Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32322d3234203d3e203232333638.roa
File:                     3138312e3137342e33362e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier:          UK7ClmJdNX9JDV+XTY9b/fO6xBlhGenhaZuCg6UHjZs=
Subject key identifier:   ED:E4:20:91:D3:F1:14:8E:9A:0C:20:A8:16:21:13:A2:65:18:7B:9C
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5A6A34BAB1D6548ABDF1DB13EEBE2C12E14FB5ED
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32322d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:18 +0000
ROA not before:           Tue 04 Feb 2025 18:17:18 +0000
ROA not after:            Tue 03 Feb 2026 18:22:18 +0000
asID:                     22368
IP address blocks:        181.174.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6a:34:ba:b1:d6:54:8a:bd:f1:db:13:ee:be:2c:12:e1:4f:b5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:18 2025 GMT
            Not After : Feb  3 18:22:18 2026 GMT
        Subject: CN=EDE42091D3F1148E9A0C20A8162113A265187B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:31:07:18:e9:14:67:bd:d7:99:94:cc:70:
                    0f:3e:f1:d0:e6:82:ec:60:c7:0f:8f:84:c5:2c:25:
                    e7:71:b7:92:4f:3d:04:bf:ce:03:91:53:4f:d5:fe:
                    03:fb:6c:f9:fe:2f:f6:95:9f:33:db:06:b5:fc:5a:
                    61:2b:f0:2f:4f:95:a3:03:55:2e:5e:87:57:1d:36:
                    d0:d5:a7:da:48:91:56:c5:8a:08:1f:90:48:7f:c7:
                    dc:77:54:a4:8b:d2:d0:a9:e6:b8:93:93:73:92:3d:
                    b5:44:f6:19:05:89:82:a8:cb:be:a0:15:0d:2a:d9:
                    17:ec:29:93:46:26:62:c9:73:4d:2c:d6:09:35:b4:
                    57:1e:7c:3b:7a:ba:79:03:fe:b6:c4:7e:6b:da:f0:
                    5d:99:28:8c:a3:c7:87:2b:3e:ca:f4:90:5b:b6:3c:
                    73:02:33:8d:f5:45:8f:59:d0:93:c0:d5:c1:4f:36:
                    54:3e:e1:4e:a8:f5:5c:00:71:ec:94:3b:65:40:dc:
                    1d:0d:bf:7b:5e:f9:bc:23:6d:d2:d3:31:fb:cb:6e:
                    e9:6c:bc:c2:81:0d:82:5c:7c:38:d3:e1:64:7b:96:
                    de:58:c6:f8:d3:77:93:35:9c:94:6c:9e:70:06:84:
                    04:7b:fa:78:dd:3b:16:8e:4e:ae:a1:e6:61:d8:a8:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E4:20:91:D3:F1:14:8E:9A:0C:20:A8:16:21:13:A2:65:18:7B:9C
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3138312e3137342e33362e302f32322d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:c8:48:18:21:4a:b0:bd:91:bc:dc:33:62:b7:ab:0d:17:
         a3:d8:a6:b1:a1:3a:b4:08:21:f5:02:b8:f7:21:84:01:ae:fc:
         f1:b7:9b:bc:fd:e2:93:c1:8e:3d:84:f4:50:bb:9a:46:2a:b6:
         b3:c2:ec:a8:4e:0a:2c:a6:ca:59:22:7f:e2:5d:f1:96:a6:cd:
         03:8b:81:10:1f:0a:c9:b8:49:1a:42:bb:79:f5:44:2e:0e:2a:
         8c:a2:45:f8:cd:9e:14:48:00:99:b5:0d:20:2e:a3:eb:1d:b1:
         5d:91:14:99:23:9d:09:21:95:73:f0:80:b4:65:ab:3a:0e:3c:
         22:58:07:ec:bc:b2:ff:af:33:86:8e:08:bb:02:62:aa:d4:3e:
         b5:be:13:0b:f5:0e:4a:79:a7:c8:bb:8f:46:65:09:8a:72:3d:
         a8:33:21:bb:1a:11:d0:63:65:87:86:d4:bc:dd:ad:e3:61:1f:
         fa:f0:5f:8f:1f:6c:fc:90:b1:27:92:3c:25:ec:6d:13:ff:06:
         20:f9:c0:40:68:88:20:43:0b:5c:f4:87:46:35:7d:8c:19:85:
         b9:31:76:09:3c:6c:c9:14:8f:0e:04:f7:cb:c1:47:d3:6a:80:
         03:b9:3e:55:8f:b2:fd:7c:55:1a:16:82:c5:f7:b5:81:d8:ff:
         28:6e:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:55 2025 by rpki-client