Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138332e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138332e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          UWLTJFsJyB4HKSPjh4UnjAy58Oda8dGQyYJ72hrtnAo=
Subject key identifier:   4D:E7:7A:1B:BD:66:FA:64:33:DA:9A:16:D5:32:4D:48:F5:65:C1:F5
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       34D061FB7EA8AC7A34AAE0F3CBB8CAC8F631EBA2
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138332e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:12 +0000
ROA not before:           Sun 02 Mar 2025 04:06:12 +0000
ROA not after:            Sun 01 Mar 2026 04:11:12 +0000
asID:                     52369
IP address blocks:        179.42.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d0:61:fb:7e:a8:ac:7a:34:aa:e0:f3:cb:b8:ca:c8:f6:31:eb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:12 2025 GMT
            Not After : Mar  1 04:11:12 2026 GMT
        Subject: CN=4DE77A1BBD66FA6433DA9A16D5324D48F565C1F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:fb:e6:10:a8:fb:f5:0c:fe:c3:c4:7a:f8:
                    14:12:5f:1f:dd:4e:fd:62:93:ca:ba:23:1e:9f:b6:
                    2b:cb:c3:e3:fd:91:32:dd:29:90:58:61:14:42:2c:
                    88:67:8f:d8:ed:20:27:d7:39:e5:20:06:62:1c:c0:
                    6d:60:fb:02:4a:39:13:88:5b:c9:0d:1a:84:ec:ed:
                    53:61:72:67:cb:50:a1:1c:fb:bd:ba:9e:67:c6:3b:
                    6a:f4:26:0f:67:b7:9d:e4:3a:54:06:95:9e:dc:b5:
                    39:c9:3c:b0:f6:64:c6:49:98:b4:9b:49:ea:2f:67:
                    8a:50:b6:d4:a1:b9:fc:6a:bd:38:9c:55:f3:a2:16:
                    b1:24:38:ac:3c:6c:8c:9c:4b:12:55:d2:90:c5:9e:
                    36:e6:fb:f6:b5:dd:2d:32:81:6e:66:40:9b:e3:a0:
                    29:31:7f:05:f0:a9:1d:1a:44:88:fb:de:a1:fb:61:
                    69:5e:8c:f5:dd:82:9b:ca:f5:1e:d0:53:ed:bb:06:
                    97:fe:91:e0:b0:49:fa:b8:72:66:9e:1b:47:c2:24:
                    cb:a8:78:80:4c:07:69:93:10:e2:6f:0d:6c:95:c6:
                    f3:00:95:72:b9:7f:7a:df:99:ae:97:39:35:63:e6:
                    f1:d4:12:be:d8:63:02:50:28:3b:ba:6d:71:ca:be:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E7:7A:1B:BD:66:FA:64:33:DA:9A:16:D5:32:4D:48:F5:65:C1:F5
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138332e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:75:fb:cb:db:07:9e:7e:89:cd:68:ed:fb:0e:d9:cc:f0:
         ab:22:03:ac:db:a9:51:fb:dd:d5:1a:a0:bc:d6:7d:d7:52:1b:
         0f:dd:ca:3a:60:d3:78:98:44:65:bc:10:36:d6:43:db:be:19:
         48:ae:20:e4:f9:e2:f1:3e:60:a4:9e:84:2e:62:09:2b:69:7f:
         86:78:53:06:b1:38:d5:10:93:bd:3f:e0:46:5d:7e:32:75:87:
         3f:7b:39:8f:7a:9b:04:52:44:c9:eb:c3:9b:57:85:81:c5:79:
         0a:75:b6:40:c6:bb:c0:cc:64:21:62:3b:c0:c2:9f:24:05:d2:
         9d:f3:6e:60:24:9a:fe:21:ed:18:03:82:7a:8b:12:d0:14:b6:
         1a:fd:16:52:25:24:4e:70:70:ce:70:b1:42:4c:23:ed:67:1a:
         f7:5e:98:ed:50:13:a4:69:6a:99:d7:6a:72:af:3f:42:dd:3c:
         8f:ba:1b:e7:db:e7:ab:81:52:e1:ef:e3:76:3d:03:da:75:b7:
         87:be:bc:5b:23:8f:2f:72:49:87:e1:52:61:29:99:c7:17:16:
         b8:69:07:fa:ad:c6:31:bd:91:a8:32:cc:4c:f5:f6:7b:67:73:
         8a:f9:21:b4:23:a7:46:5d:94:49:63:f5:02:67:f8:26:40:ea:
         b4:af:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:27 2025 by rpki-client