Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35392e302f32342d3234203d3e20323633313730.roa
File:                     3138312e3131342e35392e302f32342d3234203d3e20323633313730.roa (raw, json)
Hash identifier:          7SWszEf5ws7ChWPTklMXo98j/1Kpt4P8SivlmgRQtTc=
Subject key identifier:   93:04:C6:8D:C9:05:8C:C3:62:B5:D4:6B:9D:94:2C:43:68:63:99:78
Certificate issuer:       /CN=211623745083F5BD547E7869C6748AF8F2418ECF
Certificate serial:       0EBCE79B1EF392517836707F59E200F1CE6A572E
Authority key identifier: 21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35392e302f32342d3234203d3e20323633313730.roa
Signing time:             Tue 04 Feb 2025 18:55:32 +0000
ROA not before:           Tue 04 Feb 2025 18:50:32 +0000
ROA not after:            Tue 03 Feb 2026 18:55:32 +0000
asID:                     263170
IP address blocks:        181.114.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bc:e7:9b:1e:f3:92:51:78:36:70:7f:59:e2:00:f1:ce:6a:57:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211623745083F5BD547E7869C6748AF8F2418ECF
        Validity
            Not Before: Feb  4 18:50:32 2025 GMT
            Not After : Feb  3 18:55:32 2026 GMT
        Subject: CN=9304C68DC9058CC362B5D46B9D942C4368639978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:dc:aa:be:b4:b8:6a:1a:c9:7b:22:56:fc:
                    14:63:73:41:5b:c7:f8:b3:8b:81:98:60:82:d3:37:
                    a7:8c:e4:32:b9:9c:da:2d:3d:10:e6:44:18:3b:28:
                    4c:3d:bb:b1:bc:40:df:75:d7:fe:38:f2:55:88:0d:
                    ba:54:81:62:44:d6:b8:2f:69:bf:88:b4:6d:57:6f:
                    04:49:53:4d:23:49:fd:75:44:02:cb:ec:e1:14:23:
                    b3:fd:86:3d:74:b9:a2:41:47:e3:20:ce:4f:70:cc:
                    7d:78:e4:01:d9:f1:c7:b1:71:81:55:58:cb:ad:8c:
                    34:11:68:48:de:06:26:5e:a0:84:ea:db:76:99:e9:
                    d1:07:df:da:f1:9a:bd:e1:82:f5:a2:b3:8f:cc:ec:
                    ac:b3:09:c1:e4:55:7a:4c:41:ea:28:a3:5f:43:ef:
                    fd:8d:83:aa:4e:5b:d5:f0:93:9f:40:1b:1d:31:87:
                    ef:61:8c:db:25:36:40:c3:47:03:b4:9a:45:5b:57:
                    13:cb:b0:04:76:3a:77:49:ba:b6:4e:f7:de:bc:24:
                    23:88:b4:71:2e:13:3b:80:1c:45:19:89:82:bf:f5:
                    b6:6c:5b:d7:ae:49:bf:f5:2c:a9:df:34:3a:59:8d:
                    ef:97:43:39:a7:9f:ae:fc:8e:26:79:f8:d1:a3:fa:
                    99:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:04:C6:8D:C9:05:8C:C3:62:B5:D4:6B:9D:94:2C:43:68:63:99:78
            X509v3 Authority Key Identifier:
                keyid:21:16:23:74:50:83:F5:BD:54:7E:78:69:C6:74:8A:F8:F2:41:8E:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/211623745083F5BD547E7869C6748AF8F2418ECF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/211623745083F5BD547E7869C6748AF8F2418ECF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3AD16ECF4CD9455D0E39580900B97957E056B04D3EEFEA54F7E8D1C27682D00/0/3138312e3131342e35392e302f32342d3234203d3e20323633313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:43:4c:91:3e:7c:24:98:ab:2b:9c:9c:af:31:c9:51:f0:ec:
         6f:2b:99:4e:ba:c3:db:69:e3:b4:89:99:97:32:4f:f6:dc:35:
         61:1f:79:bd:0b:e0:68:43:1b:79:fa:34:07:fb:57:49:52:34:
         70:1e:96:93:0a:f8:94:28:cf:d4:b3:51:6e:c7:e6:91:1a:9f:
         f0:fc:59:51:32:61:3f:30:9c:cb:d9:3c:5f:f3:fb:92:c3:a6:
         4d:44:db:3d:79:67:c9:21:90:98:75:5e:da:58:82:18:1c:fe:
         78:50:e4:fc:73:99:2d:5c:57:45:d6:4e:ed:4c:22:9f:ae:87:
         db:f6:cd:81:4b:8d:4d:37:3c:cc:ef:33:e5:17:0c:d0:d7:a4:
         a8:4e:54:cc:7c:63:c0:fd:78:b7:c5:5e:b2:fe:f5:e2:aa:5f:
         f6:23:a0:c5:71:1b:a2:d3:de:d8:3e:32:21:2c:a7:21:99:14:
         e3:e2:7e:6c:16:2f:82:f7:51:0e:7b:45:e9:54:78:e0:20:f2:
         da:fc:ef:d0:7d:09:5d:eb:69:85:8e:d1:99:cd:87:70:14:1c:
         50:fe:dd:8d:37:64:35:f9:31:07:4a:c7:65:d5:19:e1:d0:11:
         42:53:0f:8a:6a:0a:69:40:93:6e:5a:86:87:6f:e5:13:99:54:
         bd:b5:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:11 2025 by rpki-client