Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31362d3234203d3e203232303437.roa
File:                     3137392e322e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          qQWGiXUn1TMbt5gapAMzNtKwRRbw+E+y8Hrt6FpH+lo=
Subject key identifier:   F3:1B:5A:33:26:41:60:92:7F:0E:FD:1B:DD:AA:F9:D5:C8:30:4A:09
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       681C767912E1126C0DA4E91E73381DCE18F3E053
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 04 Feb 2025 18:12:12 +0000
ROA not before:           Tue 04 Feb 2025 18:07:12 +0000
ROA not after:            Tue 03 Feb 2026 18:12:12 +0000
asID:                     22047
IP address blocks:        179.2.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1c:76:79:12:e1:12:6c:0d:a4:e9:1e:73:38:1d:ce:18:f3:e0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:12 2025 GMT
            Not After : Feb  3 18:12:12 2026 GMT
        Subject: CN=F31B5A33264160927F0EFD1BDDAAF9D5C8304A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:b0:1e:89:da:48:4e:78:8d:b1:30:9c:24:
                    cb:2d:34:4e:48:a9:b3:43:8f:3a:45:59:25:69:0a:
                    35:2f:0c:f0:d7:4b:a4:f5:d1:64:15:c7:8a:9d:51:
                    b4:7e:a1:0d:6b:0f:93:cb:ee:0b:0b:ef:54:0b:9e:
                    f5:81:50:53:5b:01:ac:14:0b:54:ef:62:46:8b:56:
                    c5:b5:29:20:a3:13:60:07:64:76:39:80:21:77:a5:
                    a2:10:0b:fb:57:d5:92:83:bb:0d:24:b3:f3:c3:56:
                    15:9f:2d:50:b8:2b:4a:64:3a:78:61:96:c8:3d:74:
                    d3:c0:bd:53:3a:1c:a1:1f:35:32:27:9d:c8:b0:ee:
                    a7:e1:b2:64:98:8a:a0:c2:04:83:0c:96:e8:1d:19:
                    f9:cc:da:2f:b8:a6:51:5e:1a:15:19:24:d1:71:5b:
                    5a:f0:dc:50:84:f1:d5:31:02:8f:e5:06:38:f0:56:
                    12:23:92:35:52:f6:37:ef:c0:c3:c3:94:4d:ba:53:
                    03:ea:bd:15:bb:56:1d:65:1d:37:50:68:0c:87:f0:
                    8b:11:a4:cf:ec:01:7f:5a:91:b1:53:30:fa:b7:9b:
                    67:90:72:59:14:85:26:e5:a1:60:06:57:c0:48:bb:
                    ee:fe:b3:eb:46:83:7b:90:43:db:56:4b:75:84:2e:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1B:5A:33:26:41:60:92:7F:0E:FD:1B:DD:AA:F9:D5:C8:30:4A:09
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e322e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:2c:b2:66:57:3c:93:a3:97:1e:90:e2:61:7f:81:ba:35:a9:
         b1:3f:ce:33:5d:22:79:39:f3:78:1c:7b:37:b5:d8:ea:50:1e:
         f2:66:ee:9b:81:cb:57:11:c0:8a:5d:25:5a:38:a6:90:bc:20:
         a5:f6:cb:f3:79:2d:be:b8:30:5d:51:07:e9:c9:3a:36:a3:a7:
         08:46:e1:ce:82:81:9a:3b:b9:5c:31:0f:36:a4:6f:09:60:de:
         a7:c9:eb:d9:bf:ec:0a:70:97:c2:4a:9e:a2:f3:89:c0:24:bb:
         52:9d:1f:e6:68:c0:bb:63:fc:c5:79:f5:55:3e:3b:06:fd:25:
         02:2b:dc:ff:5a:53:5f:8b:a5:7d:45:e0:ed:5b:18:24:63:d3:
         39:27:06:84:93:c5:68:96:16:7d:1f:12:2b:33:96:92:75:41:
         0c:b5:a5:25:20:dd:50:03:d6:ac:be:25:bd:72:8f:6a:a4:96:
         53:e1:37:c8:2c:70:20:62:2e:6c:48:4b:93:e4:e8:56:26:52:
         3d:79:96:39:5e:1c:b1:33:29:8f:2d:e4:8f:ed:a9:9b:18:0a:
         2f:fe:2c:08:f9:b1:6b:fb:c8:a0:63:4a:01:65:23:7f:27:be:
         14:84:04:2f:04:d1:8d:cd:a0:c6:25:87:01:f2:c5:7e:aa:1e:
         60:a1:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:18 2025 by rpki-client