Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e312e302f32342d3234203d3e203532323537.roa
File:                     3138312e3139392e312e302f32342d3234203d3e203532323537.roa (raw, json)
Hash identifier:          VsmUVWmADVHGxPZLxos5xemqzeRR7DB8zPTHMTnoLtY=
Subject key identifier:   24:CB:2F:AB:CF:1B:CC:94:56:FF:87:EC:AA:2A:8C:C6:19:07:71:2F
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       09334B69A5CC2C2D6974AA42CF131401FFB28E9A
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e312e302f32342d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 18:11:18 +0000
ROA not before:           Tue 04 Feb 2025 18:06:18 +0000
ROA not after:            Tue 03 Feb 2026 18:11:18 +0000
asID:                     52257
IP address blocks:        181.199.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:33:4b:69:a5:cc:2c:2d:69:74:aa:42:cf:13:14:01:ff:b2:8e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:18 2025 GMT
            Not After : Feb  3 18:11:18 2026 GMT
        Subject: CN=24CB2FABCF1BCC9456FF87ECAA2A8CC61907712F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:0f:06:1a:c4:64:13:b5:cf:e2:74:48:88:
                    3a:f8:8d:ce:95:0f:85:50:ef:d9:ef:ac:5f:eb:d3:
                    78:fc:54:15:76:43:92:75:b3:68:a3:85:26:fc:1c:
                    6f:c6:91:dd:3a:8d:89:07:55:8a:cf:e2:af:d7:f4:
                    ed:19:b8:fd:a7:d3:e5:a5:09:db:99:3c:31:ce:4d:
                    f1:b0:a4:a5:d0:7c:fc:7a:a0:2f:04:3e:b5:d2:01:
                    1e:18:79:d2:2b:e5:6d:c0:42:89:e5:db:d9:9c:3b:
                    a8:e1:a8:0a:79:1b:e2:11:a2:13:0d:7b:e3:5b:c8:
                    74:43:69:e6:76:b6:30:f3:b1:86:09:55:c9:65:d1:
                    30:ff:c2:39:21:27:12:34:d1:89:e4:12:24:b2:d0:
                    34:ae:91:73:cd:ad:b9:c7:dd:cb:68:e4:a3:aa:cf:
                    2d:11:82:3d:a0:37:8f:00:de:40:bf:1c:e1:06:8d:
                    22:75:85:8f:4e:15:2b:54:c5:cd:12:22:75:4c:87:
                    5c:80:5e:fa:4b:9d:e2:da:23:34:df:2b:da:71:ba:
                    78:f1:eb:b7:85:56:67:52:c2:59:38:ae:2b:01:ee:
                    11:d5:45:df:ca:d3:ab:34:99:5c:01:e6:28:96:df:
                    e2:c4:c9:33:24:c1:b9:4b:12:17:8a:fa:99:9f:55:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CB:2F:AB:CF:1B:CC:94:56:FF:87:EC:AA:2A:8C:C6:19:07:71:2F
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e312e302f32342d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:01:cc:63:1f:f7:95:54:a0:1b:98:31:a5:c7:b9:2e:ce:d8:
         11:f5:4e:75:8e:08:a2:37:56:1c:d6:c3:7f:e4:9e:71:f5:f5:
         20:0a:f5:37:2c:46:19:4f:3c:89:37:55:61:81:d5:29:eb:a5:
         ce:c7:fa:b4:22:5c:58:69:1c:ba:91:40:07:9c:d5:3d:6b:71:
         fe:66:7e:72:e5:d9:70:cb:c5:a0:15:bc:65:c8:3c:46:06:e1:
         fd:dc:9b:fb:0b:07:d4:92:80:59:ea:4b:89:9f:cf:0e:05:06:
         ea:b4:f6:72:08:f8:29:e8:6b:1d:b8:4f:e1:88:f8:0f:a9:ec:
         f3:af:48:ab:39:0d:98:2c:06:3e:c8:27:ca:42:37:35:e4:50:
         bb:29:0e:71:bb:1e:94:e1:c8:da:a0:44:df:dc:41:9e:77:fd:
         2e:9d:af:56:fd:09:84:44:e4:5b:b8:13:b5:a4:df:60:97:ce:
         e0:d1:9e:b1:69:d5:27:6e:1c:6b:fb:2c:ce:74:fe:76:f1:43:
         b2:ab:7d:62:64:74:71:b5:f4:2b:e4:ce:c9:e7:c1:ed:ab:ca:
         27:1a:34:a0:b0:e4:03:d4:a2:dd:f6:d3:89:04:53:a5:85:93:
         c1:6d:72:63:86:fe:d0:23:65:f3:78:6a:40:1f:de:2b:d2:cf:
         68:b2:7a:4e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCTNLaaXMLC1pdKpCzxMUAf+yjpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZGNkQwNTUzNjExMzQxNjZFOUI2NkZCNTU1RkYyN0RD
RURCRjg1RDAeFw0yNTAyMDQxODA2MThaFw0yNjAyMDMxODExMThaMDMxMTAvBgNV
BAMTKDI0Q0IyRkFCQ0YxQkNDOTQ1NkZGODdFQ0FBMkE4Q0M2MTkwNzcxMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Pw8GGsRkE7XP4nRIiDr4jc6V
D4VQ79nvrF/r03j8VBV2Q5J1s2ijhSb8HG/Gkd06jYkHVYrP4q/X9O0ZuP2n0+Wl
CduZPDHOTfGwpKXQfPx6oC8EPrXSAR4YedIr5W3AQonl29mcO6jhqAp5G+IRohMN
e+NbyHRDaeZ2tjDzsYYJVcll0TD/wjkhJxI00YnkEiSy0DSukXPNrbnH3cto5KOq
zy0Rgj2gN48A3kC/HOEGjSJ1hY9OFStUxc0SInVMh1yAXvpLneLaIzTfK9pxunjx
67eFVmdSwlk4risB7hHVRd/K06s0mVwB5iiW3+LEyTMkwblLEheK+pmfVbJjAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUJMsvq88bzJRW/4fsqiqMxhkHcS8wHwYDVR0j
BBgwFoAUlvbQVTYRNBZum2b7VV/yfc7b+F0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzk1OUEyREIxMjlBQjY4MThCOUYyQ0RGQ0E1NDAzOTAz
OTcwOENCODQ3NzI0QkIyMzQyMzU3Njg2MkQ0QTdGLzAvOTZGNkQwNTUzNjExMzQx
NjZFOUI2NkZCNTU1RkYyN0RDRURCRjg1RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NkY2RDA1NTM2MTEzNDE2NkU5
QjY2RkI1NTVGRjI3RENFREJGODVELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5NTlBMkRCMTI5QUI2ODE4QjlGMkNERkNBNTQwMzkwMzk3MDhDQjg0
NzcyNEJCMjM0MjM1NzY4NjJENEE3Ri8wLzMxMzgzMTJlMzEzOTM5MmUzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzIzMjM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1xwEwDQYJ
KoZIhvcNAQELBQADggEBAIABzGMf95VUoBuYMaXHuS7O2BH1TnWOCKI3VhzWw3/k
nnH19SAK9TcsRhlPPIk3VWGB1Snrpc7H+rQiXFhpHLqRQAec1T1rcf5mfnLl2XDL
xaAVvGXIPEYG4f3cm/sLB9SSgFnqS4mfzw4FBuq09nII+Cnoax24T+GI+A+p7POv
SKs5DZgsBj7IJ8pCNzXkULspDnG7HpThyNqgRN/cQZ53/S6dr1b9CYRE5Fu4E7Wk
32CXzuDRnrFp1SduHGv7LM50/nbxQ7KrfWJkdHG19Cvkzsnnwe2ryicaNKCw5APU
ot3204kEU6WFk8FtcmOG/tAjZfN4akAf3ivSz2iyek4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:01 2025 by rpki-client