Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131342e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131342e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          eqwLqH4+wI/A9qNZgLUbREAsC92CZmesb7ebQbxU2Fo=
Subject key identifier:   93:28:8C:C8:E6:B5:05:FB:37:79:58:19:33:8C:71:93:0C:1B:D8:47
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       5F0084DC406683E02B0DDEB7FB03F57EE5CF52D9
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131342e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 04 Feb 2025 18:08:21 +0000
ROA not before:           Tue 04 Feb 2025 18:03:21 +0000
ROA not after:            Tue 03 Feb 2026 18:08:21 +0000
asID:                     27823
IP address blocks:        179.43.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:00:84:dc:40:66:83:e0:2b:0d:de:b7:fb:03:f5:7e:e5:cf:52:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Feb  4 18:03:21 2025 GMT
            Not After : Feb  3 18:08:21 2026 GMT
        Subject: CN=93288CC8E6B505FB37795819338C71930C1BD847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:f7:a1:fc:c7:9d:df:d7:00:ee:bc:8d:81:
                    3c:c0:88:f9:87:63:c9:cc:1d:d2:e2:73:38:1d:53:
                    bc:2e:29:df:ea:9e:10:ed:0a:3a:a9:14:81:d0:67:
                    49:34:35:51:8d:40:f3:8e:91:ca:ba:60:ff:85:19:
                    95:8b:08:37:f2:27:c2:90:9c:40:c7:ba:80:d7:ae:
                    d9:a9:dc:5e:c4:22:78:71:1d:4b:6e:f1:c2:be:7d:
                    68:01:d3:a6:53:d0:0c:63:57:8e:9f:eb:67:8d:72:
                    78:3e:12:ca:c2:62:6d:d3:c0:c4:44:3d:fd:ce:04:
                    04:60:1d:aa:ad:a4:3a:91:fb:c5:b2:fa:a3:90:07:
                    d8:87:be:ff:b0:a2:32:5b:46:d6:bf:0b:d8:0c:35:
                    7f:45:56:39:9e:79:76:c7:f6:ce:18:89:1c:f5:c8:
                    2d:2f:b2:5a:f3:a0:23:ae:09:f0:c9:8b:79:e2:72:
                    33:33:8c:bd:dc:e2:ec:66:60:6e:9f:e2:bb:4b:da:
                    d1:5d:7c:36:7a:dc:af:d0:fc:c5:e7:b4:f6:01:41:
                    f1:5a:53:15:4b:12:a7:23:11:fe:cf:9e:a9:90:de:
                    13:0d:f3:b4:88:12:3a:5d:87:ff:d8:fc:e6:07:ea:
                    65:b7:9f:ec:bd:e9:fd:38:bf:fc:de:43:63:a5:4c:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:8C:C8:E6:B5:05:FB:37:79:58:19:33:8C:71:93:0C:1B:D8:47
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131342e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:11:42:bb:5d:e7:e6:e1:0e:d6:01:69:31:02:23:1e:12:fb:
         ba:82:20:40:e1:24:98:3e:d1:53:e8:a9:5f:f5:1a:29:df:fb:
         b8:b2:05:48:a4:5d:cd:1f:aa:39:08:1c:64:e2:45:0f:14:1f:
         02:bd:bf:2b:9e:dd:82:86:93:d3:44:7f:b0:10:ad:13:83:90:
         63:51:3d:50:2a:bb:f5:7c:7c:c4:83:73:31:74:27:f0:53:5d:
         a2:66:5e:f8:4f:39:4b:5a:be:78:ea:19:2c:bf:1f:8b:8d:f0:
         cb:57:49:80:00:c7:b1:aa:b8:9b:79:75:81:4f:01:c7:27:90:
         61:a4:3f:30:6d:17:43:da:23:0f:39:80:78:de:59:17:d7:5c:
         0f:b6:6b:11:2e:94:bd:e1:f3:ab:d0:29:aa:54:31:60:e9:9f:
         31:81:fb:94:0f:f3:82:32:ce:65:49:ad:23:60:da:ac:e2:06:
         6b:12:7e:e8:5f:99:e8:f3:6e:6a:ae:1a:d5:62:83:56:8b:54:
         df:c7:00:66:18:a2:fb:d9:b8:8e:a3:df:70:f4:d1:1f:4b:3f:
         49:92:46:dd:aa:01:ca:48:df:79:a8:54:62:c1:7b:18:d0:3b:
         2f:d2:a0:e6:ff:e8:77:6a:c4:43:3d:e4:63:76:73:5f:88:fa:
         ba:99:72:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:51:12 2025 by rpki-client