Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32322d3232203d3e203532333639.roa
File:                     3137392e34322e3138342e302f32322d3232203d3e203532333639.roa (raw, json)
Hash identifier:          achsP3uhfnLhA7/jRW/xKfUG86v6ukRO6MPnGxIjUFo=
Subject key identifier:   48:3C:61:B0:1A:76:6D:5E:72:4E:3B:99:E8:2F:BD:E9:2E:8D:46:85
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       04D247A25221231DCB0DE1F4AE4201D629DC9899
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32322d3232203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:09 +0000
ROA not before:           Sun 02 Mar 2025 04:06:09 +0000
ROA not after:            Sun 01 Mar 2026 04:11:09 +0000
asID:                     52369
IP address blocks:        179.42.184.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:47:a2:52:21:23:1d:cb:0d:e1:f4:ae:42:01:d6:29:dc:98:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:09 2025 GMT
            Not After : Mar  1 04:11:09 2026 GMT
        Subject: CN=483C61B01A766D5E724E3B99E82FBDE92E8D4685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:56:aa:85:c8:42:37:67:e4:e3:f2:58:f9:
                    9f:83:08:84:76:c4:8c:a1:50:af:51:01:03:fd:07:
                    e8:ea:ae:1c:5f:0f:c3:da:0d:bd:04:82:39:9e:78:
                    83:13:43:f0:f3:46:e5:8d:03:42:9c:d0:fc:f2:ff:
                    3b:ab:f4:5f:89:f1:fc:ca:bd:49:ca:69:c1:eb:4a:
                    b2:13:08:12:52:9f:e8:4d:f3:80:c4:f4:b8:c4:f5:
                    18:11:25:3a:40:01:4d:ec:81:29:32:9f:cb:38:08:
                    87:81:bc:6e:31:ff:c4:6b:9c:40:76:c2:b9:b9:e2:
                    ea:e4:a6:f3:15:b5:b4:6a:21:38:b1:c4:b0:6a:47:
                    af:61:1a:5b:05:b0:72:89:a7:e9:e1:c4:c6:e3:fb:
                    c3:34:a1:fc:01:28:cb:de:ab:40:a6:53:8c:ad:16:
                    a1:c2:2c:6d:23:00:25:58:96:bb:9c:5a:04:0a:33:
                    f4:dc:38:e6:13:77:c8:0b:0d:64:1d:1e:54:bb:15:
                    8a:48:22:d7:1d:57:32:d7:0e:f9:02:f7:70:89:83:
                    c5:b0:c8:f1:0a:21:9c:ad:c1:fc:05:2d:5b:e0:01:
                    f3:36:c2:21:f6:af:f8:f5:db:9a:00:7c:1b:31:f4:
                    53:28:5f:ee:3a:bc:18:69:ce:1c:af:62:26:4b:8c:
                    57:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3C:61:B0:1A:76:6D:5E:72:4E:3B:99:E8:2F:BD:E9:2E:8D:46:85
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32322d3232203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:83:20:07:f1:78:77:f8:2e:06:a1:ad:33:84:7e:86:bc:1a:
         5d:ce:70:cf:94:61:71:78:44:bd:1a:5d:d2:0e:97:c4:40:26:
         53:a9:99:b5:69:96:db:08:38:85:b2:68:0a:6e:97:eb:5c:95:
         7c:db:5f:ac:a4:f4:8d:92:b3:ff:77:02:fb:03:da:27:b1:ca:
         19:c8:2f:a6:fb:02:59:85:58:e8:cc:15:59:b9:95:c1:1f:2d:
         d1:a6:86:fe:d9:20:b3:7d:01:11:83:fc:e7:88:2e:51:d1:f7:
         24:a8:21:b4:e2:c3:cf:17:d4:57:86:d2:23:fb:eb:57:97:c4:
         94:a7:ff:0c:38:bf:67:ba:ec:77:94:37:cc:91:e2:00:dd:46:
         f9:eb:d8:0c:f2:4d:56:fa:c0:99:d0:6c:f5:6c:ae:be:78:34:
         5b:c1:a2:34:88:35:2b:da:93:55:ec:a1:e7:17:46:0c:1d:b7:
         fb:3e:8a:1f:d0:ed:28:15:eb:75:ad:18:61:74:25:92:d0:66:
         0b:d9:da:33:25:17:f6:9d:c3:ac:bf:cb:ee:12:20:37:06:96:
         d7:60:f2:aa:3b:78:1e:1b:5f:6d:b1:66:37:c7:83:80:a8:72:
         90:25:17:a7:3c:ec:3c:f6:a6:68:ef:2d:24:2f:36:10:45:f9:
         33:2e:9a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:28 2025 by rpki-client