Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3137392e35312e3234372e302f32342d3234203d3e203532323739.roa
File:                     3137392e35312e3234372e302f32342d3234203d3e203532323739.roa (raw, json)
Hash identifier:          EGxk4rlvWRcIffaoFqmaToN758mft/E6iYsyuz45phA=
Subject key identifier:   5E:41:27:B4:28:17:6B:D0:BF:C1:50:42:D9:B4:09:4B:F9:48:57:AD
Certificate issuer:       /CN=121BB05553FD8170C35FA9B8265458699CAC81AD
Certificate serial:       3285C5930B2E74127F6B1861C6C8DF0FDD09AA42
Authority key identifier: 12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3137392e35312e3234372e302f32342d3234203d3e203532323739.roa
Signing time:             Tue 04 Feb 2025 20:01:32 +0000
ROA not before:           Tue 04 Feb 2025 19:56:32 +0000
ROA not after:            Tue 03 Feb 2026 20:01:32 +0000
asID:                     52279
IP address blocks:        179.51.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:85:c5:93:0b:2e:74:12:7f:6b:18:61:c6:c8:df:0f:dd:09:aa:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121BB05553FD8170C35FA9B8265458699CAC81AD
        Validity
            Not Before: Feb  4 19:56:32 2025 GMT
            Not After : Feb  3 20:01:32 2026 GMT
        Subject: CN=5E4127B428176BD0BFC15042D9B4094BF94857AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:a1:8b:90:fd:cf:00:b4:75:42:8a:91:3b:
                    2f:f8:72:e7:2b:47:91:50:e8:38:15:27:0a:96:38:
                    77:9c:6b:dd:a3:3a:23:9e:d6:e2:ba:fb:a6:8b:ff:
                    02:22:24:8f:cf:c1:5f:a9:77:43:fc:8a:fc:74:cd:
                    a7:70:7a:de:81:2c:e6:49:7b:86:97:00:e3:f2:38:
                    5c:1d:80:17:23:a0:b8:71:de:cb:a6:a5:1a:ac:ce:
                    fa:a3:ab:ab:78:06:ac:0b:91:79:a0:a5:8f:cb:d3:
                    1f:8a:8d:b1:21:68:c2:2d:23:e0:f5:24:8d:95:9c:
                    5c:70:64:e7:26:d9:9b:79:b4:bf:a4:6f:d4:17:0e:
                    d3:3f:17:73:96:d1:71:5f:10:c6:7d:a2:6d:98:46:
                    ed:ae:e7:a0:26:2b:3e:c9:8a:84:34:ad:07:16:d1:
                    a9:ff:2d:97:53:10:2c:65:6c:32:a6:da:64:93:0c:
                    43:7a:fa:45:e8:0c:4f:09:b5:d6:01:31:4b:dd:38:
                    6c:ee:5c:a5:8d:a8:86:2d:e1:5d:3e:94:52:6d:f9:
                    0b:25:fb:9e:db:c1:99:2f:ef:ce:f9:33:cb:22:be:
                    24:ea:f0:1a:48:5a:c8:55:2d:c2:71:0f:09:39:c9:
                    88:43:c6:4e:3b:29:1e:d5:33:5b:7e:b2:e1:ea:e3:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:41:27:B4:28:17:6B:D0:BF:C1:50:42:D9:B4:09:4B:F9:48:57:AD
            X509v3 Authority Key Identifier:
                keyid:12:1B:B0:55:53:FD:81:70:C3:5F:A9:B8:26:54:58:69:9C:AC:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/121BB05553FD8170C35FA9B8265458699CAC81AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/121BB05553FD8170C35FA9B8265458699CAC81AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12EBE38A9E3CEED0508257A3AA4759B384258D8C2D38C392CB925ED7B74D592D/0/3137392e35312e3234372e302f32342d3234203d3e203532323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:bf:6b:46:58:62:3b:7a:09:70:8e:28:18:95:6b:b7:17:f7:
         f9:e1:2e:02:2e:85:92:ce:9c:8f:58:34:b7:21:95:d6:a8:ec:
         38:18:eb:61:42:1d:9d:ac:21:b1:f9:c5:64:5f:b2:c9:2c:7c:
         bb:00:4d:98:0b:97:9a:e3:d5:dd:7b:8b:0d:92:3e:f7:2e:6b:
         b6:3b:20:1b:57:cc:0c:51:a2:a5:5d:08:7c:8e:ac:84:09:97:
         b6:dd:3a:7d:8b:6e:0d:58:03:38:c7:aa:77:1d:2d:bd:5d:a6:
         0b:69:16:38:ee:5e:c0:3b:48:26:f0:e3:00:20:c4:3d:ad:ed:
         ba:23:f8:d3:be:56:ba:7c:0b:d8:2b:a2:71:44:c9:80:07:57:
         03:2d:f2:c4:3d:7d:3f:54:bf:25:b3:49:97:65:ae:6d:ff:5a:
         dd:51:0b:0e:83:b6:a9:64:30:ef:0f:49:3c:22:a8:67:69:5a:
         f4:3f:1b:58:e1:25:5c:fc:3e:67:fb:06:ad:5e:6b:b1:7d:e3:
         a6:95:74:e1:f0:39:0e:6b:c7:5b:aa:0d:e4:27:da:62:a5:2b:
         f1:c8:49:02:3f:cf:e3:1f:a6:55:0a:0f:09:ae:fe:93:bb:e8:
         f6:d5:0a:f3:ac:f8:95:0d:90:d8:e0:3b:da:52:0f:7a:07:d4:
         3c:ed:b4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:11 2025 by rpki-client