Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa
File:                     3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa (raw, json)
Hash identifier:          5TzrhVAZ6jXNg/v2bPf8qR50qOVDbi7sfzNF8vZlHqg=
Subject key identifier:   CA:07:53:D6:6A:B0:3F:59:48:3D:B3:23:79:5E:D1:C2:80:DE:C5:3D
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       3E78D5F578F3D4583F880F40CBD49FCE6DC276E0
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa
Signing time:             Tue 05 Mar 2024 17:52:17 +0000
ROA not before:           Tue 05 Mar 2024 17:47:17 +0000
ROA not after:            Tue 04 Mar 2025 17:52:17 +0000
asID:                     52489
IP address blocks:        181.225.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:78:d5:f5:78:f3:d4:58:3f:88:0f:40:cb:d4:9f:ce:6d:c2:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:17 2024 GMT
            Not After : Mar  4 17:52:17 2025 GMT
        Subject: CN=CA0753D66AB03F59483DB323795ED1C280DEC53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:34:c9:20:37:a5:2b:68:e3:0e:eb:99:b9:
                    5c:9c:d8:1a:df:2a:2c:d8:e2:74:9a:64:5b:de:4a:
                    29:38:35:43:5a:73:a3:44:4f:91:ac:e6:2f:a9:e4:
                    08:0f:b3:71:09:1d:25:9f:2f:5d:6b:18:4f:b2:e8:
                    e8:cc:a1:45:05:51:c5:d9:51:4a:ef:6f:df:56:09:
                    63:ea:71:89:cf:9c:97:00:53:ec:47:44:3f:de:4d:
                    55:22:74:0e:ac:57:62:3c:20:86:75:41:39:6c:b7:
                    67:da:34:0a:49:03:90:a6:82:03:2f:ab:2f:36:40:
                    32:99:0e:2c:6f:cb:fd:23:57:87:6e:49:20:d9:06:
                    0b:e8:2c:c9:e8:13:72:78:5e:13:58:58:f7:54:b4:
                    03:08:27:aa:0d:b3:4c:ff:5a:5e:6a:fa:b9:d9:59:
                    70:6f:49:03:ce:f4:9a:6d:39:28:d0:10:5b:cc:b0:
                    86:f8:e2:bf:0d:a1:04:cb:b2:af:73:d6:4e:d7:fc:
                    45:2a:a5:3b:91:86:63:6d:98:7c:14:77:08:5b:dc:
                    1d:b6:8e:b7:40:c6:82:51:03:88:56:f4:33:90:1f:
                    72:18:d2:dd:1b:92:f4:6b:85:ce:02:d2:06:d6:4c:
                    93:ca:3a:f4:dc:f2:08:64:09:aa:e9:67:8e:43:f2:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:07:53:D6:6A:B0:3F:59:48:3D:B3:23:79:5E:D1:C2:80:DE:C5:3D
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3138312e3232352e3131322e302f32302d3234203d3e203532343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:02:66:51:54:cb:ae:50:1e:66:24:2d:22:1a:a7:a3:ab:
         3a:89:87:d8:47:2f:28:6f:e9:d5:4f:d2:d2:41:12:29:d0:6d:
         2b:90:b0:ac:a7:8d:0c:67:29:a0:bb:d6:d8:97:11:5e:8e:0b:
         f4:43:0d:a7:2e:62:e7:4f:c6:05:e5:7c:19:3c:70:d2:bb:a9:
         7c:bf:b4:d3:64:2d:87:90:65:22:14:fe:f2:76:77:56:b9:89:
         dc:7d:03:d5:a8:58:a3:30:a2:73:94:db:44:d4:fc:1b:99:ab:
         7e:00:c4:d6:b1:44:8e:90:33:58:21:32:95:c7:f4:2d:c9:cc:
         fd:18:43:56:ea:9d:a2:66:dc:08:74:9e:a5:74:f5:e3:3b:4e:
         1a:02:63:a6:2a:c7:1a:51:2a:46:25:a2:d9:37:a0:b7:ef:8e:
         a9:34:58:90:2b:ac:a8:63:cf:f3:34:bd:99:6f:6c:7a:9e:3f:
         11:b0:de:df:76:bd:6a:eb:6e:4e:c7:d1:76:ed:d2:73:c5:30:
         cb:f8:1f:52:18:60:9d:76:75:d1:c8:2e:bb:cd:6a:3a:fa:4f:
         e5:9c:e7:1a:2b:5b:a5:57:85:89:f9:e6:17:f7:5c:10:30:f2:
         c9:24:66:b4:d1:fc:54:01:68:a2:f2:03:c8:a0:ef:9e:dc:66:
         6b:5b:9c:70
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPnjV9Xjz1Fg/iA9Ay9Sfzm3CduAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MTdaFw0yNTAzMDQxNzUyMTdaMDMxMTAvBgNV
BAMTKENBMDc1M0Q2NkFCMDNGNTk0ODNEQjMyMzc5NUVEMUMyODBERUM1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FjTJIDelK2jjDuuZuVyc2Brf
KizY4nSaZFveSik4NUNac6NET5Gs5i+p5AgPs3EJHSWfL11rGE+y6OjMoUUFUcXZ
UUrvb99WCWPqcYnPnJcAU+xHRD/eTVUidA6sV2I8IIZ1QTlst2faNApJA5CmggMv
qy82QDKZDixvy/0jV4duSSDZBgvoLMnoE3J4XhNYWPdUtAMIJ6oNs0z/Wl5q+rnZ
WXBvSQPO9JptOSjQEFvMsIb44r8NoQTLsq9z1k7X/EUqpTuRhmNtmHwUdwhb3B22
jrdAxoJRA4hW9DOQH3IY0t0bkvRrhc4C0gbWTJPKOvTc8ghkCarpZ45D8qDTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUygdT1mqwP1lIPbMjeV7RwoDexT0wHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMxMzgzMTJlMzIzMjM1MmUzMTMxMzIy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMyMzQzODM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEteFw
MA0GCSqGSIb3DQEBCwUAA4IBAQBbtgJmUVTLrlAeZiQtIhqno6s6iYfYRy8ob+nV
T9LSQRIp0G0rkLCsp40MZymgu9bYlxFejgv0Qw2nLmLnT8YF5XwZPHDSu6l8v7TT
ZC2HkGUiFP7ydndWuYncfQPVqFijMKJzlNtE1Pwbmat+AMTWsUSOkDNYITKVx/Qt
ycz9GENW6p2iZtwIdJ6ldPXjO04aAmOmKscaUSpGJaLZN6C3746pNFiQK6yoY8/z
NL2Zb2x6nj8RsN7fdr1q625Ox9F27dJzxTDL+B9SGGCddnXRyC67zWo6+k/lnOca
K1ulV4WJ+eYX91wQMPLJJGa00fxUAWii8gPIoO+e3GZrW5xw
-----END CERTIFICATE-----