Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203136353039.roa
File:                     3137392e302e31342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          XJxGenZ5G8pyceAYRJRVuSRX2+7R6+IFHG/8o8236yw=
Subject key identifier:   56:A7:A9:04:E1:D2:80:F8:31:FB:60:0B:C0:32:CE:3F:13:BE:E5:03
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       39A636DE812FB6B6A27BE129DF326CF149F75B45
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 04 Feb 2025 18:37:10 +0000
ROA not before:           Tue 04 Feb 2025 18:32:10 +0000
ROA not after:            Tue 03 Feb 2026 18:37:10 +0000
asID:                     16509
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a6:36:de:81:2f:b6:b6:a2:7b:e1:29:df:32:6c:f1:49:f7:5b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:10 2025 GMT
            Not After : Feb  3 18:37:10 2026 GMT
        Subject: CN=56A7A904E1D280F831FB600BC032CE3F13BEE503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:b3:10:6d:17:0c:17:06:71:f5:3e:1a:9c:
                    1d:d5:58:5a:0c:0b:c2:02:29:59:ab:4e:b0:69:59:
                    67:20:e1:34:12:e5:6d:64:79:d9:35:24:53:87:72:
                    0a:03:d7:46:34:4c:47:35:a8:d5:b0:f3:5c:77:1e:
                    c5:c5:93:d7:ef:8b:13:7e:00:7c:f3:7a:f5:91:0e:
                    65:ba:d4:05:84:d1:30:7c:7f:f9:a0:4a:03:d3:60:
                    91:d0:21:0a:2e:b1:1e:b7:e2:65:3f:f0:78:e2:fa:
                    f8:d2:82:38:15:49:22:39:b3:52:28:d7:1d:e5:1e:
                    64:35:02:97:aa:7d:bc:fa:19:27:35:7b:9f:d6:f2:
                    b7:bc:77:52:7d:84:5c:fa:34:0f:22:a3:1b:8f:49:
                    6b:0e:f9:d7:d3:c5:cf:1a:c1:f5:50:a7:58:a9:39:
                    43:06:dd:cd:cc:78:bd:94:76:97:d4:16:43:50:42:
                    0f:72:0f:d4:5d:6d:61:53:a0:d1:83:cc:1d:08:4f:
                    3e:89:44:02:0c:42:6e:74:32:ae:41:28:bc:5c:ac:
                    5c:38:3d:4d:a2:2f:b6:f3:f0:34:70:a6:6c:ac:ba:
                    0e:2f:37:32:df:18:d8:c8:a9:2b:4d:ff:57:8a:05:
                    fe:7a:63:8a:0a:31:7b:c5:2c:8c:cf:97:e4:65:6d:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:A9:04:E1:D2:80:F8:31:FB:60:0B:C0:32:CE:3F:13:BE:E5:03
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6b:31:44:c6:bd:f4:02:1a:2a:71:75:42:da:37:9e:3f:20:
         f6:d1:4d:47:19:f0:24:ff:af:33:e0:b8:7f:ea:7c:dd:a3:76:
         22:f7:b4:eb:28:8f:d9:df:c7:90:98:d9:0d:a3:8a:e4:b7:9c:
         99:51:96:fa:5b:47:bc:f6:e9:a7:4b:a3:ca:ac:76:ce:fd:b7:
         73:da:04:44:1b:06:ad:78:5a:81:81:97:59:8e:9c:a8:7d:9e:
         67:b4:5d:89:25:e1:3c:95:6d:27:9d:36:bf:66:37:ff:30:39:
         6b:e8:e0:67:bc:19:85:87:70:38:39:67:c9:fb:ed:42:e1:38:
         18:ff:45:2d:68:81:d3:39:35:96:72:7d:36:7a:3e:60:61:2b:
         a5:fe:02:57:54:e6:76:67:6c:ab:67:ff:0b:6f:75:9f:7e:ec:
         94:3b:a7:6e:30:3a:95:b8:b3:30:6b:41:59:0f:3f:a5:a5:25:
         8c:5f:56:87:fd:54:ea:55:37:17:fc:46:4d:42:2c:4b:92:ef:
         04:9f:3c:cc:d2:81:0a:40:67:94:45:f2:f1:4e:4c:f8:81:85:
         39:02:8a:c8:5b:4e:34:1e:8f:53:f8:b9:a1:77:b8:69:fb:7c:
         3f:0c:43:7a:71:50:3e:e1:26:e5:71:90:a3:7b:43:4e:ae:54:
         f1:49:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:51:53 2025 by rpki-client