb:68:96:61:50:7c:
         bf:66:50:be:8f:07:3b:73:c7:1f:d6:17:92:1b:19:38:9c:c5:
         8d:9d:22:29:e7:60:c3:c4:56:45:0c:a6:74:d8:f8:77:0f:fc:
         f3:a3:c5:de:32:b9:25:ff:de:54:04:23:0b:00:ec:99:39:c8:
         1a:97:6c:42:78:26:f3:4f:2d:36:00:c4:41:ec:1f:b8:18:18:
         c0:5c:a4:bd:d8:76:15:5b:54:ec:d4:39:46:82:d0:18:4c:78:
         2a:f1:b1:de:10:ab:61:5a:97:1e:b5:53:aa:28:1a:ac:28:38:
         16:59:e9:04:b8:c8:b1:e5:96:e8:73:ad:e0:9f:41:79:b0:c5:
         82:75:ca:f6:e9:65:94:4d:65:1e:56:ca:34:c0:dd:c8:a9:30:
         eb:ff:a5:df:87:96:62:64:03:f3:39:df:19:48:8b:9e:db:3e:
         b7:88:87:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:13 2025 by rpki-client