Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3138203d3e2036353335.roa
File:                     3137392e342e302e302f31362d3138203d3e2036353335.roa (raw, json)
Hash identifier:          tDTLXvIa7hUJOUnp3C9MWZSz185oh9dZYeu8Q/ZIONM=
Subject key identifier:   61:E7:0E:59:3B:FB:35:7A:77:89:61:BA:96:F4:7B:41:19:A6:DE:4D
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       31EB295BA57D592FB201BA35E6C2263A56ACFC20
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3138203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 18:12:09 +0000
ROA not before:           Tue 04 Feb 2025 18:07:09 +0000
ROA not after:            Tue 03 Feb 2026 18:12:09 +0000
asID:                     6535
IP address blocks:        179.4.0.0/16 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:eb:29:5b:a5:7d:59:2f:b2:01:ba:35:e6:c2:26:3a:56:ac:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:09 2025 GMT
            Not After : Feb  3 18:12:09 2026 GMT
        Subject: CN=61E70E593BFB357A778961BA96F47B4119A6DE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:1e:d1:90:d4:83:2b:e8:06:15:d7:09:1a:
                    49:d7:de:a2:43:a1:b9:0f:0c:1a:5d:f2:cc:39:8a:
                    ab:72:77:a9:d9:f4:40:8b:b0:3e:6b:e3:cc:d3:61:
                    00:10:be:24:91:ac:de:16:69:68:64:d8:b7:d4:07:
                    c5:63:38:e9:72:2a:81:71:a0:b2:a2:31:28:bc:f5:
                    e8:8f:b7:6b:01:6a:be:93:db:9d:4d:00:c6:08:3a:
                    4e:3e:1c:3f:05:fe:ef:bc:fa:87:c4:40:5a:a8:fe:
                    cd:46:0e:0a:36:2e:c2:a9:72:01:fa:a2:c8:be:7c:
                    41:a8:fe:9f:47:6c:7f:e3:c9:b0:56:87:ec:22:3f:
                    d1:60:0a:9b:4f:39:7d:c7:0c:f4:63:4d:d0:64:dc:
                    da:b2:25:46:ce:62:3e:2f:33:73:0c:84:a8:3c:c9:
                    7b:66:3b:e0:84:f7:58:3f:db:f4:1d:a7:50:c0:bf:
                    bd:88:35:55:f4:e3:2b:49:2b:e7:fe:4f:d1:9a:f9:
                    88:5d:98:28:63:31:fd:e7:17:cc:a1:fe:f7:d3:4a:
                    2b:ad:9e:c9:6e:69:91:d6:84:cb:31:1a:e3:b4:93:
                    de:94:c8:fc:f7:ca:91:0d:68:1f:a7:9d:c2:67:69:
                    4d:9c:56:e0:3f:d2:e8:89:c4:7d:1a:21:45:0e:72:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E7:0E:59:3B:FB:35:7A:77:89:61:BA:96:F4:7B:41:19:A6:DE:4D
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3137392e342e302e302f31362d3138203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         18:00:31:d7:d7:32:99:7a:73:da:63:fd:94:67:ed:13:70:00:
         1b:49:cf:95:83:52:78:9b:30:18:c7:b2:b0:bd:05:42:94:01:
         d7:ad:92:01:56:de:13:cb:d9:1a:fd:2a:04:a0:9b:cf:15:5f:
         0b:77:63:e4:af:0e:27:b5:53:38:83:0e:49:2d:55:1f:f2:9a:
         37:9f:7e:b7:1f:45:ed:50:57:de:de:69:ae:bb:cf:f3:db:e1:
         61:23:a9:34:8d:dd:66:9b:d1:f9:97:69:c3:92:d4:4a:86:ac:
         f5:9b:5b:a7:39:3f:ce:35:f0:b9:8b:b1:19:71:be:4c:4b:6b:
         77:9f:b4:14:06:6a:91:36:f3:d0:15:85:18:99:d6:81:06:aa:
         ea:cc:68:7c:59:67:78:ec:6f:8f:0e:dd:7f:b8:f9:d6:27:3a:
         92:8a:7f:85:28:01:c3:04:94:3b:31:fb:39:f2:a9:c2:ab:19:
         39:c8:5f:87:11:cb:93:6c:9d:02:70:4a:71:f7:56:c0:55:4a:
         b4:60:9d:7e:23:79:d9:f8:96:4e:72:11:2c:23:4b:fe:1f:e2:
         9c:a4:8d:ce:34:f5:ec:c3:7c:65:0c:d0:c6:94:f3:e6:94:e6:
         f3:a8:4e:12:b1:1e:76:75:c4:00:da:53:ec:c7:67:70:a3:e8:
         42:7e:26:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:59 2025 by rpki-client