Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32332d3233203d3e203532333639.roa
File:                     3137392e34322e3138342e302f32332d3233203d3e203532333639.roa (raw, json)
Hash identifier:          QnyR8LiVZUzZ43E7hZWWFGzFqeAAxx2pik1wPv43OiQ=
Subject key identifier:   4D:B5:9E:4D:F8:6F:83:4D:8E:A1:C4:CA:E2:2F:B1:AC:98:86:99:A0
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       250C88EB0C258B41B5C9D89FE240A617F8F17B93
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32332d3233203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:08 +0000
ROA not before:           Sun 02 Mar 2025 04:06:08 +0000
ROA not after:            Sun 01 Mar 2026 04:11:08 +0000
asID:                     52369
IP address blocks:        179.42.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0c:88:eb:0c:25:8b:41:b5:c9:d8:9f:e2:40:a6:17:f8:f1:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:08 2025 GMT
            Not After : Mar  1 04:11:08 2026 GMT
        Subject: CN=4DB59E4DF86F834D8EA1C4CAE22FB1AC988699A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c9:1e:ba:23:ff:d1:98:c6:99:f6:55:7b:dc:
                    44:be:e2:c7:dd:12:61:bf:3d:13:cd:a7:ff:8b:87:
                    c5:56:7c:90:f4:0c:3f:4c:85:67:b8:de:54:cb:5f:
                    fb:74:85:53:0e:dc:11:38:03:04:a0:8a:b7:56:a2:
                    cf:f1:c1:55:8e:d2:e1:4e:69:86:94:13:34:d6:8f:
                    5d:84:4f:74:4a:b0:da:08:a5:62:21:14:99:a6:e8:
                    91:1f:33:99:4d:ac:c2:04:39:3c:9b:78:76:fd:ec:
                    d1:08:fc:de:8f:5a:b6:cf:10:17:73:86:87:e5:fb:
                    73:ab:cc:ab:46:c4:1b:d0:3e:cd:8e:2e:82:26:f7:
                    7a:e8:51:f1:ee:c9:30:98:c4:f9:a1:ca:4e:61:cf:
                    f4:99:74:36:73:97:8b:e7:ce:34:81:4e:5c:f1:dc:
                    1c:1c:e2:1f:77:aa:a6:dd:6d:dc:b3:da:18:2a:62:
                    15:8f:e4:74:6a:7c:ed:ad:df:25:17:97:23:ff:bd:
                    e3:e6:74:03:2c:ec:55:ce:b1:f2:6f:f2:5b:f4:2a:
                    6f:5a:8b:81:46:2f:95:e9:7b:19:5b:2c:fb:dd:a2:
                    e4:00:e6:a6:3b:17:6f:0d:4f:28:74:51:66:91:ce:
                    d2:e2:e0:92:1b:ef:74:3b:11:0a:c7:79:84:d2:5a:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B5:9E:4D:F8:6F:83:4D:8E:A1:C4:CA:E2:2F:B1:AC:98:86:99:A0
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138342e302f32332d3233203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:15:ba:c9:48:cf:a1:9c:2c:83:0a:0b:82:95:67:fd:b4:13:
         f7:fe:44:ae:c9:f9:4b:f1:3c:53:5b:1e:7c:05:16:f6:5a:0f:
         9c:df:73:c4:dd:dc:56:ee:df:5c:9a:a2:1d:cf:2f:54:67:fa:
         87:0f:e0:0c:ba:5b:3b:7f:2a:e5:5e:5f:44:48:55:8c:c0:0a:
         83:9a:b7:ef:5c:3c:13:f0:2e:1e:c4:ce:b4:4c:57:50:3e:09:
         95:16:45:eb:57:2c:8b:aa:91:fb:08:78:c2:b3:eb:69:6a:6f:
         d6:d8:12:11:41:c7:97:8e:d7:30:7b:a4:74:5c:26:78:55:da:
         83:88:0e:59:de:49:29:34:8a:2c:b5:1b:7e:69:f3:fe:69:7b:
         84:1c:c9:07:e6:fb:56:ad:b3:76:49:c6:fb:b4:05:6a:08:9e:
         62:c6:18:98:47:82:2a:b1:85:68:09:d0:3c:98:00:d4:7e:f0:
         3b:14:19:d5:9e:76:de:5f:a2:4b:04:21:e8:ea:fd:62:14:b6:
         06:3f:c4:ea:5e:00:ea:8f:c1:79:37:d7:ce:7b:45:69:dd:3c:
         da:a5:6e:4b:82:9b:5a:1a:1a:3a:64:08:95:28:9d:e7:a3:4a:
         c9:ed:dd:cc:b8:8f:17:c0:4a:d1:86:74:a1:98:0f:23:be:28:
         d0:de:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:17 2025 by rpki-client