Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f31372d3234203d3e203138363738.roa
File:                     3137392e312e302e302f31372d3234203d3e203138363738.roa (raw, json)
Hash identifier:          UFePFvFTgVvcQJ+mYyr5pVkLAvr8eBGW2k+I4/Xawm0=
Subject key identifier:   03:76:3F:B4:13:AC:9F:31:15:9F:40:E6:93:C5:7F:18:7C:86:AA:31
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6AD2F0D97FF1018AA2D8E4615CFE1508CC045F49
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f31372d3234203d3e203138363738.roa
Signing time:             Wed 19 Mar 2025 19:35:00 +0000
ROA not before:           Wed 19 Mar 2025 19:30:00 +0000
ROA not after:            Wed 18 Mar 2026 19:35:00 +0000
asID:                     18678
IP address blocks:        179.1.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d2:f0:d9:7f:f1:01:8a:a2:d8:e4:61:5c:fe:15:08:cc:04:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 19 19:30:00 2025 GMT
            Not After : Mar 18 19:35:00 2026 GMT
        Subject: CN=03763FB413AC9F31159F40E693C57F187C86AA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ec:17:6d:5d:96:83:f8:06:0f:99:3c:f4:8f:
                    fd:6d:55:ab:cd:d6:72:84:db:24:e0:53:69:83:45:
                    ca:b4:90:5a:3e:59:2c:80:43:60:f0:80:e3:66:ca:
                    b9:9a:2e:06:a4:19:06:6c:8e:52:b8:c4:2a:c4:5b:
                    99:a4:bb:8c:c3:fc:b6:2d:74:16:49:83:59:e3:81:
                    da:4f:cf:b5:cc:7d:c4:aa:7f:da:fb:fc:fb:68:c8:
                    19:13:e3:45:bd:27:a4:81:fb:e4:f1:7b:ae:a8:20:
                    49:dc:91:63:80:dd:96:ce:4b:86:20:3f:de:72:8e:
                    ec:cd:4f:95:11:15:60:b4:83:fd:44:9b:9b:04:19:
                    20:84:34:1d:83:28:5c:ef:11:ce:c6:5d:40:fb:97:
                    65:d7:51:49:6c:30:7f:74:ec:4f:4b:41:e8:be:0d:
                    fa:1c:f4:e5:ac:09:6c:20:c7:88:9f:02:17:dd:d4:
                    88:f5:09:03:2f:53:b5:55:b8:94:56:52:6f:d0:d9:
                    78:62:48:42:2d:7a:6c:55:c4:15:3a:69:56:65:fe:
                    07:b8:47:86:a1:7c:8e:ff:a3:f0:b4:31:be:3b:0f:
                    d1:e6:82:d3:40:ca:66:86:7f:63:57:9d:c1:72:01:
                    13:95:16:18:f0:ee:35:9e:54:27:e8:15:f3:0e:2f:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:76:3F:B4:13:AC:9F:31:15:9F:40:E6:93:C5:7F:18:7C:86:AA:31
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e302e302f31372d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:08:16:11:82:f4:85:fe:ac:c2:b0:cb:8e:13:12:30:5f:9a:
         aa:e3:7f:e7:60:a0:e8:aa:80:16:c6:54:27:59:4f:17:80:da:
         68:29:24:c5:16:c6:cd:bf:4f:63:8b:09:12:f6:80:05:31:96:
         e2:37:a1:15:c2:92:5c:a7:4d:47:ee:42:cf:9c:2a:b7:12:49:
         66:52:33:04:99:9f:f5:49:e0:ee:f2:38:18:7e:ab:78:2e:ee:
         da:c7:ab:8d:df:62:82:09:2b:dd:0e:d0:8d:91:ae:83:9f:a5:
         80:87:53:62:11:9e:20:ae:4a:59:fe:a9:a9:d9:05:cd:86:07:
         36:15:4d:a6:6b:c1:8e:b4:a9:49:6f:75:0c:06:fb:04:0e:d6:
         a9:5e:c3:5a:d2:da:4c:1c:a2:05:65:e0:ac:d4:40:47:83:b9:
         d3:ff:2c:62:ca:bd:7d:34:7b:21:52:28:c5:3c:f8:fd:b6:57:
         79:97:eb:51:99:4b:c4:0e:f1:10:67:d7:d9:4a:12:62:35:2f:
         84:c2:77:e6:05:80:23:f2:9d:63:4a:19:be:61:f5:e7:5e:e7:
         54:f6:82:43:ce:95:18:26:4f:b0:b5:62:81:93:7b:87:b5:6e:
         d1:39:4d:65:cc:30:08:3e:fe:85:8f:d9:1c:15:11:04:a8:82:
         51:82:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:31 2025 by rpki-client