Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/3137372e3232312e3134312e302f32342d3234203d3e20323730303134.roa
File:                     3137372e3232312e3134312e302f32342d3234203d3e20323730303134.roa (raw, json)
Hash identifier:          UsRJMOpzsIG7JjxkmCAFxyHo38ynHuCHMWds3GV6/2U=
Subject key identifier:   D2:A9:DB:7F:86:58:19:6D:E4:6F:3B:CB:37:1C:60:79:5F:A9:B1:18
Certificate issuer:       /CN=E793DC9356C69CBF448E0A4FA68F2B255E58A05A
Certificate serial:       2A6350CAC034F9224D3D3805A3C6E3BC16A5AAE4
Authority key identifier: E7:93:DC:93:56:C6:9C:BF:44:8E:0A:4F:A6:8F:2B:25:5E:58:A0:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/3137372e3232312e3134312e302f32342d3234203d3e20323730303134.roa
Signing time:             Tue 04 Feb 2025 18:39:05 +0000
ROA not before:           Tue 04 Feb 2025 18:34:05 +0000
ROA not after:            Tue 03 Feb 2026 18:39:05 +0000
asID:                     270014
IP address blocks:        177.221.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:63:50:ca:c0:34:f9:22:4d:3d:38:05:a3:c6:e3:bc:16:a5:aa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E793DC9356C69CBF448E0A4FA68F2B255E58A05A
        Validity
            Not Before: Feb  4 18:34:05 2025 GMT
            Not After : Feb  3 18:39:05 2026 GMT
        Subject: CN=D2A9DB7F8658196DE46F3BCB371C60795FA9B118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:43:8f:f3:bb:16:48:7f:40:06:95:15:de:ab:
                    58:14:11:d2:74:51:48:72:23:7a:9c:c0:d3:0e:1f:
                    ad:7f:22:a5:a1:0b:66:fe:4e:ae:6a:35:73:71:a5:
                    de:a3:58:ef:6d:bc:4a:bd:d2:c6:35:f0:d6:39:fb:
                    c2:04:66:97:f9:dd:9a:27:2c:24:69:a0:14:f2:46:
                    6a:70:37:94:a4:6c:c1:3b:f5:a9:02:cc:d7:4d:f9:
                    80:14:cc:d3:70:0c:68:47:ba:4f:67:27:7c:99:66:
                    98:80:db:20:ef:5e:70:3b:d6:38:f2:f9:e0:bc:28:
                    d8:c4:ae:22:36:d6:6e:65:7c:ae:fc:0c:21:f5:9c:
                    a3:26:32:6a:41:0b:90:e1:5c:48:1c:24:55:36:94:
                    66:df:d2:52:7f:24:4d:db:42:06:3c:c1:8c:8f:7c:
                    fa:ae:d6:eb:45:30:19:85:40:10:42:40:8d:7d:92:
                    ef:84:ad:8b:6e:51:44:11:2f:01:af:60:25:e7:7a:
                    f8:23:a6:bf:48:f9:cc:6a:c1:19:85:db:35:f1:bb:
                    86:9a:80:71:e9:93:4a:ad:78:b6:f3:3e:23:4f:d3:
                    32:7c:72:7c:fe:68:f1:1e:8d:de:a2:58:74:1f:91:
                    fa:9d:43:36:18:6b:72:9f:18:b8:4f:c3:cc:b3:42:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A9:DB:7F:86:58:19:6D:E4:6F:3B:CB:37:1C:60:79:5F:A9:B1:18
            X509v3 Authority Key Identifier:
                keyid:E7:93:DC:93:56:C6:9C:BF:44:8E:0A:4F:A6:8F:2B:25:5E:58:A0:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E793DC9356C69CBF448E0A4FA68F2B255E58A05A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/204906F922F0DE91BEDB22EF9AC1B7703C3B1B267102A61684ED2475572D2F94/0/3137372e3232312e3134312e302f32342d3234203d3e20323730303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ce:01:58:64:83:70:cb:19:84:ba:55:ca:44:91:84:59:ca:
         f9:73:10:08:13:af:ac:42:97:15:cf:f6:e0:55:4e:0f:cb:c9:
         72:99:7c:a2:0d:a5:16:8d:5e:8b:2f:18:88:a2:1f:27:81:f7:
         57:51:77:3f:cb:2d:1c:09:57:43:1e:81:d7:0e:1f:e0:77:6a:
         74:80:36:2d:56:ef:e4:30:da:ba:f4:c2:56:61:f0:ba:bb:8c:
         0c:ea:00:d4:a3:00:56:21:74:f3:ab:6a:5e:4e:a4:de:b4:b7:
         bd:03:9d:ff:1d:9b:cf:7b:70:0b:1c:52:4e:67:29:12:b2:e6:
         d4:63:27:a5:5b:c0:a1:31:2d:3b:52:15:8e:30:fa:bd:5f:32:
         fc:9c:75:65:78:2a:f7:e2:7a:4f:20:d8:32:01:4a:ac:66:df:
         f4:d0:83:85:50:c8:55:c6:73:a6:d2:ec:3c:bc:76:23:85:dc:
         2d:43:f3:a0:34:71:de:92:d8:58:7d:16:5e:42:27:f6:2a:f4:
         7e:18:ca:eb:e3:38:30:e0:b1:74:c5:b4:46:09:ca:78:8a:c2:
         d1:4e:8a:da:6d:1d:2a:46:49:5c:a5:55:3e:8f:12:de:49:7e:
         67:3f:14:07:9a:52:b9:c1:77:e2:4c:d9:e8:4f:aa:cd:c1:63:
         c2:79:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:42 2025 by rpki-client