Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3234203d3e203232333638.roa
File:                     3138312e3137342e33322e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier:          8y2yIWaISqLxyYQkqcBNmJcW8eVvhdEyh3PSBSyUGXQ=
Subject key identifier:   34:A4:CA:2D:63:45:33:E4:94:FE:1F:85:F4:4F:32:7B:74:62:DD:84
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       68C2B923AF67C81B03AC85B497677C7EC7E46A64
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:12 +0000
ROA not before:           Tue 04 Feb 2025 18:17:12 +0000
ROA not after:            Tue 03 Feb 2026 18:22:12 +0000
asID:                     22368
IP address blocks:        181.174.32.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c2:b9:23:af:67:c8:1b:03:ac:85:b4:97:67:7c:7e:c7:e4:6a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:12 2025 GMT
            Not After : Feb  3 18:22:12 2026 GMT
        Subject: CN=34A4CA2D634533E494FE1F85F44F327B7462DD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:91:91:b8:ad:aa:54:17:4d:7e:79:0f:f2:
                    ff:14:81:32:37:e5:45:3f:f1:c6:11:5c:f8:c7:c3:
                    39:5a:11:d8:25:ea:ba:7e:e6:98:d3:99:7c:4d:c6:
                    dc:5b:99:00:fa:44:3f:9f:b1:ea:6d:a2:48:fa:71:
                    29:f7:d1:f1:3d:3f:47:0b:77:c2:a1:b8:7b:67:4c:
                    38:c1:5e:78:22:a3:42:da:41:cc:8f:26:0a:8a:e1:
                    ad:01:97:84:1a:de:24:f7:3a:e9:e9:33:d9:78:f8:
                    92:0e:6d:b3:03:67:4d:b4:4b:21:78:38:18:11:e6:
                    b8:b7:dd:f8:38:63:66:4b:41:2a:62:ca:9a:34:6e:
                    a4:5b:ef:71:9c:d5:32:3a:b1:f7:d4:04:c4:82:a0:
                    d0:d4:5d:dc:85:68:20:02:e2:54:38:5c:13:19:8e:
                    ae:e3:32:c7:2b:87:a3:65:81:78:a8:4d:95:ec:18:
                    b0:24:b0:b0:60:0c:e8:98:75:c3:ba:2a:cd:f1:6e:
                    3a:e6:8c:c9:2a:5d:b8:02:14:63:99:ac:81:e6:0d:
                    7d:06:ff:8a:9b:b8:3a:fe:8e:44:35:c9:d9:f7:9e:
                    a7:a6:8b:58:d6:f6:49:db:33:f3:3d:1f:73:4d:5c:
                    2e:af:f7:10:6d:2b:00:68:86:53:ff:66:32:ac:e1:
                    72:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A4:CA:2D:63:45:33:E4:94:FE:1F:85:F4:4F:32:7B:74:62:DD:84
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33322e302f32332d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:47:6e:80:b1:36:e2:d0:02:3b:14:3d:f7:f6:c0:06:32:a8:
         26:3e:98:6c:ea:10:ae:d5:c6:5d:07:de:7c:6a:36:b0:d3:c0:
         8a:22:5f:f6:33:2a:9f:be:5a:df:e3:b0:55:76:a7:0c:94:86:
         aa:b7:86:16:bd:1f:18:87:7b:cd:e1:cf:4d:53:ae:35:5e:c0:
         5d:8f:fd:8f:c8:31:12:f1:51:01:02:c2:ad:84:ef:39:c1:49:
         26:38:45:ab:4a:1c:e3:8e:e6:dc:38:f5:f6:57:36:8e:61:b3:
         75:a8:e7:05:51:5f:2a:d4:b9:89:68:91:5d:e5:cd:d2:aa:5b:
         13:41:fe:34:5c:e2:c1:e6:89:40:27:13:6b:e2:ca:cb:e9:88:
         84:3e:de:d7:19:ea:83:07:15:86:05:7a:38:6d:58:56:4c:fe:
         85:43:f6:0b:b1:df:cd:08:c5:fa:eb:1a:25:d8:5d:f8:41:fd:
         88:c0:f4:bd:89:24:b3:6b:c5:eb:a1:ac:26:bf:ad:b7:7f:7c:
         ce:25:b9:d6:6c:51:07:a9:e0:34:f7:2f:17:8b:7d:05:49:25:
         1e:46:4e:8a:e6:5f:2c:53:9f:2b:ad:cf:13:36:e5:22:ac:4b:
         45:47:97:d0:fa:e6:f0:88:86:b2:22:b3:a1:31:79:86:b9:57:
         25:5d:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:54 2025 by rpki-client