Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3137392e36302e3136382e302f32312d3234203d3e203134353933.roa
File:                     3137392e36302e3136382e302f32312d3234203d3e203134353933.roa (raw, json)
Hash identifier:          Pp6biO/4VTZm3KwmUoJYIufJD7qvXv57W6jWBnLnP/A=
Subject key identifier:   B8:8B:85:08:C8:91:6B:0B:B5:36:5B:7D:EC:EF:CA:75:9A:58:79:4F
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       74BD7110197F1CF16A960000FEE848E8C5DE6BB4
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3137392e36302e3136382e302f32312d3234203d3e203134353933.roa
Signing time:             Tue 04 Feb 2025 18:14:01 +0000
ROA not before:           Tue 04 Feb 2025 18:09:01 +0000
ROA not after:            Tue 03 Feb 2026 18:14:01 +0000
asID:                     14593
IP address blocks:        179.60.168.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bd:71:10:19:7f:1c:f1:6a:96:00:00:fe:e8:48:e8:c5:de:6b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Feb  4 18:09:01 2025 GMT
            Not After : Feb  3 18:14:01 2026 GMT
        Subject: CN=B88B8508C8916B0BB5365B7DECEFCA759A58794F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c3:bb:0f:6d:1f:fa:8e:b1:21:c0:ce:74:fa:
                    d9:81:06:71:3f:dd:b4:dd:94:8c:f3:5f:cb:24:15:
                    fe:c8:03:6e:86:09:22:48:f1:51:53:f8:af:aa:d8:
                    82:d2:8b:03:de:2f:32:82:57:25:b3:b6:13:e3:a2:
                    6c:4f:14:96:58:f4:23:a1:e6:13:49:7d:ef:66:d1:
                    48:21:70:e1:b7:cf:74:d3:89:9f:58:9d:3c:31:56:
                    b9:fb:57:ff:b5:5a:97:ef:15:33:e7:b9:4a:8f:42:
                    dd:3c:5b:19:a3:e1:fa:54:82:c0:3e:e7:d3:88:51:
                    96:40:a4:c9:04:a3:b6:ac:6b:bf:4d:b4:ac:2b:ad:
                    79:ab:0d:18:0e:ce:09:e2:1e:f5:58:3a:6f:32:56:
                    e5:2a:af:91:4d:e0:c2:69:e8:76:8e:d9:c4:b4:c8:
                    a6:29:9e:e4:f3:af:65:30:5d:c6:0e:53:f9:3e:8d:
                    ca:3c:d3:77:c4:b1:4b:c9:de:d4:dd:e0:05:d7:a0:
                    6e:d7:18:f4:5d:4f:99:0a:35:7c:17:09:01:ec:02:
                    97:59:20:bc:c8:97:03:17:5e:ac:74:c0:d2:56:e4:
                    c8:26:d6:d1:ad:5c:78:77:b8:2b:cd:48:cf:78:21:
                    f4:0c:73:00:07:6d:af:64:f6:31:5d:c2:65:78:92:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:85:08:C8:91:6B:0B:B5:36:5B:7D:EC:EF:CA:75:9A:58:79:4F
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3137392e36302e3136382e302f32312d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:71:a6:5a:65:8e:bd:04:b0:aa:9f:e0:c7:01:4b:3b:58:4d:
         5b:7c:b2:53:fa:cd:e3:8a:d1:43:8a:ca:83:6c:95:9b:e1:43:
         1d:fe:c0:71:7f:fe:e4:7d:5e:87:f9:9d:2d:d8:b7:b6:f2:a4:
         be:ff:4f:ae:f4:29:06:4c:d7:00:41:77:10:65:7b:d1:5c:a7:
         ed:5f:fd:92:86:98:5e:0b:fb:3d:90:dc:c7:d6:01:66:14:b0:
         48:21:a4:e6:fb:40:0f:bd:ce:73:2a:2e:82:a0:e9:a6:1b:3a:
         79:8e:86:05:ec:0e:88:7a:a3:49:d6:14:25:10:5b:7d:70:9e:
         cf:06:ea:5e:fd:5d:fc:a3:b6:87:59:6a:4a:eb:47:25:6f:22:
         0a:ae:bd:c8:cb:9b:cc:98:52:68:42:3d:cf:60:bf:6d:e3:b6:
         ea:5d:4e:47:34:aa:85:c8:ee:51:a8:b6:8d:fe:36:0d:39:d2:
         a3:e8:b4:71:86:7e:f5:5c:48:a6:d3:de:35:03:a5:90:26:4c:
         94:df:b4:d6:b4:43:5f:1a:00:a2:63:c1:50:fc:e5:6c:03:61:
         bc:82:5f:0b:ee:5a:88:a8:0a:00:68:a3:d8:6c:01:78:4a:b8:
         54:b0:23:0b:3a:a0:cc:08:a1:4e:3f:28:8d:c9:52:fd:77:3d:
         02:cd:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:59 2025 by rpki-client