Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131382e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131382e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          hIb+RgOzM3m0VmlUC3qfgj/J4V7Z/IO2xyaP9MHynk0=
Subject key identifier:   F1:ED:F1:E5:B4:46:86:84:44:77:F7:FE:86:8A:72:76:CC:33:CD:35
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       0198B61C31DB107628157448668FB5B12BEA748A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131382e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 04 Feb 2025 18:08:19 +0000
ROA not before:           Tue 04 Feb 2025 18:03:19 +0000
ROA not after:            Tue 03 Feb 2026 18:08:19 +0000
asID:                     27823
IP address blocks:        179.43.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:b6:1c:31:db:10:76:28:15:74:48:66:8f:b5:b1:2b:ea:74:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Feb  4 18:03:19 2025 GMT
            Not After : Feb  3 18:08:19 2026 GMT
        Subject: CN=F1EDF1E5B44686844477F7FE868A7276CC33CD35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:87:3f:f4:03:ae:c8:7c:da:8a:07:7a:c9:
                    cb:39:06:8b:5e:db:a2:7f:33:2d:54:08:36:55:1f:
                    6b:eb:7b:94:56:9b:a6:c5:40:00:db:8f:c1:2d:0e:
                    e5:46:54:b7:cd:7b:2a:bd:e3:96:72:11:c0:6d:10:
                    94:ee:87:61:d9:85:f3:59:4f:f7:4a:95:5b:c9:a6:
                    8d:be:61:53:9d:72:25:98:8a:da:2e:23:3b:eb:bf:
                    00:bc:86:3b:ec:5c:17:b8:78:c0:27:1e:b2:85:5b:
                    76:dd:22:1a:4c:80:eb:e9:98:b9:e0:cb:04:6b:e6:
                    a5:89:ab:5e:52:54:36:99:cf:d4:41:c6:dc:95:d9:
                    dd:53:a7:ea:6e:0b:01:d2:3c:2c:c6:90:e3:89:19:
                    f8:25:1f:21:be:ba:77:3d:36:e9:ec:d8:51:62:7b:
                    78:db:83:4c:64:07:73:2e:25:99:c0:74:66:a9:c7:
                    60:e3:69:bf:51:6b:5b:8e:45:c7:d5:eb:68:ac:4c:
                    3b:ac:c5:25:df:46:bb:a5:43:7e:4a:6b:41:10:69:
                    d1:f5:24:ad:e0:29:08:dc:79:d3:13:f5:d3:a6:4a:
                    44:dc:1f:4d:7f:59:e5:2b:7a:c4:2d:d8:d6:04:72:
                    0c:19:39:4c:98:f4:7d:6d:08:41:36:7b:19:c1:90:
                    c7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:ED:F1:E5:B4:46:86:84:44:77:F7:FE:86:8A:72:76:CC:33:CD:35
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131382e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:90:ec:47:f8:22:ec:f2:18:02:a7:cb:f1:99:5a:0c:17:a1:
         ae:60:15:8c:a1:ef:00:3f:7d:35:a0:9a:4b:5b:eb:57:17:b1:
         40:be:71:53:f1:01:c8:7d:48:f3:d5:c0:66:6e:14:89:6d:46:
         89:76:1f:f1:8c:35:83:6f:2e:69:04:52:7b:85:01:b7:18:5d:
         fd:d8:d4:dc:66:5e:a4:fa:11:17:3f:29:0e:4f:28:78:b0:24:
         e4:82:0a:26:54:13:3a:45:40:50:2f:de:7c:79:40:12:e9:0e:
         26:50:d4:2a:07:a2:c2:6b:9c:2f:dc:1f:f3:60:5e:51:08:f9:
         77:8d:28:0c:08:09:93:4a:2a:e1:cd:3c:21:72:70:69:9d:54:
         87:c5:69:53:4f:7b:90:cf:f3:e1:31:59:d5:d5:c2:78:85:a7:
         8f:2e:8b:f2:5e:33:da:8d:4f:96:47:57:74:ee:65:a2:4b:9c:
         03:8c:9f:bb:60:21:6d:e0:a5:f0:e7:e9:6f:9a:3a:d7:52:1a:
         da:cc:d8:76:29:a5:2e:04:6a:1b:44:ff:30:1c:b4:a2:61:97:
         38:6b:f8:b4:96:e0:04:74:39:9a:96:36:26:a6:f6:6b:d1:5d:
         96:11:78:ae:60:a7:4b:f9:4a:cd:b5:48:5c:f9:0a:a7:88:4e:
         06:6f:e5:3f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAZi2HDHbEHYoFXRIZo+1sSvqdIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVDMzFEQ0E0MDYyRkJBOEZGNDE3NUM1MThFRjIyNDZD
RjU3MEQ4MDAeFw0yNTAyMDQxODAzMTlaFw0yNjAyMDMxODA4MTlaMDMxMTAvBgNV
BAMTKEYxRURGMUU1QjQ0Njg2ODQ0NDc3RjdGRTg2OEE3Mjc2Q0MzM0NEMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYwYc/9AOuyHzaigd6ycs5Bote
26J/My1UCDZVH2vre5RWm6bFQADbj8EtDuVGVLfNeyq945ZyEcBtEJTuh2HZhfNZ
T/dKlVvJpo2+YVOdciWYitouIzvrvwC8hjvsXBe4eMAnHrKFW3bdIhpMgOvpmLng
ywRr5qWJq15SVDaZz9RBxtyV2d1Tp+puCwHSPCzGkOOJGfglHyG+unc9Nuns2FFi
e3jbg0xkB3MuJZnAdGapx2Djab9Ra1uORcfV62isTDusxSXfRrulQ35Ka0EQadH1
JK3gKQjcedMT9dOmSkTcH01/WeUresQt2NYEcgwZOUyY9H1tCEE2exnBkMdFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8e3x5bRGhoREd/f+hopydswzzTUwHwYDVR0j
BBgwFoAUpcMdykBi+6j/QXXFGO8iRs9XDYAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkIxQjU3QjE5Qjc0M0MxRTBCNjdEQzUwMjBFNzY5RkY2
OTdENUQ4RkU2NzY0NTQ0M0MwMTcwQTU5QTYyOEY0LzAvQTVDMzFEQ0E0MDYyRkJB
OEZGNDE3NUM1MThFRjIyNDZDRjU3MEQ4MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNUMzMURDQTQwNjJGQkE4RkY0
MTc1QzUxOEVGMjI0NkNGNTcwRDgwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZCMUI1N0IxOUI3NDNDMUUwQjY3REM1MDIwRTc2OUZGNjk3RDVEOEZF
Njc2NDU0NDNDMDE3MEE1OUE2MjhGNC8wLzMxMzczOTJlMzQzMzJlMzEzMTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMrdjAN
BgkqhkiG9w0BAQsFAAOCAQEAwpDsR/gi7PIYAqfL8ZlaDBehrmAVjKHvAD99NaCa
S1vrVxexQL5xU/EByH1I89XAZm4UiW1GiXYf8Yw1g28uaQRSe4UBtxhd/djU3GZe
pPoRFz8pDk8oeLAk5IIKJlQTOkVAUC/efHlAEukOJlDUKgeiwmucL9wf82BeUQj5
d40oDAgJk0oq4c08IXJwaZ1Uh8VpU097kM/z4TFZ1dXCeIWnjy6L8l4z2o1PlkdX
dO5lokucA4yfu2AhbeCl8Ofpb5o611Ia2szYdimlLgRqG0T/MBy0omGXOGv4tJbg
BHQ5mpY2Jqb2a9FdlhF4rmCnS/lKzbVIXPkKp4hOBm/lPw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:14 2025 by rpki-client