Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32322d3232203d3e20323730303831.roa
File:                     3137392e34392e3135362e302f32322d3232203d3e20323730303831.roa (raw, json)
Hash identifier:          FnWsjmKDRSAqt5CIJ7t1JhvBSrcy4Z/ULrWxif+vy8Q=
Subject key identifier:   72:65:06:A3:48:89:D7:17:68:C4:D2:29:C2:3B:A9:65:62:2D:81:37
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       16757BCCB11F1CAFC468C5DB59D744FF5E079001
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32322d3232203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:34 +0000
ROA not before:           Tue 04 Feb 2025 18:35:34 +0000
ROA not after:            Tue 03 Feb 2026 18:40:34 +0000
asID:                     270081
IP address blocks:        179.49.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:75:7b:cc:b1:1f:1c:af:c4:68:c5:db:59:d7:44:ff:5e:07:90:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:34 2025 GMT
            Not After : Feb  3 18:40:34 2026 GMT
        Subject: CN=726506A34889D71768C4D229C23BA965622D8137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b3:8f:a3:80:28:3b:60:87:4f:5d:c2:aa:a2:
                    dd:4c:3f:22:1e:4e:1d:bd:14:44:f1:31:8d:42:e9:
                    a0:e5:23:f0:31:d1:cf:06:f8:fe:af:f7:19:04:ad:
                    34:f9:f0:09:44:c0:97:c3:08:41:13:a9:4a:dd:4e:
                    e1:07:41:d3:ab:19:f9:b5:90:0f:c9:54:46:59:ad:
                    37:92:ec:25:57:91:62:e4:ba:4f:69:c6:45:d8:a7:
                    d8:6e:c5:57:1c:ad:7f:fb:17:13:69:21:c8:25:e5:
                    03:1a:43:f2:70:22:5d:69:84:c9:89:c2:9b:47:c8:
                    56:3b:eb:59:8c:b7:e2:31:c6:f9:26:b3:6b:7e:c0:
                    22:8f:e1:86:06:3a:f7:24:63:06:e7:5b:44:16:30:
                    71:ef:5d:f8:af:9d:e4:9b:7a:91:16:a8:19:5d:e5:
                    3c:76:77:ae:0e:23:8e:a5:ba:0d:83:db:d8:f9:78:
                    db:df:27:76:2f:a7:12:0c:31:69:08:e0:59:16:40:
                    6b:7e:dd:f7:01:52:5a:0d:d2:91:32:c7:7a:ea:22:
                    80:f8:32:f3:48:92:9f:a8:cb:66:ba:56:fe:b8:f9:
                    18:43:bd:67:e8:be:18:c4:95:51:d1:ea:2a:be:f9:
                    2b:c2:c2:5c:cd:95:ec:21:1c:a4:79:a2:49:ec:ca:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:06:A3:48:89:D7:17:68:C4:D2:29:C2:3B:A9:65:62:2D:81:37
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32322d3232203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:3e:9d:a9:9d:a3:26:17:1a:ff:14:eb:be:4a:e7:9a:fd:
         7f:5b:e6:d4:97:6e:65:a4:33:c0:9f:b0:68:3d:56:88:a7:2f:
         af:7f:33:1a:55:49:dd:c9:47:31:7f:46:c2:8c:cd:eb:1d:93:
         e5:e8:80:43:8d:9e:19:88:f8:c0:a9:e3:2e:6e:39:de:aa:92:
         a7:d3:e2:95:3b:d2:c4:20:ff:88:52:98:95:8e:b3:91:9b:84:
         c7:bc:2d:2e:dd:5c:de:c8:d7:34:33:e3:9f:9d:f5:63:a8:b6:
         3a:ee:fd:89:77:d1:02:00:6b:98:b1:17:de:db:44:6f:ac:9b:
         b1:43:57:6a:25:c6:90:ee:81:3b:7b:e6:0b:2a:40:2f:a9:5c:
         27:06:c0:1d:c6:32:ad:dd:4d:38:43:33:be:d5:7c:0e:22:44:
         85:2d:bb:68:fc:ce:0e:4a:bb:34:7e:ee:4a:6f:70:91:e8:4d:
         c5:a0:12:0f:b2:b4:06:fb:b1:5a:33:78:58:46:3d:d5:04:75:
         04:06:d0:fa:0e:dd:85:04:e4:b6:55:93:0b:97:f0:d4:03:c8:
         9a:c7:33:6e:8a:77:f5:28:3a:c4:3b:80:40:94:43:82:dc:30:
         9b:bf:20:eb:3c:8c:34:a3:ce:8d:10:b5:7d:4a:06:87:01:8a:
         4a:4d:40:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:28 2025 by rpki-client