Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131362e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          YXtrTAp4VfueEFda0VWxbgnMm63i5HsHwP+MWVr0oUs=
Subject key identifier:   3C:F5:05:B2:32:C7:89:6F:C9:DF:B6:FD:8E:43:98:6B:34:94:20:DF
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       7DAA45D6878CF0B6C095AB0000299FFEF30F96F2
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 04 Feb 2025 18:08:11 +0000
ROA not before:           Tue 04 Feb 2025 18:03:11 +0000
ROA not after:            Tue 03 Feb 2026 18:08:11 +0000
asID:                     27823
IP address blocks:        179.43.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:aa:45:d6:87:8c:f0:b6:c0:95:ab:00:00:29:9f:fe:f3:0f:96:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Feb  4 18:03:11 2025 GMT
            Not After : Feb  3 18:08:11 2026 GMT
        Subject: CN=3CF505B232C7896FC9DFB6FD8E43986B349420DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:dc:63:48:b5:8d:4b:14:56:8b:ae:68:01:
                    eb:32:15:d6:8a:f7:83:e9:24:da:20:fd:66:0e:15:
                    b7:a2:34:29:92:c7:0f:7a:7a:e8:81:45:55:f1:89:
                    38:46:d9:4a:0e:17:7b:aa:47:b1:e6:f3:45:58:02:
                    f9:12:26:5f:69:26:76:67:aa:a0:2f:87:3a:cc:24:
                    0a:5d:90:ad:49:48:6b:b6:06:67:7f:25:df:91:da:
                    23:66:78:c0:c4:44:e0:b8:f8:22:e0:89:2f:8d:0f:
                    0c:7d:05:0d:5b:89:7d:f8:f5:57:17:49:f5:50:a8:
                    fb:b0:d8:c2:0e:63:8b:d0:6d:31:8e:c3:b7:f6:e6:
                    9c:f4:75:9e:7f:ea:7b:fe:be:01:c1:57:69:f7:e7:
                    bf:66:7d:f7:c8:70:21:dc:65:20:6f:ad:b2:f6:fc:
                    c0:53:34:41:70:f5:20:a6:15:12:94:5f:bc:fc:49:
                    f3:58:8f:97:bc:52:a6:cf:cb:30:eb:10:14:ec:31:
                    15:07:3f:be:de:6e:ca:63:6e:eb:9b:11:1d:eb:20:
                    c1:4f:6d:78:39:dc:00:98:15:17:df:40:86:25:21:
                    d0:90:b9:7a:17:27:5e:37:76:00:64:ff:a7:b3:ba:
                    27:2d:58:9a:fd:3b:af:1d:0e:53:d0:74:51:5b:63:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F5:05:B2:32:C7:89:6F:C9:DF:B6:FD:8E:43:98:6B:34:94:20:DF
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:73:a1:e4:37:75:f3:66:ef:6c:da:7d:c1:ef:1d:ed:fc:6b:
         9e:9c:be:5c:41:f2:cc:95:4a:38:25:80:a9:31:f9:9f:71:d4:
         f2:1b:58:42:39:d7:04:0f:a3:e5:c4:6a:2d:01:75:71:2d:22:
         32:7b:0d:25:26:40:74:a4:c8:3d:8f:2d:f2:ee:df:36:be:fc:
         5b:9f:11:77:db:32:c9:22:28:64:c7:59:ff:71:bf:8d:91:93:
         c0:5b:cc:de:0e:e7:40:ec:63:fa:fc:73:af:9c:be:3d:cc:33:
         95:35:eb:7a:be:48:ef:0e:65:ad:7e:ab:67:bf:66:73:f0:23:
         32:19:dd:f9:9d:a1:36:6c:63:7d:c0:e4:97:8f:6b:83:1f:6d:
         ed:9d:af:23:eb:0e:58:94:5c:59:45:ba:c4:df:87:bb:c8:bf:
         09:c0:f0:23:61:94:f8:bf:10:ea:ac:08:e2:07:b6:07:38:c1:
         fd:6e:e1:64:96:64:30:b7:f1:9d:73:eb:8d:30:57:a0:4a:69:
         60:7f:07:b5:8a:63:8e:be:8c:5f:d7:53:e0:19:3d:d2:d9:9a:
         8b:22:35:be:9a:2e:a9:f4:6c:27:1a:06:7e:5a:f4:dd:f1:ef:
         6c:b3:cc:9d:36:37:2c:e8:67:c5:29:13:0b:32:c2:ae:b3:b9:
         53:36:f2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:13 2025 by rpki-client