Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/3138312e3233332e37362e302f32322d3234203d3e20323732303334.roa
File:                     3138312e3233332e37362e302f32322d3234203d3e20323732303334.roa (raw, json)
Hash identifier:          G3vyz7m919c5rgrQJ2O1M973ngx2tm4t5Ag1tn64htw=
Subject key identifier:   4F:39:71:26:E6:3C:7D:59:6F:58:50:04:1C:54:EF:AF:9E:28:16:29
Certificate issuer:       /CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
Certificate serial:       3A7AF54115B1CBF7B1292998AE5DBD8CCBA87BFC
Authority key identifier: 89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/3138312e3233332e37362e302f32322d3234203d3e20323732303334.roa
Signing time:             Tue 04 Feb 2025 20:00:05 +0000
ROA not before:           Tue 04 Feb 2025 19:55:05 +0000
ROA not after:            Tue 03 Feb 2026 20:00:05 +0000
asID:                     272034
IP address blocks:        181.233.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:f5:41:15:b1:cb:f7:b1:29:29:98:ae:5d:bd:8c:cb:a8:7b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891E55A23EE024520C4B107ECF8CDB24B95A8283
        Validity
            Not Before: Feb  4 19:55:05 2025 GMT
            Not After : Feb  3 20:00:05 2026 GMT
        Subject: CN=4F397126E63C7D596F5850041C54EFAF9E281629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:db:2f:04:9f:53:a7:70:9d:49:ec:fa:2f:
                    e0:90:a9:d5:01:d5:ea:83:00:d4:12:62:53:c4:f7:
                    1a:a1:6b:5d:70:2d:dc:13:a3:50:f5:37:90:65:bb:
                    76:d1:48:fb:78:24:6b:1b:9a:db:4c:2d:48:e1:86:
                    d6:3b:5c:44:67:c7:3a:84:52:ce:2a:5c:bf:56:3a:
                    66:0d:63:ee:6e:8b:e2:dd:ec:c2:de:4f:7d:f8:79:
                    4f:65:cc:ab:86:20:dd:24:27:15:63:a3:32:ab:43:
                    4c:e5:95:92:96:69:eb:7b:73:65:bf:cb:cc:3c:ec:
                    b9:28:24:a8:51:b4:3d:fb:4f:85:ad:d0:0d:d5:09:
                    77:c3:da:a4:ed:4b:76:b9:bf:12:4b:80:6f:22:cb:
                    35:e0:79:8a:a7:8c:4b:d2:32:f9:6e:a4:f4:b7:a5:
                    dc:7d:e6:11:be:5f:2a:7b:59:91:ef:0c:de:02:74:
                    66:f0:3d:a5:fa:02:27:ab:49:95:44:78:d9:4a:97:
                    df:3e:8c:a4:38:03:80:e7:8b:be:31:91:41:8b:82:
                    b7:4f:16:91:32:80:09:2d:37:24:5b:a5:43:c2:75:
                    07:c4:6b:f1:e4:88:40:57:37:f5:80:8c:bc:f3:61:
                    00:65:00:3e:ed:e7:e5:b2:14:47:89:c6:d3:2a:73:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:39:71:26:E6:3C:7D:59:6F:58:50:04:1C:54:EF:AF:9E:28:16:29
            X509v3 Authority Key Identifier:
                keyid:89:1E:55:A2:3E:E0:24:52:0C:4B:10:7E:CF:8C:DB:24:B9:5A:82:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/891E55A23EE024520C4B107ECF8CDB24B95A8283.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0BE3B0B1095AA5912FB21C7735CEBB8B83DAF6BC44426278388EB8772D426CB/0/3138312e3233332e37362e302f32322d3234203d3e20323732303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:58:6c:32:5d:11:2e:43:3c:6c:b3:c8:8c:02:6f:f4:12:
         f7:f8:38:bc:1c:63:2c:a4:00:22:a3:98:17:6d:04:93:15:5e:
         84:f4:68:5a:ee:d0:56:bb:76:4e:00:08:f6:c5:07:a1:b0:01:
         04:34:c9:84:01:ac:c8:de:ad:9d:a1:d5:0e:b2:d6:8e:84:a4:
         32:25:33:d8:ab:ac:f1:a3:d9:a3:71:4e:01:85:a9:1c:d8:44:
         97:cc:64:bc:dd:e5:8e:54:1a:95:9a:e6:57:a1:53:5d:58:6f:
         c5:25:51:f8:02:0b:43:2c:59:2b:6d:1d:68:a7:29:f8:64:a3:
         a7:ef:aa:c3:c5:2f:89:41:0b:5c:8d:3a:cb:ec:bb:ce:3d:74:
         72:08:32:2b:91:c8:3a:f7:2c:79:a4:7e:1d:9e:b2:05:ee:92:
         9f:c6:ea:50:8a:d2:18:3a:bb:bf:ca:ae:3b:e1:56:c6:e3:67:
         0c:57:63:40:03:dc:86:ec:e2:2f:dc:9a:74:d2:6e:71:2d:e2:
         6a:0c:51:b0:4d:70:d0:ac:4c:94:ea:eb:b0:a8:6e:54:79:e5:
         5f:14:b2:16:42:23:cb:2c:a3:32:26:43:4a:e7:29:40:a0:63:
         e7:0c:71:59:5b:ee:4f:c1:fb:7d:88:61:42:90:83:b4:f0:e6:
         a4:e0:72:d5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOnr1QRWxy/exKSmYrl29jMuoe/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkxRTU1QTIzRUUwMjQ1MjBDNEIxMDdFQ0Y4Q0RCMjRC
OTVBODI4MzAeFw0yNTAyMDQxOTU1MDVaFw0yNjAyMDMyMDAwMDVaMDMxMTAvBgNV
BAMTKDRGMzk3MTI2RTYzQzdENTk2RjU4NTAwNDFDNTRFRkFGOUUyODE2MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEtsvBJ9Tp3CdSez6L+CQqdUB
1eqDANQSYlPE9xqha11wLdwTo1D1N5Blu3bRSPt4JGsbmttMLUjhhtY7XERnxzqE
Us4qXL9WOmYNY+5ui+Ld7MLeT334eU9lzKuGIN0kJxVjozKrQ0zllZKWaet7c2W/
y8w87LkoJKhRtD37T4Wt0A3VCXfD2qTtS3a5vxJLgG8iyzXgeYqnjEvSMvlupPS3
pdx95hG+Xyp7WZHvDN4CdGbwPaX6AierSZVEeNlKl98+jKQ4A4Dni74xkUGLgrdP
FpEygAktNyRbpUPCdQfEa/HkiEBXN/WAjLzzYQBlAD7t5+WyFEeJxtMqc9LxAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTzlxJuY8fVlvWFAEHFTvr54oFikwHwYDVR0j
BBgwFoAUiR5Voj7gJFIMSxB+z4zbJLlagoMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMEJFM0IwQjEwOTVBQTU5MTJGQjIxQzc3MzVDRUJCOEI4
M0RBRjZCQzQ0NDI2Mjc4Mzg4RUI4NzcyRDQyNkNCLzAvODkxRTU1QTIzRUUwMjQ1
MjBDNEIxMDdFQ0Y4Q0RCMjRCOTVBODI4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84OTFFNTVBMjNFRTAyNDUyMEM0
QjEwN0VDRjhDREIyNEI5NUE4MjgzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjBCRTNCMEIxMDk1QUE1OTEyRkIyMUM3NzM1Q0VCQjhCODNEQUY2QkM0
NDQyNjI3ODM4OEVCODc3MkQ0MjZDQi8wLzMxMzgzMTJlMzIzMzMzMmUzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMyMzAzMzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCtelM
MA0GCSqGSIb3DQEBCwUAA4IBAQAAalhsMl0RLkM8bLPIjAJv9BL3+Di8HGMspAAi
o5gXbQSTFV6E9Gha7tBWu3ZOAAj2xQehsAEENMmEAazI3q2dodUOstaOhKQyJTPY
q6zxo9mjcU4Bhakc2ESXzGS83eWOVBqVmuZXoVNdWG/FJVH4AgtDLFkrbR1opyn4
ZKOn76rDxS+JQQtcjTrL7LvOPXRyCDIrkcg69yx5pH4dnrIF7pKfxupQitIYOru/
yq474VbG42cMV2NAA9yG7OIv3Jp00m5xLeJqDFGwTXDQrEyU6uuwqG5UeeVfFLIW
QiPLLKMyJkNK5ylAoGPnDHFZW+5Pwft9iGFCkIO08Oak4HLV
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:19:39 2025 by rpki-client