Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203139313639.roa
File:                     3138312e33392e302e302f31362d3234203d3e203139313639.roa (raw, json)
Hash identifier:          VeU0nhi6K+onwq9SrIfAfJgIh4HeQ/vv7KwSvA7masQ=
Subject key identifier:   27:3E:6C:12:3B:AC:F0:0A:D6:59:E7:77:4D:D7:D1:30:97:6A:A7:1E
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       5AC63A9920C0EA6A336D7A2F1BBB5CC092C0EDE2
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:27 +0000
ROA not before:           Tue 04 Feb 2025 18:06:27 +0000
ROA not after:            Tue 03 Feb 2026 18:11:27 +0000
asID:                     19169
IP address blocks:        181.39.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:3a:99:20:c0:ea:6a:33:6d:7a:2f:1b:bb:5c:c0:92:c0:ed:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:27 2025 GMT
            Not After : Feb  3 18:11:27 2026 GMT
        Subject: CN=273E6C123BACF00AD659E7774DD7D130976AA71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7b:81:98:99:c6:76:12:a2:47:a3:96:4e:0f:
                    ec:4a:62:3a:cd:9a:da:f1:11:d1:a9:1e:7d:44:24:
                    9d:49:92:26:a7:ae:70:bd:52:a8:81:b9:66:75:c7:
                    dd:c4:c4:60:7f:0c:5e:f9:5e:48:ca:49:f6:70:fd:
                    99:af:82:12:0a:8f:43:cf:dc:8f:e8:7e:7b:8b:ef:
                    05:46:27:6f:51:98:9b:7c:8d:3a:03:81:f8:ef:af:
                    bc:30:3a:c2:ea:fa:18:82:01:89:c7:00:d7:c1:a3:
                    73:9b:b8:42:85:28:26:a1:c8:2e:75:36:bc:27:a9:
                    91:5e:d5:d5:03:68:0c:6f:1b:97:12:3b:dd:d9:10:
                    51:87:b2:e6:df:bb:97:59:3e:4c:11:b1:d0:4f:8b:
                    b2:31:af:39:13:b5:24:00:3f:58:7f:fa:10:4f:51:
                    92:7e:7a:b5:49:da:83:03:42:04:17:1f:2d:15:b3:
                    f2:91:1d:2d:ed:13:0d:79:34:80:74:f0:39:97:eb:
                    62:7e:e3:0f:8a:c4:4b:1f:f1:b5:83:16:9a:2a:bb:
                    c2:ee:18:43:2e:26:68:25:21:ac:c5:47:d6:10:47:
                    79:7b:ec:0f:bd:f0:c2:ad:87:11:09:f2:21:56:77:
                    d3:a2:13:f7:b0:a4:58:a3:5a:5d:d9:70:18:58:a4:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3E:6C:12:3B:AC:F0:0A:D6:59:E7:77:4D:D7:D1:30:97:6A:A7:1E
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3138312e33392e302e302f31362d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:8f:f1:a3:8e:2f:69:85:49:70:89:ba:87:73:0e:4f:75:96:
         22:7a:48:2f:66:07:70:f5:38:ea:86:37:51:db:94:98:b9:4e:
         97:4c:69:08:08:78:76:2a:f1:a3:b6:8d:4c:89:6b:c8:e2:76:
         36:4a:c7:ae:94:b8:a2:20:a0:81:7d:f1:26:05:dd:74:8e:da:
         94:06:48:da:73:7c:89:93:7b:9a:5e:21:60:4d:1f:c0:33:66:
         41:48:56:45:f6:ef:6d:e5:32:7e:ef:9f:c5:45:b1:82:37:88:
         53:1f:f0:82:fa:98:90:65:24:73:cc:f0:43:c0:37:a3:d9:9a:
         37:13:63:23:97:56:97:2b:e1:57:ae:1b:c4:37:44:2c:54:ee:
         ac:c7:89:a8:e7:91:b2:75:eb:63:5c:35:fe:44:d0:f5:df:bb:
         9a:a0:bb:ce:71:43:64:34:dc:8d:02:33:58:e4:36:91:d3:9a:
         18:ec:07:a9:88:d5:d0:cd:95:4b:ba:15:e1:ca:a1:d5:44:c0:
         a4:bb:b1:89:a1:ed:bf:4e:7e:f2:51:56:dc:74:2d:d6:05:75:
         c4:43:4e:71:0e:7f:52:c5:1f:ac:48:b9:53:f2:94:78:03:53:
         17:db:41:26:1b:a3:59:5b:a1:ff:5a:27:ba:33:24:a2:14:04:
         4c:ee:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:35 2025 by rpki-client