Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/3137372e3232312e3134302e302f32332d3234203d3e20323730303134.roa
File:                     3137372e3232312e3134302e302f32332d3234203d3e20323730303134.roa (raw, json)
Hash identifier:          V9vJhU5OvS6qM1sCDoFTXUTWL8dBqEbDjquK0b9/Y5Q=
Subject key identifier:   F4:12:6C:03:9C:40:9E:5E:7E:E8:4B:AA:C8:B0:45:29:4F:2A:29:64
Certificate issuer:       /CN=E793DC9356C69CBF448E0A4FA68F2B255E58A05A
Certificate serial:       73036AAEB538B1811311FEB4256102D0D5AFFFE3
Authority key identifier: E7:93:DC:93:56:C6:9C:BF:44:8E:0A:4F:A6:8F:2B:25:5E:58:A0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/3137372e3232312e3134302e302f32332d3234203d3e20323730303134.roa
Signing time:             Tue 04 Feb 2025 18:39:05 +0000
ROA not before:           Tue 04 Feb 2025 18:34:05 +0000
ROA not after:            Tue 03 Feb 2026 18:39:05 +0000
asID:                     270014
IP address blocks:        177.221.140.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:6a:ae:b5:38:b1:81:13:11:fe:b4:25:61:02:d0:d5:af:ff:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E793DC9356C69CBF448E0A4FA68F2B255E58A05A
        Validity
            Not Before: Feb  4 18:34:05 2025 GMT
            Not After : Feb  3 18:39:05 2026 GMT
        Subject: CN=F4126C039C409E5E7EE84BAAC8B045294F2A2964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:66:01:a4:37:9d:b5:ca:24:3d:e3:92:49:
                    11:21:01:3c:2e:10:b0:c2:ff:77:e4:42:fc:85:1a:
                    12:86:f7:c1:dd:f2:f8:03:c0:13:13:1f:b9:72:70:
                    e3:cd:ad:4b:60:b8:34:13:b4:67:92:3b:c8:a7:df:
                    3f:ba:57:21:1d:08:58:f5:5c:03:ae:e0:07:5a:9b:
                    7a:33:68:e8:0e:85:d9:af:e4:a1:ee:b8:93:7c:15:
                    92:35:38:0d:73:18:90:18:7f:17:c8:df:ef:87:a6:
                    4e:aa:4e:a0:be:6b:d9:e3:a5:19:4d:15:0d:e0:eb:
                    c4:8c:32:dd:2c:7a:3b:a6:a2:b6:3d:9b:db:14:77:
                    78:91:bb:75:f7:4c:4a:62:82:db:8a:e6:b5:06:80:
                    5c:ca:89:98:a0:fa:19:2e:f5:b3:69:5e:8d:68:73:
                    17:35:c6:da:f0:7c:74:fc:23:3f:1f:8f:d8:b2:e8:
                    56:df:e6:87:13:c4:ab:78:4d:c9:21:a5:80:10:15:
                    90:60:c6:cd:c1:ab:3d:a1:95:07:41:db:73:72:c3:
                    8f:8a:69:14:41:74:ac:bc:37:6f:f7:f4:e7:c6:25:
                    36:94:b8:2e:e2:ec:0a:18:ca:b4:e6:a3:89:5b:0b:
                    62:f2:96:26:6d:dd:bc:70:cd:4a:2c:8e:7d:ed:76:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:12:6C:03:9C:40:9E:5E:7E:E8:4B:AA:C8:B0:45:29:4F:2A:29:64
            X509v3 Authority Key Identifier:
                keyid:E7:93:DC:93:56:C6:9C:BF:44:8E:0A:4F:A6:8F:2B:25:5E:58:A0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/3137372e3232312e3134302e302f32332d3234203d3e20323730303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:37:f3:ad:61:b3:e6:bf:9f:fb:80:07:b9:f9:34:cb:9e:92:
         a7:50:4b:0c:24:48:77:46:ca:ff:b4:c1:42:7a:aa:f9:7c:99:
         8e:fd:e5:77:8f:3b:30:94:12:f9:96:52:1d:6b:7a:7f:21:fe:
         6a:d0:c2:9c:88:e8:f4:ca:29:6a:a8:24:f2:6f:3a:76:68:83:
         38:7a:53:40:ab:16:d9:3f:a0:e8:f7:36:fe:fa:41:89:8a:2e:
         07:9a:f7:49:fd:2c:f5:20:0b:47:96:4c:0e:63:c1:6c:28:4f:
         29:46:ea:89:04:51:7b:15:ce:1d:40:2d:75:b0:f7:52:90:41:
         2a:99:42:90:0a:ac:fa:79:d1:ff:70:3d:d3:53:65:d2:72:00:
         f2:71:0d:2f:b9:d8:05:cc:36:27:0f:c3:83:fe:e2:2e:4a:4c:
         bb:6f:94:9a:c7:ab:24:9a:c6:18:74:57:21:cb:73:9d:11:35:
         ad:8e:1c:5a:9a:86:14:e9:b9:7a:fa:d5:95:26:19:69:53:8b:
         1c:ac:95:7d:ab:df:b8:a9:06:97:85:d7:02:7a:d5:d3:06:04:
         53:74:96:df:9f:2e:fe:ca:8d:45:46:f5:bb:10:f2:d0:05:e8:
         4c:c7:a1:71:93:c2:e5:0a:0a:61:a3:cb:d5:e8:61:95:a1:72:
         4a:e8:e9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:35 2025 by rpki-client