Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3137392e302e3135312e302f32342d3234203d3e20323633323137.roa
File:                     3137392e302e3135312e302f32342d3234203d3e20323633323137.roa (raw, json)
Hash identifier:          hLTE6VpSNYpxVQbzcDdQWc3Q4opATc3oDONOY79TjXY=
Subject key identifier:   1B:BA:6D:3E:CB:00:67:61:CD:08:B5:68:16:AD:6B:FD:FD:BA:D3:CB
Certificate issuer:       /CN=F9704454BEEAA5607C017F2A685262F0B549B68B
Certificate serial:       5ABF21DE9604ABCE78DF4F64DF474465606C26AA
Authority key identifier: F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3137392e302e3135312e302f32342d3234203d3e20323633323137.roa
Signing time:             Tue 04 Feb 2025 18:42:14 +0000
ROA not before:           Tue 04 Feb 2025 18:37:14 +0000
ROA not after:            Tue 03 Feb 2026 18:42:14 +0000
asID:                     263217
IP address blocks:        179.0.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bf:21:de:96:04:ab:ce:78:df:4f:64:df:47:44:65:60:6c:26:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9704454BEEAA5607C017F2A685262F0B549B68B
        Validity
            Not Before: Feb  4 18:37:14 2025 GMT
            Not After : Feb  3 18:42:14 2026 GMT
        Subject: CN=1BBA6D3ECB006761CD08B56816AD6BFDFDBAD3CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:af:e9:5a:f2:57:1e:0e:19:0d:38:ad:7d:
                    fb:06:e8:79:f7:e6:3f:f8:6f:11:5a:6d:c2:95:7f:
                    00:d1:69:89:b7:13:f4:a1:71:99:31:04:a3:92:21:
                    8d:dc:0d:0d:d5:bc:32:ae:15:e3:71:3f:52:31:e1:
                    b5:58:14:eb:23:20:47:7a:19:fb:a4:82:a5:53:3a:
                    df:a7:a8:62:35:5c:d4:c8:e1:46:9d:ba:74:85:66:
                    08:e7:ab:72:aa:cc:45:79:13:90:5e:da:f1:38:a4:
                    95:2b:ac:0c:2a:49:80:35:b0:9e:9c:44:c6:c6:4f:
                    84:e2:5e:4a:76:a8:29:e6:de:dd:4e:3d:92:a6:11:
                    bf:6c:44:36:1a:76:60:a0:17:52:9f:68:0a:3e:28:
                    85:61:5d:93:61:37:54:94:62:fc:41:15:7c:90:d0:
                    4f:69:af:4d:3c:1f:08:08:f9:70:44:9f:db:ad:62:
                    2a:8b:d5:21:d4:5f:9e:72:ef:cb:1a:1b:5f:3c:38:
                    14:33:7e:5a:cf:02:f3:b6:53:b2:41:95:ff:19:6f:
                    7d:67:54:f9:ff:b9:39:ad:52:5d:5d:16:16:4b:8e:
                    df:c0:a2:11:1a:a7:58:e3:84:86:55:09:4c:3f:a0:
                    9d:d8:75:c1:da:c4:41:87:a4:72:0f:a5:d2:e5:d7:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:6D:3E:CB:00:67:61:CD:08:B5:68:16:AD:6B:FD:FD:BA:D3:CB
            X509v3 Authority Key Identifier:
                keyid:F9:70:44:54:BE:EA:A5:60:7C:01:7F:2A:68:52:62:F0:B5:49:B6:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/F9704454BEEAA5607C017F2A685262F0B549B68B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9704454BEEAA5607C017F2A685262F0B549B68B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2583954D10F857B35149AFFDF0098091E3885EFAD57EBE088477A4C4B18E5F8B/0/3137392e302e3135312e302f32342d3234203d3e20323633323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:a6:8e:c0:ab:f7:65:25:73:ad:0c:cd:c5:58:26:82:df:
         4a:09:78:56:8e:3e:f8:21:3b:61:d6:5c:da:1d:60:3c:38:e9:
         10:64:52:e4:98:c9:8e:cd:c4:53:f9:d6:02:c4:93:ec:ca:90:
         71:a7:30:a4:08:3a:b9:e4:ec:ab:b9:15:1c:dc:48:a6:65:2e:
         21:d4:24:f6:c9:f9:b8:6a:75:ac:c5:48:7a:1c:1a:a2:e0:d0:
         8f:6e:ce:03:76:5f:ed:27:8c:04:af:25:70:b5:60:b7:23:9f:
         fc:ed:2b:c9:1b:bc:fe:61:f5:02:a0:2c:d5:0d:68:90:c7:66:
         ea:6e:d1:b6:18:3c:0f:0a:dd:06:9d:cb:d6:13:24:8c:3e:6f:
         7a:fd:0c:7b:5c:1a:1b:8e:a9:b6:67:9f:3d:7f:dd:3e:9a:93:
         85:ba:23:ef:e0:64:26:ee:4a:2e:b7:f1:7b:ab:9e:c1:0d:e6:
         64:97:66:f0:62:7e:ab:43:55:52:bc:3f:aa:d2:e8:cb:5c:ec:
         6d:31:b7:cf:60:5c:25:0e:e5:ca:78:4c:2c:03:27:11:b3:44:
         3d:ef:ac:80:a9:28:24:11:30:d6:39:3a:7d:35:2d:c3:48:1f:
         0f:28:96:94:5e:22:1f:2c:dd:b0:88:9b:80:20:bd:8b:31:d9:
         35:df:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:27:06 2025 by rpki-client