Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa
File:                     3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa (raw, json)
Hash identifier:          orQcfN/dXQnsTsg0Y8S+gqv4qOWeCNZA6sX5EateoPw=
Subject key identifier:   D5:E8:9B:04:23:88:C5:15:93:F3:0E:FF:69:BE:33:A4:7D:61:41:1A
Certificate issuer:       /CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
Certificate serial:       70B38E165ABE4D4D2B960762404F844C7CA1C170
Authority key identifier: 55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa
Signing time:             Tue 04 Feb 2025 18:40:48 +0000
ROA not before:           Tue 04 Feb 2025 18:35:48 +0000
ROA not after:            Tue 03 Feb 2026 18:40:48 +0000
asID:                     262192
IP address blocks:        181.174.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b3:8e:16:5a:be:4d:4d:2b:96:07:62:40:4f:84:4c:7c:a1:c1:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5549DCBABEF802D34A53A975A5F06A3653F6C752
        Validity
            Not Before: Feb  4 18:35:48 2025 GMT
            Not After : Feb  3 18:40:48 2026 GMT
        Subject: CN=D5E89B042388C51593F30EFF69BE33A47D61411A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:00:54:2f:9a:07:0d:ae:da:67:e1:6e:e9:2c:
                    bc:89:99:a9:f3:66:f4:44:96:ac:e2:dc:b9:45:3f:
                    11:86:b8:94:5d:a2:6c:6e:aa:3b:d1:ec:54:01:2c:
                    f5:94:07:cb:86:04:41:14:7e:05:46:11:75:39:17:
                    c0:17:d1:bb:54:9d:a5:e2:bc:94:0c:0f:60:80:e1:
                    bf:92:22:e8:7a:0c:3b:c5:8f:ae:3f:e9:00:6f:c1:
                    9d:3b:54:5e:fe:da:ea:bc:a5:31:8b:11:63:07:f6:
                    c9:4d:7c:94:fb:cf:99:a6:c9:95:04:a2:5c:43:fa:
                    88:a5:b1:5a:3d:2f:3a:a4:58:b9:f3:fa:8b:7e:a6:
                    60:38:d4:68:a9:f6:ab:0f:0e:f9:4e:2c:a1:4b:49:
                    4c:08:8f:85:d9:17:53:a5:44:13:bf:d2:88:a5:00:
                    b1:21:52:55:fb:4a:77:fb:1a:50:c0:fa:1e:6f:fc:
                    b5:af:31:f2:32:40:ff:13:29:92:f2:78:b6:1d:f6:
                    49:49:ac:93:40:6d:30:1c:b4:78:e9:54:16:52:3d:
                    95:5a:6f:97:72:e0:58:5a:01:7c:23:b8:72:17:18:
                    f0:d0:6a:60:cb:2e:3f:9e:1f:6d:8f:31:80:48:12:
                    e2:18:6d:cc:a0:34:e8:84:07:63:8c:a1:1e:84:52:
                    72:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E8:9B:04:23:88:C5:15:93:F3:0E:FF:69:BE:33:A4:7D:61:41:1A
            X509v3 Authority Key Identifier:
                keyid:55:49:DC:BA:BE:F8:02:D3:4A:53:A9:75:A5:F0:6A:36:53:F6:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5549DCBABEF802D34A53A975A5F06A3653F6C752.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F02BA358FC39685BF96832B76E0E69CF26B56B1EB394D9C8FE1B44E842D76336/0/3138312e3137342e3139322e302f32302d3234203d3e20323632313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:71:a2:2a:2b:28:78:83:14:a8:f5:3f:a2:3f:78:da:97:28:
         3b:d0:12:41:7e:41:6a:39:8a:14:06:d3:ec:07:8f:44:19:43:
         0a:b6:2e:14:9a:54:cf:3d:bc:9a:6f:f7:3f:ea:b5:33:61:f2:
         0d:01:6a:14:8f:77:8c:a5:ca:66:3d:17:32:f1:5c:da:6c:9c:
         e6:de:5f:6d:cf:2e:93:7b:9a:b7:92:1a:0c:52:ca:8a:22:e9:
         c4:5e:76:13:3c:cb:7a:a5:de:77:59:d9:66:53:85:b6:7e:19:
         fe:49:bf:0f:27:19:11:61:0c:67:f9:e3:21:a8:31:d5:4e:f2:
         a1:74:09:f9:f4:10:59:08:14:10:5d:12:ee:aa:80:fb:8e:d4:
         22:9e:ec:e2:b0:29:7d:b1:75:e4:57:ca:98:49:18:68:cf:2a:
         a5:c0:a2:05:57:df:80:f1:57:a0:8d:ef:56:ba:d3:d2:f7:9a:
         24:b9:41:53:05:48:f7:6a:00:0a:5b:4d:74:c3:60:78:df:ff:
         18:b1:60:b0:4a:e9:73:1c:24:40:97:a6:20:13:f5:43:4f:b1:
         c0:39:c0:90:11:82:7a:9f:c0:e4:72:0a:18:18:32:f5:79:99:
         a4:3c:18:82:81:53:e4:05:11:dd:7e:5a:10:43:a3:d2:99:17:
         60:a2:27:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:07 2025 by rpki-client