Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3137372e382e37322e302f32312d3231203d3e20323632313931.roa
File:                     3137372e382e37322e302f32312d3231203d3e20323632313931.roa (raw, json)
Hash identifier:          NHT5JryHpkYIAEC1PQHZdZ7qXUj7gVSkW8T4Gnmglec=
Subject key identifier:   30:79:B5:7B:60:A4:38:BA:CF:BD:B7:CB:E6:80:3F:12:5D:2C:26:BF
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       59A9FD22798491E5F1E7D92F21C27A140FF423C3
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3137372e382e37322e302f32312d3231203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:34 +0000
ROA not before:           Tue 04 Feb 2025 19:59:34 +0000
ROA not after:            Tue 03 Feb 2026 20:04:34 +0000
asID:                     262191
IP address blocks:        177.8.72.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a9:fd:22:79:84:91:e5:f1:e7:d9:2f:21:c2:7a:14:0f:f4:23:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:34 2025 GMT
            Not After : Feb  3 20:04:34 2026 GMT
        Subject: CN=3079B57B60A438BACFBDB7CBE6803F125D2C26BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:e0:ff:1f:a4:aa:a9:6d:95:92:d2:07:43:
                    91:0e:ce:f0:2e:e3:8f:95:19:01:a6:c2:02:6c:a4:
                    06:9f:b5:c4:8e:1d:6e:74:05:cf:64:c9:07:dc:12:
                    03:02:69:8d:5b:b9:ea:c5:ab:ea:5f:61:64:93:5b:
                    51:50:28:07:8f:a3:33:27:87:5b:98:7b:f4:73:b9:
                    dd:36:c5:4f:76:cd:c5:cb:5c:52:96:2f:44:22:b8:
                    bb:9c:20:22:37:57:69:39:2a:ee:5a:77:af:3b:f0:
                    bf:e7:d6:89:ef:ea:91:db:7c:e8:66:fc:85:a2:77:
                    21:66:58:7f:c4:92:d7:e5:fb:73:4b:4e:12:e6:63:
                    92:c2:22:55:00:a2:37:b3:2c:a5:70:d8:8c:51:b3:
                    83:7d:95:f5:80:21:50:a2:16:de:90:47:54:79:07:
                    3c:ab:dd:e2:04:35:21:c6:b6:3e:ad:11:f1:9a:68:
                    1c:b8:32:29:a5:be:3d:3f:4c:49:a4:65:2b:fe:cb:
                    b4:69:17:47:bd:2d:ea:cc:45:f9:2f:67:03:98:06:
                    4b:8c:fd:b9:61:40:e4:10:96:81:65:85:3f:1a:6e:
                    17:9f:68:8d:b5:9b:f2:ff:df:87:96:1e:33:85:30:
                    63:07:90:4e:3d:a3:24:63:d2:81:c0:84:41:d7:f9:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:79:B5:7B:60:A4:38:BA:CF:BD:B7:CB:E6:80:3F:12:5D:2C:26:BF
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3137372e382e37322e302f32312d3231203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:58:a8:02:85:5d:76:c9:37:b3:08:7d:78:31:93:65:9c:84:
         b6:e1:ae:fb:65:4c:5f:2f:37:7d:f8:ee:3e:e6:e3:00:02:c2:
         6b:c8:87:4b:14:27:a5:5b:3a:ae:0f:9d:8a:09:e7:c3:dd:cd:
         34:64:63:e6:3d:dd:65:93:d4:5f:1c:32:75:16:43:69:16:61:
         a2:f7:e6:dc:ad:55:8d:83:b4:23:1d:f0:89:49:d4:47:c0:96:
         2a:70:d5:32:9f:66:6c:a9:28:9a:77:e5:c1:f8:4f:9b:8a:36:
         6a:e5:e2:1a:05:37:90:88:63:1c:94:22:45:38:76:57:41:20:
         e1:43:5d:d4:f4:24:fb:e6:a2:64:14:4c:26:6a:7b:82:8a:e0:
         8b:ab:c9:16:9b:b1:71:37:e5:a5:bb:4f:e6:f5:d3:98:3b:4c:
         3a:1e:d5:51:b8:3e:8b:b9:5e:f9:6d:9c:fd:e4:6c:a8:8d:1a:
         a9:7d:ef:da:23:51:ce:10:3a:bb:b4:58:26:db:a6:5e:0e:d8:
         a4:2f:7a:26:93:cc:05:d5:8e:b7:73:2d:45:a8:eb:6d:92:a6:
         7f:52:ac:04:20:05:c2:fb:d1:de:5f:49:a8:90:14:96:fe:b5:
         86:74:62:d9:ce:f4:3f:fa:11:c2:aa:04:fc:72:0b:a8:98:ee:
         36:0f:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:04 2025 by rpki-client