Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/3137392e34322e37372e302f32342d3234203d3e20323732393735.roa
File:                     3137392e34322e37372e302f32342d3234203d3e20323732393735.roa (raw, json)
Hash identifier:          At5GkBFW/XndTqmAjCQPMyQBX5YpcbJh31qSo+QF0g8=
Subject key identifier:   30:D4:B7:92:5E:87:8D:8C:BA:FA:21:62:7C:A0:82:E7:77:69:FD:6F
Certificate issuer:       /CN=CE01D4BCB10FB13F148DD75C0851F408D98BF9A4
Certificate serial:       517E6887F258C211E9A2C5706A9A0F8C57D4F3F9
Authority key identifier: CE:01:D4:BC:B1:0F:B1:3F:14:8D:D7:5C:08:51:F4:08:D9:8B:F9:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/3137392e34322e37372e302f32342d3234203d3e20323732393735.roa
Signing time:             Tue 04 Feb 2025 18:44:44 +0000
ROA not before:           Tue 04 Feb 2025 18:39:44 +0000
ROA not after:            Tue 03 Feb 2026 18:44:44 +0000
asID:                     272975
IP address blocks:        179.42.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:7e:68:87:f2:58:c2:11:e9:a2:c5:70:6a:9a:0f:8c:57:d4:f3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE01D4BCB10FB13F148DD75C0851F408D98BF9A4
        Validity
            Not Before: Feb  4 18:39:44 2025 GMT
            Not After : Feb  3 18:44:44 2026 GMT
        Subject: CN=30D4B7925E878D8CBAFA21627CA082E77769FD6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:53:e5:e9:e4:d5:a2:a4:d4:2b:68:15:6c:48:
                    31:ac:84:29:b0:b0:97:96:3e:66:37:47:7e:2e:b3:
                    6b:6c:4f:50:7c:eb:74:05:ae:ea:03:22:f2:71:95:
                    d5:b0:ef:8d:c4:6d:a2:f7:74:a4:ff:94:ea:10:f5:
                    51:59:cd:05:53:fa:94:ba:24:36:2e:f1:99:c6:20:
                    c7:4d:60:36:07:7a:a9:76:e5:85:20:22:59:6f:60:
                    41:e6:e6:fb:15:97:d2:f2:f2:06:a9:29:6c:71:a9:
                    64:2b:91:8d:10:af:26:eb:fd:d2:22:0a:32:a1:a4:
                    0b:78:ac:c6:e8:2c:7c:eb:4d:eb:50:ba:59:62:01:
                    6a:31:bf:23:4d:d0:fa:88:ff:50:38:7a:5e:bf:cb:
                    a6:45:0e:d5:ed:ce:9d:3f:48:b1:3c:4a:50:00:2b:
                    5c:b0:f3:58:c2:63:e4:64:61:9a:c2:b2:4e:a0:ef:
                    4f:69:5e:27:01:e6:75:de:8e:83:22:79:11:95:22:
                    cd:0d:7b:f0:31:01:5d:61:b9:2d:56:1f:26:61:4c:
                    f8:91:7c:22:53:9f:a2:53:1a:dd:bb:aa:71:b4:21:
                    e1:03:23:bd:2b:56:d9:56:ea:18:98:30:62:da:eb:
                    9a:ca:40:9c:6b:2b:db:e6:bd:ee:a3:6b:78:31:42:
                    b7:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D4:B7:92:5E:87:8D:8C:BA:FA:21:62:7C:A0:82:E7:77:69:FD:6F
            X509v3 Authority Key Identifier:
                keyid:CE:01:D4:BC:B1:0F:B1:3F:14:8D:D7:5C:08:51:F4:08:D9:8B:F9:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE01D4BCB10FB13F148DD75C0851F408D98BF9A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E5C475E9D16D1A38449B99D75EEA096F5AF7158A4E6B273E485D6DC957BDFD2/0/3137392e34322e37372e302f32342d3234203d3e20323732393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:c1:f9:44:1b:a7:d7:cf:99:03:da:29:60:87:f7:65:6c:97:
         b3:35:65:97:cc:8a:21:f4:eb:cb:f5:0d:56:b9:0a:96:ff:bd:
         b7:f1:62:43:65:c5:b8:fe:d5:bf:ea:99:89:7d:03:31:29:09:
         cb:5d:95:07:55:d2:cd:66:45:f7:68:b2:ef:b5:6c:db:24:fb:
         f2:e1:1b:d4:8b:95:36:59:9f:98:d1:be:56:59:f0:3c:27:e7:
         c8:c6:16:8c:d6:34:90:13:3c:60:45:af:29:9a:ec:c9:b9:fc:
         f9:a5:ca:f9:fc:34:1f:ef:f3:1f:a0:0f:20:a0:d0:e4:bd:c4:
         3f:2c:3b:94:fd:be:b0:2f:1d:60:71:2a:37:dd:c4:43:85:ce:
         50:3a:1a:7c:cd:99:b1:7a:98:6d:d3:62:b0:5e:af:5e:5e:5f:
         d2:2a:a5:7b:7b:59:08:59:06:5e:7c:1f:20:76:e4:c1:14:df:
         40:01:64:f5:76:94:4a:08:2b:d7:91:05:c4:ad:99:56:7d:d6:
         3f:45:9b:b0:92:ec:36:97:2a:d9:e5:95:66:8d:0e:3c:0d:4b:
         41:37:49:c7:a1:97:db:ae:05:26:1c:41:e9:eb:e7:a3:e7:8b:
         ce:dd:80:89:4f:ef:3f:20:f2:c7:ee:42:e6:a3:0d:95:ca:d6:
         1a:8b:9f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:05:14 2025 by rpki-client