Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa
File:                     3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa (raw, json)
Hash identifier:          iAra6DBBSWtzgrG8gHFGksLhHB/6jWyM1YBMBe7pAW4=
Subject key identifier:   A6:10:99:99:97:CC:6F:E5:1E:C4:EF:B3:3D:DD:75:74:E6:E8:4C:EA
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       42E39795FEBCE06C313D20BE30058EAA869F679C
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:37 +0000
ROA not before:           Tue 04 Feb 2025 18:35:37 +0000
ROA not after:            Tue 03 Feb 2026 18:40:37 +0000
asID:                     270081
IP address blocks:        179.49.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e3:97:95:fe:bc:e0:6c:31:3d:20:be:30:05:8e:aa:86:9f:67:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:37 2025 GMT
            Not After : Feb  3 18:40:37 2026 GMT
        Subject: CN=A610999997CC6FE51EC4EFB33DDD7574E6E84CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:9a:aa:1c:d3:94:6a:84:c7:4e:11:37:be:
                    f8:d4:72:35:7b:78:ba:86:3a:c4:28:64:17:59:d2:
                    15:cd:e0:9c:77:b2:06:89:45:99:86:46:68:a0:79:
                    a4:57:fb:bd:0e:0d:1c:f2:58:df:0d:ec:cb:af:b8:
                    72:ad:d9:c2:b9:e2:db:41:27:d4:de:9b:fd:cc:0d:
                    b5:de:a4:a9:76:32:67:06:36:a8:c7:d5:f6:a5:72:
                    f3:a4:76:e8:91:b2:9e:3a:b6:0a:83:55:68:2f:62:
                    b2:14:d5:13:01:42:61:f4:f7:fe:f4:3e:e7:b2:b1:
                    3e:18:ea:a2:98:25:a9:27:de:f4:50:23:f4:9c:cc:
                    c6:18:4b:9c:a8:06:35:16:f9:e8:38:5f:73:49:15:
                    9c:e9:38:a2:c7:62:4c:ec:b6:a7:a9:5e:99:d7:86:
                    27:56:e0:8b:56:6d:7a:14:82:44:69:20:c1:c7:4d:
                    2d:25:cc:06:6b:a1:18:4b:ba:9d:35:01:3e:71:50:
                    ee:26:e9:2a:65:46:07:a6:69:a6:9b:14:75:ab:e7:
                    c8:3b:19:12:53:1c:ee:97:61:c5:20:b8:fe:43:9a:
                    91:96:7a:d7:e0:3f:70:3a:a3:29:a9:a5:c4:67:e7:
                    a0:60:11:3c:96:5b:e6:34:41:ba:be:10:e9:39:67:
                    19:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:10:99:99:97:CC:6F:E5:1E:C4:EF:B3:3D:DD:75:74:E6:E8:4C:EA
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:50:23:6b:2d:d2:5f:39:67:a5:cf:67:6f:ff:20:c7:36:bd:
         dc:ed:4f:e2:7c:6f:f2:c0:c3:21:c0:f8:9f:00:8d:cd:5f:ae:
         3d:9d:1e:1b:e3:ce:9e:a5:3b:de:41:80:ab:9e:9b:9b:3a:4d:
         ca:5c:3d:f4:7e:a0:64:04:8f:b0:56:3f:8f:34:13:2c:3a:29:
         38:36:25:02:ad:67:5f:43:7e:fa:18:f9:da:cb:d7:cb:48:b1:
         b5:c3:f6:d7:50:cc:0e:23:42:12:4c:75:c7:a2:ed:6c:3e:b9:
         b8:76:df:71:4b:34:5d:61:2d:74:3d:3b:f9:49:77:44:dd:73:
         4f:f8:7e:e7:86:07:39:13:fb:7f:6e:c2:73:87:31:35:14:98:
         91:81:5b:ea:80:d3:a6:09:6b:10:dd:a6:88:27:f5:29:20:71:
         4f:57:f3:25:3f:48:b4:84:4a:6c:57:a9:ba:69:90:31:45:34:
         5e:25:10:d9:e6:d5:79:7a:2c:c4:49:eb:5a:56:18:03:33:8a:
         8d:17:df:08:a1:3c:10:68:a4:8b:07:71:d4:f8:49:3f:0a:81:
         a1:09:ee:d2:1b:d2:8b:c9:44:8d:a7:dd:7e:14:c0:7b:a9:8f:
         ee:5b:4d:8a:bb:db:1a:0e:24:1b:78:a2:66:83:80:3d:75:f6:
         25:30:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:01 2025 by rpki-client