Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3132382e302f32312d3233203d3e203237383336.roa
File:                     3137392e332e3132382e302f32312d3233203d3e203237383336.roa (raw, json)
Hash identifier:          t4CN4wlg+b6PC1Tvpb+x36719mskbFZ7sPsR4BTaimk=
Subject key identifier:   10:D7:22:A8:A8:71:69:E1:D9:31:A7:03:83:2E:B7:D1:18:B4:02:F9
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4C8529CB7B61B9454C1B4D612F9D871F27B60F87
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3132382e302f32312d3233203d3e203237383336.roa
Signing time:             Tue 04 Feb 2025 18:12:08 +0000
ROA not before:           Tue 04 Feb 2025 18:07:08 +0000
ROA not after:            Tue 03 Feb 2026 18:12:08 +0000
asID:                     27836
IP address blocks:        179.3.128.0/21 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:85:29:cb:7b:61:b9:45:4c:1b:4d:61:2f:9d:87:1f:27:b6:0f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:08 2025 GMT
            Not After : Feb  3 18:12:08 2026 GMT
        Subject: CN=10D722A8A87169E1D931A703832EB7D118B402F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cc:64:a9:35:86:b6:1d:97:2c:51:d7:ed:5f:
                    45:25:fc:15:8f:51:49:ec:b9:6e:be:d1:07:4c:c7:
                    04:a4:5c:f1:56:37:22:8e:ea:e2:f2:3b:45:a0:e5:
                    09:18:44:e7:cf:69:5f:a5:c4:e6:e0:a2:0e:85:24:
                    c4:e7:1c:a3:0b:2b:a7:9b:97:87:77:da:81:ec:c6:
                    7e:6a:99:31:c1:8c:5a:23:9e:46:36:fc:8f:16:cd:
                    28:d4:81:6b:4d:b4:c1:ac:98:5d:9a:c8:9a:03:f4:
                    40:08:45:37:b1:f0:71:5b:38:ca:81:db:80:53:bc:
                    b9:80:54:9d:41:bb:2c:1b:d2:40:95:d4:1b:14:f8:
                    f0:f1:d9:4a:87:0a:f9:16:f5:ca:3e:a6:fe:ed:b3:
                    84:99:2f:fe:0f:2e:ff:87:46:55:4e:ef:73:68:7b:
                    c2:65:3b:ca:39:1e:10:d8:78:0e:4e:7b:bd:a5:e1:
                    97:39:39:cc:44:54:93:99:d7:7f:d3:27:4b:58:e5:
                    0d:9a:8e:41:8b:27:5d:f8:1a:bd:05:71:a8:ee:a7:
                    db:7b:70:0b:55:f0:b0:a2:ac:e6:ed:18:bd:76:4c:
                    16:b6:04:3d:11:93:be:f5:92:53:a1:20:5c:98:11:
                    af:4b:6d:da:39:9b:05:67:a6:c6:54:fb:02:f2:ce:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D7:22:A8:A8:71:69:E1:D9:31:A7:03:83:2E:B7:D1:18:B4:02:F9
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e332e3132382e302f32312d3233203d3e203237383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.3.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:51:46:09:ae:da:39:eb:fc:72:45:58:48:89:6b:5b:4b:05:
         8a:80:9b:99:f0:7d:4d:60:ab:f9:0e:e8:23:e5:87:a7:b0:92:
         b0:f4:ec:c9:6d:49:50:02:2f:73:11:a9:33:4e:30:e6:ca:bc:
         f5:bb:66:fe:a4:9e:cd:c7:8e:06:b8:aa:94:5d:4b:f7:d3:d7:
         6a:63:ce:32:80:b4:4d:61:db:aa:fd:32:75:7c:a7:56:1e:c7:
         ec:7b:1b:53:b8:50:31:fe:64:54:93:27:7f:ec:b9:d3:0f:ac:
         7f:27:65:dc:4f:fc:f4:61:98:ba:5a:21:9e:e7:1d:57:4e:7c:
         f2:36:6e:28:75:ed:64:3a:ce:d8:0b:92:9d:c4:a6:da:e8:7b:
         69:0e:09:07:fb:aa:b5:9f:85:9a:a5:2e:a9:27:e1:f6:4d:7a:
         1a:a8:3c:36:ed:3d:1d:e0:49:4d:ec:ac:b6:9f:36:82:db:cb:
         6d:61:a6:0b:33:57:fe:db:8e:8e:6b:fe:73:8e:74:63:a0:5c:
         c5:8c:b1:78:f7:f7:06:f1:cb:d9:14:8c:00:8f:49:6f:51:aa:
         7a:b7:8b:7a:72:a9:3e:f4:e0:23:f6:ac:7b:04:4d:4a:b5:a4:
         ef:fd:da:1a:f4:70:79:44:fd:d9:31:48:ff:de:09:74:64:e7:
         f6:55:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:52 2025 by rpki-client