Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135392e302f32342d3234203d3e20323730303831.roa
File:                     3137392e34392e3135392e302f32342d3234203d3e20323730303831.roa (raw, json)
Hash identifier:          isNTrMfFwjJoiOXncI6gW+SF1RLS89B2BtuAzlAlzRM=
Subject key identifier:   BE:A2:DD:9D:B7:9D:8C:AA:08:73:27:C2:7C:3E:1C:90:A5:63:ED:CD
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       29AEADEE836D06028FF294B6624797E5D95E4160
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135392e302f32342d3234203d3e20323730303831.roa
Signing time:             Tue 04 Feb 2025 18:40:36 +0000
ROA not before:           Tue 04 Feb 2025 18:35:36 +0000
ROA not after:            Tue 03 Feb 2026 18:40:36 +0000
asID:                     270081
IP address blocks:        179.49.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ae:ad:ee:83:6d:06:02:8f:f2:94:b6:62:47:97:e5:d9:5e:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Feb  4 18:35:36 2025 GMT
            Not After : Feb  3 18:40:36 2026 GMT
        Subject: CN=BEA2DD9DB79D8CAA087327C27C3E1C90A563EDCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:22:ab:72:c1:78:4e:a9:e4:dc:eb:9f:ed:7d:
                    71:1d:d5:ad:a6:ea:c0:c8:10:b8:34:9e:d8:74:60:
                    82:85:20:83:8e:d4:5b:20:c2:5f:65:36:6f:1a:2f:
                    84:7b:a9:4f:59:6f:e6:82:a1:ce:53:e9:99:3f:8c:
                    38:98:6c:dd:ea:7c:77:fc:6f:66:19:2f:00:c6:02:
                    18:8e:55:37:de:3c:80:ee:e3:64:b2:84:31:02:86:
                    c3:48:82:1b:2e:ca:25:eb:c3:ff:c1:ef:09:c9:34:
                    2a:4f:8e:a4:e4:1f:f1:10:06:23:56:50:a4:14:05:
                    8f:4f:71:36:99:70:a9:71:ca:ac:55:02:05:e8:d6:
                    36:b2:fe:61:cc:b4:54:78:f8:30:2b:d3:e9:89:80:
                    ee:95:dd:31:0c:a6:75:d5:62:c6:2c:62:63:da:d8:
                    9d:1a:11:07:e9:42:cf:20:da:fb:16:dd:7d:23:37:
                    ef:c9:4f:10:89:0c:3a:d9:26:8c:5c:1b:8e:e5:23:
                    98:f3:72:86:8e:17:58:ce:01:69:d5:38:f4:2f:99:
                    c2:84:46:1c:3b:95:7d:41:a9:50:20:4d:11:4c:fd:
                    a7:84:36:b2:de:5d:dd:a8:f5:bb:ef:3d:57:4e:b5:
                    39:0a:37:a7:1c:4b:ed:f7:1b:bf:8b:9b:f0:e0:cd:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A2:DD:9D:B7:9D:8C:AA:08:73:27:C2:7C:3E:1C:90:A5:63:ED:CD
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135392e302f32342d3234203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:7c:76:b1:00:88:3c:06:e5:75:12:b0:d4:9d:56:2a:a1:58:
         e4:8e:49:b3:c6:9f:f0:de:81:69:27:0d:1b:f7:52:2d:d0:3d:
         53:c4:f8:01:97:e3:bf:3b:0d:0c:9b:9f:61:07:98:1a:15:cf:
         b0:56:62:0f:09:47:c2:7d:a8:50:48:4c:12:4e:60:0d:d8:5e:
         a0:20:87:64:3d:e0:cd:d4:c8:98:ae:a8:e5:ce:02:cc:0e:1c:
         10:4a:b5:aa:6a:46:cb:06:a5:9a:6d:e3:57:0e:d6:90:d3:f5:
         be:b1:17:e0:a2:6e:0f:fd:b4:ac:0d:06:47:7b:bd:db:d4:41:
         32:a3:15:56:85:24:81:a9:2f:47:e4:3d:bc:22:79:3e:4e:af:
         f2:dd:82:a8:49:06:b8:52:9e:0c:db:4e:9c:77:c5:0a:e3:e2:
         09:e8:f2:51:4a:01:c8:c8:d3:37:90:b0:40:d1:6c:37:e7:39:
         e9:d8:24:d0:3d:2a:c1:f2:39:e2:f2:61:5d:c5:45:f5:7c:11:
         cf:5e:53:fe:70:3f:62:bd:ce:f4:b3:89:13:2c:6f:30:a0:d2:
         fb:38:be:ce:8b:50:ba:62:1d:fd:43:dd:43:cf:b6:9e:0a:57:
         eb:43:cc:96:f3:6f:9b:72:60:f0:0c:ad:ea:88:aa:7f:2a:3a:
         d4:62:4e:1d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKa6t7oNtBgKP8pS2YkeX5dleQWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQzYyODk4N0EzMUJFODdGNjNEOEIzNjE3RTkxRTMy
RTM5MDhDMzAeFw0yNTAyMDQxODM1MzZaFw0yNjAyMDMxODQwMzZaMDMxMTAvBgNV
BAMTKEJFQTJERDlEQjc5RDhDQUEwODczMjdDMjdDM0UxQzkwQTU2M0VEQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqIqtywXhOqeTc65/tfXEd1a2m
6sDIELg0nth0YIKFIIOO1Fsgwl9lNm8aL4R7qU9Zb+aCoc5T6Zk/jDiYbN3qfHf8
b2YZLwDGAhiOVTfePIDu42SyhDEChsNIghsuyiXrw//B7wnJNCpPjqTkH/EQBiNW
UKQUBY9PcTaZcKlxyqxVAgXo1jay/mHMtFR4+DAr0+mJgO6V3TEMpnXVYsYsYmPa
2J0aEQfpQs8g2vsW3X0jN+/JTxCJDDrZJoxcG47lI5jzcoaOF1jOAWnVOPQvmcKE
Rhw7lX1BqVAgTRFM/aeENrLeXd2o9bvvPVdOtTkKN6ccS+33G7+Lm/DgzZ3RAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvqLdnbedjKoIcyfCfD4ckKVj7c0wHwYDVR0j
BBgwFoAUCxxiiYejG+h/Y9izYX6R4y45CMMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0E5Qzc0REYwMEY1NDcxMDdBQzA2QjJGN0U3NDMyNDNC
M0VCODAzMDE5MTQwMzhENUU3QTMzQUZDM0NEMEYzLzAvMEIxQzYyODk4N0EzMUJF
ODdGNjNEOEIzNjE3RTkxRTMyRTM5MDhDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQjFDNjI4OTg3QTMxQkU4N0Y2
M0Q4QjM2MTdFOTFFMzJFMzkwOEMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdBOUM3NERGMDBGNTQ3MTA3QUMwNkIyRjdFNzQzMjQzQjNFQjgwMzAx
OTE0MDM4RDVFN0EzM0FGQzNDRDBGMy8wLzMxMzczOTJlMzQzOTJlMzEzNTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzAzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAszGf
MA0GCSqGSIb3DQEBCwUAA4IBAQB7fHaxAIg8BuV1ErDUnVYqoVjkjkmzxp/w3oFp
Jw0b91It0D1TxPgBl+O/Ow0Mm59hB5gaFc+wVmIPCUfCfahQSEwSTmAN2F6gIIdk
PeDN1MiYrqjlzgLMDhwQSrWqakbLBqWabeNXDtaQ0/W+sRfgom4P/bSsDQZHe73b
1EEyoxVWhSSBqS9H5D28Ink+Tq/y3YKoSQa4Up4M206cd8UK4+IJ6PJRSgHIyNM3
kLBA0Ww35znp2CTQPSrB8jni8mFdxUX1fBHPXlP+cD9ivc70s4kTLG8woNL7OL7O
i1C6Yh39Q91Dz7aeClfrQ8yW82+bcmDwDK3qiKp/KjrUYk4d
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:46 2025 by rpki-client