Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3130312e302f32342d3234203d3e20323635383535.roa
File:                     3137392e312e3130312e302f32342d3234203d3e20323635383535.roa (raw, json)
Hash identifier:          AAEYCG2lVIb0QQUkivgm/FLdbHqAAeRnoG7HZIpQ024=
Subject key identifier:   1D:6D:CA:0D:B6:5C:81:34:4E:81:C1:A8:20:A9:B8:9E:FC:6B:7C:C0
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0A0B29B9E207529C67ACE7B78A10F90B1120E117
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3130312e302f32342d3234203d3e20323635383535.roa
Signing time:             Tue 04 Feb 2025 18:17:19 +0000
ROA not before:           Tue 04 Feb 2025 18:12:19 +0000
ROA not after:            Tue 03 Feb 2026 18:17:19 +0000
asID:                     265855
IP address blocks:        179.1.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0b:29:b9:e2:07:52:9c:67:ac:e7:b7:8a:10:f9:0b:11:20:e1:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:19 2025 GMT
            Not After : Feb  3 18:17:19 2026 GMT
        Subject: CN=1D6DCA0DB65C81344E81C1A820A9B89EFC6B7CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:00:af:45:38:5b:5d:e3:b4:95:b0:34:df:
                    68:06:3a:5b:73:19:34:f3:03:e5:4d:ce:9f:a7:93:
                    f4:c6:24:d6:fa:c6:81:73:77:a5:e1:c4:8b:a4:63:
                    3a:e3:1d:fe:6e:ab:1a:1d:cf:08:e9:a1:58:d4:7c:
                    43:17:7d:65:09:28:fa:62:52:6a:0e:9c:08:8b:b0:
                    74:7f:66:7a:9d:10:6e:d6:90:25:b5:b8:73:aa:a4:
                    3b:22:07:42:76:ee:e9:2e:2d:39:7c:c8:91:53:be:
                    46:70:3f:03:f7:74:70:dc:86:4a:22:0e:ef:1d:91:
                    72:3e:34:b5:91:1b:ff:e5:3e:65:bc:52:d6:86:5b:
                    3d:6c:2b:68:95:7b:26:10:94:d5:c5:a4:9e:41:d2:
                    a0:e2:d1:48:00:8e:29:d4:56:b8:93:a7:fe:79:a6:
                    58:12:1b:46:00:f4:eb:40:ba:87:ae:77:bf:55:30:
                    db:d9:1b:c8:b1:31:5e:32:3d:21:a5:6a:60:d7:e2:
                    f2:d8:bd:67:e6:10:d2:ff:c5:0b:45:9f:73:26:f5:
                    52:6d:9f:b5:13:ef:af:df:37:a3:b0:25:89:16:50:
                    68:75:fa:dd:ca:c0:81:d9:81:21:ce:42:c4:17:4e:
                    15:07:ab:2d:8b:78:16:5a:3f:52:9e:f2:70:4e:e7:
                    29:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6D:CA:0D:B6:5C:81:34:4E:81:C1:A8:20:A9:B8:9E:FC:6B:7C:C0
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3130312e302f32342d3234203d3e20323635383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f6:ef:6c:22:cb:b8:75:7d:54:f6:1f:38:50:54:fe:20:fe:
         a9:df:fc:e4:54:da:f3:59:44:61:16:c8:76:70:13:52:1a:81:
         bd:3f:c3:09:b0:8e:93:24:ef:f9:97:78:26:24:f0:17:45:9f:
         39:5b:8d:c0:8d:06:d0:ea:b3:33:47:2a:86:e0:62:e8:04:6d:
         4f:d2:bf:29:7f:74:65:ac:af:94:c2:38:7d:41:ef:f3:0d:51:
         46:46:af:4f:b6:ee:ac:68:98:45:b0:07:fa:7e:c9:b9:17:38:
         10:d8:ae:54:9a:32:e1:67:23:7a:83:cb:cb:dd:9b:df:36:37:
         83:c4:8e:60:07:cf:e9:d8:e7:f5:02:14:80:21:76:8d:63:70:
         be:6e:a4:ec:dc:9b:13:f0:8a:95:f6:be:f9:ec:75:42:3b:ad:
         2c:07:d8:dd:06:d0:55:40:8f:49:0d:89:55:2e:16:d0:8f:b4:
         02:7f:cd:e2:5b:a6:ff:7c:34:02:13:27:63:8a:d9:08:c9:38:
         53:87:6a:2a:df:45:e0:a7:cb:11:2a:6e:f5:13:21:77:ab:59:
         d2:de:b4:9f:81:fa:b1:c7:34:ab:98:eb:4f:bc:40:16:a8:95:
         64:06:98:97:b2:20:d3:27:b6:39:c3:9c:e1:2e:25:68:58:7f:
         78:ee:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:00:07 2025 by rpki-client