Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46C8B16B3A90FAB8D92B76AA70B7C167539034F17894EBC1390EF4B5B3B3204B/0/3138312e3233332e32342e302f32322d3234203d3e20323731383335.roa
File:                     3138312e3233332e32342e302f32322d3234203d3e20323731383335.roa (raw, json)
Hash identifier:          WwvksmgosNa1nFKp/iJeX8uEEiPiYjGAXHcAcmD6E2A=
Subject key identifier:   C3:EA:82:AF:23:65:D6:92:02:55:4B:C8:15:D9:AA:3A:0B:C7:5B:69
Certificate issuer:       /CN=765A8836936D36155187BB9C23764FF1ED131B4E
Certificate serial:       1A4E904CD1AD7955798E9EB4B006BA3160C97F1C
Authority key identifier: 76:5A:88:36:93:6D:36:15:51:87:BB:9C:23:76:4F:F1:ED:13:1B:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765A8836936D36155187BB9C23764FF1ED131B4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46C8B16B3A90FAB8D92B76AA70B7C167539034F17894EBC1390EF4B5B3B3204B/0/3138312e3233332e32342e302f32322d3234203d3e20323731383335.roa
Signing time:             Tue 05 Mar 2024 18:04:51 +0000
ROA not before:           Tue 05 Mar 2024 17:59:51 +0000
ROA not after:            Tue 04 Mar 2025 18:04:51 +0000
asID:                     271835
IP address blocks:        181.233.24.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4e:90:4c:d1:ad:79:55:79:8e:9e:b4:b0:06:ba:31:60:c9:7f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765A8836936D36155187BB9C23764FF1ED131B4E
        Validity
            Not Before: Mar  5 17:59:51 2024 GMT
            Not After : Mar  4 18:04:51 2025 GMT
        Subject: CN=C3EA82AF2365D69202554BC815D9AA3A0BC75B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:9f:bd:ec:f5:f7:5c:40:ea:f2:af:a9:d2:
                    d1:0c:f3:f8:4c:57:30:35:11:4e:75:0b:69:a5:79:
                    96:22:fb:17:db:c1:2e:40:8a:99:18:2a:d2:ae:cf:
                    c7:15:85:94:16:c5:52:93:a2:73:ff:87:70:46:90:
                    30:a2:8f:de:2a:b8:98:e0:e7:11:cd:59:f8:1e:19:
                    28:d6:da:6b:85:03:f5:3c:09:85:84:fe:f3:b2:e7:
                    24:87:0c:b3:fe:fe:29:13:6a:4e:a3:2f:a1:93:bb:
                    ba:fe:9b:b3:35:85:97:20:68:22:70:a6:f5:83:41:
                    f7:31:89:72:65:f2:07:93:07:40:30:78:e7:f4:ec:
                    9e:2a:4f:2c:a2:77:01:4b:d1:64:d8:86:36:7b:1c:
                    c5:b6:59:3b:98:1a:95:75:68:c7:c9:77:25:08:07:
                    4b:04:8a:cd:d1:a7:3e:c4:6c:9c:b9:5e:98:60:1e:
                    8b:6a:89:c4:86:17:bc:8a:8c:0b:ba:14:33:51:ea:
                    ca:a8:7d:9e:f2:f7:db:63:5a:ed:ad:71:05:17:d7:
                    3e:0d:cd:52:ff:7d:50:7a:1a:7b:49:eb:77:5b:eb:
                    8a:d9:a5:9e:41:7b:25:f8:40:0c:a1:82:84:24:b7:
                    e0:bc:8a:d2:ad:1e:d7:90:f0:16:55:a4:69:54:bf:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:82:AF:23:65:D6:92:02:55:4B:C8:15:D9:AA:3A:0B:C7:5B:69
            X509v3 Authority Key Identifier:
                keyid:76:5A:88:36:93:6D:36:15:51:87:BB:9C:23:76:4F:F1:ED:13:1B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46C8B16B3A90FAB8D92B76AA70B7C167539034F17894EBC1390EF4B5B3B3204B/0/765A8836936D36155187BB9C23764FF1ED131B4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765A8836936D36155187BB9C23764FF1ED131B4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46C8B16B3A90FAB8D92B76AA70B7C167539034F17894EBC1390EF4B5B3B3204B/0/3138312e3233332e32342e302f32322d3234203d3e20323731383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:71:c5:38:66:23:70:2a:fb:1f:4b:6b:97:0b:d3:fc:c7:7b:
         a3:41:cd:b4:3a:90:bc:8b:f9:73:ea:05:90:fd:b6:b0:b8:02:
         28:1d:cd:34:c6:66:ac:55:10:3a:ef:a0:9d:d7:f4:44:26:5c:
         9e:a4:b4:93:b0:c2:31:04:b3:54:66:45:ac:30:b8:90:00:b5:
         ce:96:0a:a8:bb:64:f6:60:b3:40:75:7d:9c:6c:8e:80:f8:08:
         78:3e:18:29:3a:96:9c:7d:1b:d1:5d:70:2b:c5:4f:e0:f3:81:
         0e:90:5e:d4:f4:d7:a8:a9:50:be:84:6d:72:62:ba:47:14:f0:
         f2:03:10:ac:84:31:e0:e0:f3:bd:ea:56:c0:9d:db:52:6d:b7:
         8e:c1:87:ad:84:55:69:73:5e:02:51:8e:74:6d:bb:32:c7:8e:
         8e:65:d8:c3:a3:c5:45:36:a3:25:27:6b:cf:1e:bd:03:72:b0:
         cb:0e:3e:99:07:13:ec:cf:53:a6:3b:d7:f4:c1:79:2c:19:bf:
         02:83:db:67:ab:0c:1c:e3:e6:94:a6:4e:02:83:0f:f1:80:3a:
         c2:3e:70:f2:d1:e0:c8:dc:90:1b:f1:b1:c2:ee:a0:77:25:7a:
         9b:a6:e3:c2:30:1d:25:58:95:69:ba:9c:aa:98:23:9d:df:86:
         ad:84:b6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:30:22 2025 by rpki-client