Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa
File:                     3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa (raw, json)
Hash identifier:          n3TxSJjZagQjS5u3G74d7l0aAazUrmHlO64Mklcm410=
Subject key identifier:   51:C9:EC:B9:C0:E6:EE:FC:9C:59:31:44:2D:58:24:B6:2A:F2:98:18
Certificate issuer:       /CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
Certificate serial:       46FA78BFC20C5A2EC7659D98B5A1F0BA6F3461DA
Authority key identifier: 16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa
Signing time:             Tue 04 Feb 2025 18:29:40 +0000
ROA not before:           Tue 04 Feb 2025 18:24:40 +0000
ROA not after:            Tue 03 Feb 2026 18:29:40 +0000
asID:                     272024
IP address blocks:        181.189.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fa:78:bf:c2:0c:5a:2e:c7:65:9d:98:b5:a1:f0:ba:6f:34:61:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A
        Validity
            Not Before: Feb  4 18:24:40 2025 GMT
            Not After : Feb  3 18:29:40 2026 GMT
        Subject: CN=51C9ECB9C0E6EEFC9C5931442D5824B62AF29818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:8c:b1:c8:f8:ed:3b:39:12:7f:de:5f:04:
                    45:99:1c:c6:c6:e9:88:f9:67:ac:66:6a:28:10:ff:
                    78:1a:62:ad:4d:14:3c:63:c5:1c:9b:d8:f1:4f:0e:
                    e5:6f:d0:8d:6f:74:1b:67:c2:e6:b9:6c:cc:4d:48:
                    25:32:e3:dc:ff:0e:20:40:15:6c:61:a0:01:a8:99:
                    c1:7b:8e:36:0f:f9:64:13:03:57:8d:a1:01:7f:ea:
                    ca:9f:fe:49:5a:2c:77:c0:8f:e2:9a:a2:1d:e9:a9:
                    4b:56:40:b7:38:94:d6:7d:82:60:fb:73:e5:15:6a:
                    7c:ed:2b:d1:ab:80:87:44:81:4f:bf:4a:cc:5b:ca:
                    df:07:f9:5d:7e:08:4b:fe:fe:dc:5b:e0:ee:90:34:
                    b2:7d:9d:b1:a0:9f:16:31:32:31:ad:4d:08:ac:c6:
                    89:05:92:80:50:88:4c:65:3b:18:f0:ca:36:16:3e:
                    e4:17:f7:2a:b3:81:a5:9c:28:d3:5a:69:bf:26:26:
                    85:a1:9d:2c:c0:b4:ee:3b:6e:57:8b:20:4b:c8:b9:
                    bf:ba:fd:60:43:04:53:c2:1b:ab:a7:8d:b3:4e:46:
                    9d:26:28:5c:9f:df:18:a0:b9:8b:55:1c:31:ab:96:
                    eb:1c:8a:85:98:2f:2d:b0:a2:87:fc:1d:e8:45:a8:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:EC:B9:C0:E6:EE:FC:9C:59:31:44:2D:58:24:B6:2A:F2:98:18
            X509v3 Authority Key Identifier:
                keyid:16:A1:CC:BD:CE:D4:6F:DD:8D:58:69:0B:FE:D9:A8:49:0A:A6:7C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16A1CCBDCED46FDD8D58690BFED9A8490AA67C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2F7CEF2E5D3E6174FBF75865C0FB6A876A6DAE999F1A306C236F263E42E507E/0/3138312e3138392e32342e302f32332d3234203d3e20323732303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:88:11:62:01:4a:55:6c:dc:cf:94:a9:37:6d:2e:10:f7:8b:
         8d:9a:84:ab:8a:a6:0c:a4:48:15:45:bf:56:43:81:bc:35:5b:
         44:6d:70:b1:22:9d:41:81:e2:5b:c3:30:27:ab:8f:ad:b4:61:
         77:f6:8c:2f:41:bc:a1:aa:5c:d8:1d:98:00:ac:33:f9:e5:30:
         43:ef:71:5c:4b:0b:08:3e:c5:dc:a5:22:f1:88:af:02:9b:d3:
         c3:09:10:8d:3d:ef:d2:84:2b:5e:90:a3:95:e5:df:fd:f4:51:
         5f:df:81:72:09:68:e3:97:9e:b8:fd:68:e4:f7:c2:ec:59:29:
         c9:2b:3d:0c:66:42:33:5e:be:da:3e:d2:8b:41:fc:78:85:06:
         db:f3:9b:28:60:4d:c4:fa:52:78:77:83:21:ae:65:c6:9c:7c:
         2d:51:4a:c7:27:65:9d:04:ed:bd:cf:92:01:00:5e:4f:7b:03:
         98:f9:1b:71:0e:b2:42:da:8f:6a:d0:ac:0c:18:8f:fb:f4:4c:
         0a:dc:2a:81:1a:59:96:cd:53:ce:83:a1:e0:73:b0:e2:56:bc:
         36:be:5a:28:ba:2c:6f:5a:94:98:fd:98:15:28:c8:58:1c:45:
         0c:73:68:61:6c:35:90:4c:e3:67:f6:2d:c5:09:46:6f:c7:c0:
         53:a0:35:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:02 2025 by rpki-client