Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e31332e302f32342d3234203d3e203532323537.roa
File:                     3138312e3139392e31332e302f32342d3234203d3e203532323537.roa (raw, json)
Hash identifier:          HGub+srotIp0oMgoPoD3tMUu9L2q812KT+ud2Dh2myA=
Subject key identifier:   4C:43:64:1E:AB:7D:7A:FB:D8:81:C0:D5:F1:20:16:54:8F:9C:E6:9A
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       48B47EE8B5A1B434FAF8FE22C6DD408F4075C6CF
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e31332e302f32342d3234203d3e203532323537.roa
Signing time:             Tue 04 Feb 2025 18:11:25 +0000
ROA not before:           Tue 04 Feb 2025 18:06:25 +0000
ROA not after:            Tue 03 Feb 2026 18:11:25 +0000
asID:                     52257
IP address blocks:        181.199.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b4:7e:e8:b5:a1:b4:34:fa:f8:fe:22:c6:dd:40:8f:40:75:c6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:25 2025 GMT
            Not After : Feb  3 18:11:25 2026 GMT
        Subject: CN=4C43641EAB7D7AFBD881C0D5F12016548F9CE69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:5f:cf:f7:cc:ad:c8:2a:a9:21:83:bb:63:
                    19:13:9e:ec:dd:2d:89:11:16:67:fb:d8:3e:3f:9e:
                    63:b8:dd:72:44:13:47:08:37:87:71:fb:92:d3:f0:
                    10:67:c6:fb:0a:b7:ad:84:1f:c6:a5:1b:c3:65:92:
                    af:7b:9e:92:a7:89:df:a2:b6:f2:70:1e:eb:a1:41:
                    8d:a4:84:04:b2:19:71:f7:bf:53:5d:d7:94:16:67:
                    b8:34:12:17:15:3c:ba:dc:fd:38:9b:5b:e7:47:3a:
                    f7:94:fb:d9:59:28:75:87:72:ba:24:4a:55:68:17:
                    7a:5a:c1:ef:bf:80:66:31:2a:b9:a2:01:26:c9:75:
                    ef:3e:27:bc:7a:2d:20:aa:cd:bc:e4:26:30:94:6b:
                    ac:a1:20:b6:13:e1:ff:13:6c:ad:9a:4d:b5:69:fb:
                    78:d7:db:dc:07:91:c0:8d:9d:8b:a6:2a:87:05:5e:
                    2c:56:4d:ef:44:ae:e9:0c:f2:af:07:1c:be:00:52:
                    29:82:da:0f:74:95:ca:97:f2:ae:ed:50:7a:94:52:
                    ef:0a:ad:34:c7:98:aa:c9:12:a8:5c:1a:57:b5:94:
                    ec:15:ad:21:56:ad:30:66:2b:3c:a4:44:07:9e:3e:
                    5d:7e:45:87:d9:f7:d2:eb:5e:4c:70:e7:93:38:c8:
                    fb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:43:64:1E:AB:7D:7A:FB:D8:81:C0:D5:F1:20:16:54:8F:9C:E6:9A
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e3139392e31332e302f32342d3234203d3e203532323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:8f:c2:c3:1c:a6:78:42:d9:b1:20:24:d8:ef:fb:f1:bb:17:
         8c:cf:c4:6b:59:27:6b:e4:64:0c:0c:31:2f:7a:16:7d:da:0c:
         75:0f:1a:26:1d:95:b2:5e:84:42:a0:be:e2:63:58:97:d7:37:
         b1:a8:de:ed:2d:5a:1b:d7:48:a6:e0:e4:dc:d6:6d:4a:fe:d4:
         c7:b8:7b:c4:79:c7:22:b6:6a:67:46:8a:12:98:0b:b2:96:3f:
         4f:de:8d:59:7f:ca:da:98:bc:55:0d:f5:63:1e:a8:4e:e1:cd:
         4a:5b:aa:32:d9:2e:b8:10:72:a1:54:df:da:97:ac:9d:38:e5:
         ef:ad:7b:fc:fa:e9:00:e4:05:53:eb:43:c9:fb:8a:e2:c3:6c:
         35:31:e0:f9:96:1f:46:6e:f6:11:eb:2c:5e:68:2f:d1:8b:fb:
         40:fa:4b:1c:17:8e:f0:6d:9d:93:7a:dd:db:5c:d1:4e:f0:f9:
         cd:ac:66:1c:90:73:ca:dc:45:1a:e8:da:d3:dc:19:f5:2d:36:
         ba:26:e0:6e:5c:62:a0:46:71:14:dc:39:d1:be:29:87:e1:c1:
         2f:6c:9c:06:3b:a9:48:95:2b:8e:c3:b7:8a:b0:1a:a1:83:a4:
         df:77:fd:4a:17:e1:15:c6:25:56:e7:e1:42:d3:fe:64:1c:cb:
         e8:75:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:58 2025 by rpki-client