Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32342e302f32342d3234203d3e20323635383131.roa
File:                     3230312e3138322e32342e302f32342d3234203d3e20323635383131.roa (raw, json)
Hash identifier:          Es2Vfh/qkSn/mRD2qdaHOx4JvtGwOM+yYANp7Szk+iM=
Subject key identifier:   EF:E5:9F:77:4D:1D:EA:D7:E9:41:17:62:4B:6F:CA:0E:DD:31:C9:91
Certificate issuer:       /CN=B905CE8CB484116258141F2BAF5032F468106BF3
Certificate serial:       3DB4E0CDE31954E0B7049EB281ED0AAF3689E357
Authority key identifier: B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32342e302f32342d3234203d3e20323635383131.roa
Signing time:             Tue 04 Feb 2025 18:08:44 +0000
ROA not before:           Tue 04 Feb 2025 18:03:44 +0000
ROA not after:            Tue 03 Feb 2026 18:08:44 +0000
asID:                     265811
IP address blocks:        201.182.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b4:e0:cd:e3:19:54:e0:b7:04:9e:b2:81:ed:0a:af:36:89:e3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B905CE8CB484116258141F2BAF5032F468106BF3
        Validity
            Not Before: Feb  4 18:03:44 2025 GMT
            Not After : Feb  3 18:08:44 2026 GMT
        Subject: CN=EFE59F774D1DEAD7E94117624B6FCA0EDD31C991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:01:e4:e3:18:89:2a:27:9d:0e:18:bb:03:
                    dc:0d:2b:7f:36:20:de:02:10:20:f1:62:f4:41:1a:
                    a8:71:73:75:42:6a:22:a9:cc:d4:7e:41:84:1d:63:
                    75:d2:e9:9d:50:5c:20:dc:b2:bc:7a:5b:a2:60:94:
                    ad:50:ad:5a:f9:25:fb:f9:1f:61:90:b1:84:0f:e9:
                    59:fc:1d:59:53:31:6b:63:d5:13:cb:ad:98:5e:69:
                    51:6e:38:cc:7f:ee:73:5b:57:02:ad:b4:54:0a:3d:
                    ef:e2:89:d0:e5:6e:a0:c9:79:53:27:d5:98:b6:51:
                    52:e6:ad:51:e8:62:5b:5b:bb:99:92:8e:5d:6b:2f:
                    79:3d:12:d9:51:82:87:3b:0e:43:c1:ea:95:94:e3:
                    92:f7:81:be:c9:1d:e4:8a:1f:bb:b2:7d:55:50:6d:
                    40:44:00:f5:d7:fe:8d:58:e9:ed:ef:74:53:53:75:
                    b2:42:be:38:96:16:62:92:71:7d:62:67:83:42:ca:
                    0d:b2:36:42:b2:c4:d7:e8:7b:1e:aa:85:69:fa:59:
                    81:04:3c:0d:7e:67:80:49:ad:c6:e8:b0:bb:4a:55:
                    ee:ee:b8:bf:f9:a5:57:8b:13:ef:77:1f:46:42:eb:
                    e6:73:67:fe:d7:24:e2:89:cc:af:dd:79:e3:ad:10:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E5:9F:77:4D:1D:EA:D7:E9:41:17:62:4B:6F:CA:0E:DD:31:C9:91
            X509v3 Authority Key Identifier:
                keyid:B9:05:CE:8C:B4:84:11:62:58:14:1F:2B:AF:50:32:F4:68:10:6B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/B905CE8CB484116258141F2BAF5032F468106BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B905CE8CB484116258141F2BAF5032F468106BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F834BD9FC02DC7B26E24A227BB124B64ECCD92A528641D456A121D432AFDDD17/0/3230312e3138322e32342e302f32342d3234203d3e20323635383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ac:83:cd:aa:a3:cf:1b:11:41:43:e4:59:0c:f3:0d:09:36:
         63:da:fa:a8:0e:13:44:26:89:09:8b:20:23:f1:fb:1b:b9:95:
         ed:05:f0:61:7b:93:30:2b:31:b7:a5:2a:ac:c9:35:eb:56:9c:
         c4:a6:5c:47:5a:6c:c4:49:e3:f6:55:92:d5:77:e2:2b:10:f5:
         35:3a:01:06:88:2c:6a:55:42:f3:4a:ca:fe:aa:12:6f:8d:74:
         72:28:c7:46:eb:0f:16:7f:79:eb:d4:5a:37:89:0f:05:80:6b:
         8b:01:0b:76:34:f5:73:99:e2:f4:f2:a0:59:92:71:e5:d0:3f:
         86:1b:cb:1a:da:70:7d:41:b0:41:00:07:5d:c6:43:8d:c8:35:
         3d:eb:e2:41:4d:84:68:67:75:2e:58:ed:40:08:55:47:a0:20:
         bb:70:8a:a2:9a:73:27:10:24:d2:da:fe:c0:b5:69:97:f9:3a:
         2f:c0:75:fa:53:c3:30:46:8f:51:21:e6:ec:95:82:7b:2d:c4:
         ee:d9:e5:3a:db:67:c6:2a:5b:e2:70:cf:e9:b5:b8:1a:b3:23:
         cc:8e:5f:24:8d:ba:72:a0:ae:92:7f:c2:a4:7c:60:0a:f0:65:
         a0:db:f5:dc:8d:8a:e5:31:46:df:36:53:75:a6:d0:92:7b:b0:
         29:ab:ce:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:23 2025 by rpki-client