Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa
File:                     3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa (raw, json)
Hash identifier:          SZaAr0+iJuK7E9t7S4+4Uhz3pPl3W2lOTRICqjoba+g=
Subject key identifier:   55:1E:FC:77:F7:67:E0:10:7B:C0:C5:51:B1:93:CB:4B:E2:2C:28:13
Certificate issuer:       /CN=E8554F873F7503B7C2C3FD59E7E595FBC9D62A38
Certificate serial:       061898EDEF67CB3E4A36974BC4B4F5266924DF8B
Authority key identifier: E8:55:4F:87:3F:75:03:B7:C2:C3:FD:59:E7:E5:95:FB:C9:D6:2A:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa
Signing time:             Tue 04 Feb 2025 18:54:55 +0000
ROA not before:           Tue 04 Feb 2025 18:49:55 +0000
ROA not after:            Tue 03 Feb 2026 18:54:55 +0000
asID:                     265779
IP address blocks:        181.191.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:18:98:ed:ef:67:cb:3e:4a:36:97:4b:c4:b4:f5:26:69:24:df:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8554F873F7503B7C2C3FD59E7E595FBC9D62A38
        Validity
            Not Before: Feb  4 18:49:55 2025 GMT
            Not After : Feb  3 18:54:55 2026 GMT
        Subject: CN=551EFC77F767E0107BC0C551B193CB4BE22C2813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:1c:68:7f:97:dc:13:97:d8:db:ac:0d:f4:
                    c0:e3:7f:05:d0:55:b6:25:29:8f:06:68:ec:79:7a:
                    02:d3:8a:58:74:7c:cc:5a:83:1b:dd:b9:a3:c6:bc:
                    e5:9f:bf:b8:bc:c0:85:10:08:a5:67:b6:94:b1:aa:
                    35:8e:98:58:72:d5:12:e0:45:df:32:fe:38:17:fb:
                    c2:d1:a6:0b:27:ae:6b:a4:99:2b:42:b7:2d:cf:61:
                    2a:8a:68:d0:2b:da:40:7a:af:d8:7f:4b:d4:60:08:
                    65:ad:4a:73:cd:d8:c1:a9:9a:6c:7f:e8:1d:74:5f:
                    de:0f:98:b9:57:2c:de:a1:10:64:8b:08:79:09:48:
                    33:f2:c1:87:73:7c:a8:b7:4c:2c:e1:0f:71:3a:63:
                    4a:76:dd:bd:3f:c3:91:fc:76:08:3e:7a:ab:bf:a5:
                    0c:28:eb:58:e5:15:cb:9c:32:23:35:6c:93:34:b1:
                    e8:7a:c8:76:73:d3:47:e1:54:82:65:c3:f1:b3:4a:
                    6e:df:e4:44:27:0d:bc:ef:bc:6c:f1:75:d4:b5:e3:
                    d5:f7:39:f0:ba:36:9d:3d:39:c9:6a:2b:66:c7:2e:
                    0c:8c:37:f2:c6:87:4a:82:cb:8a:40:06:62:f9:7f:
                    d3:d0:35:64:c2:0f:cb:d9:5a:24:03:be:9d:76:57:
                    55:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1E:FC:77:F7:67:E0:10:7B:C0:C5:51:B1:93:CB:4B:E2:2C:28:13
            X509v3 Authority Key Identifier:
                keyid:E8:55:4F:87:3F:75:03:B7:C2:C3:FD:59:E7:E5:95:FB:C9:D6:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8554F873F7503B7C2C3FD59E7E595FBC9D62A38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5169BC68300716C7520B37E494AB42203EE9ED9B9BFE2B19C83B7EFD4FBCFA6/0/3138312e3139312e36382e302f32322d3234203d3e20323635373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:6f:bc:f7:6f:15:93:96:24:87:69:43:f9:80:de:14:04:50:
         e9:d5:98:fe:2a:76:6c:71:64:2f:8b:bf:86:9f:8c:53:ce:5a:
         67:39:51:1a:a4:10:58:ff:cf:b3:e9:b6:5a:b8:e1:7c:a2:e5:
         6a:50:6f:06:ca:a9:e3:f1:92:aa:a9:75:d1:11:a3:f6:85:bc:
         01:7b:02:f4:04:28:47:a6:a8:d4:15:9c:43:f4:cb:de:98:e9:
         f2:aa:6d:d8:53:3a:e9:83:0e:e5:8e:c6:71:e9:5b:a7:ab:23:
         e8:b2:c6:ce:c8:fb:d5:2a:f2:46:be:d8:de:ce:0a:49:f2:8f:
         9d:5a:ce:32:c9:58:d4:ca:02:70:dd:50:77:c2:87:37:ab:76:
         9c:38:53:a4:75:10:9a:86:fd:38:25:75:3b:2a:11:cf:c1:d8:
         ef:47:5c:e3:41:55:0d:3a:2d:6f:99:25:64:dd:81:6c:be:37:
         d6:63:b2:dc:0a:4c:5e:7d:41:28:07:5b:51:29:ec:11:7d:26:
         2d:e6:9e:1c:6f:c9:35:57:3b:ce:97:9d:9d:5b:5b:67:38:e2:
         5b:c6:58:ca:8f:a0:de:93:62:67:33:40:7a:01:cf:0a:08:38:
         a8:d4:10:30:b3:42:35:1a:85:7b:97:d4:10:ee:6f:af:7d:8e:
         bb:81:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client