Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/3137392e36332e37322e302f32322d3234203d3e20323732383130.roa
File:                     3137392e36332e37322e302f32322d3234203d3e20323732383130.roa (raw, json)
Hash identifier:          5oMLy7NiqEE6p9MpFCOhqtlpccxPgVxbWA7WYZti2TU=
Subject key identifier:   3A:70:58:0E:A5:E0:77:CE:21:46:D5:A0:F8:1C:CB:9B:92:78:2D:50
Certificate issuer:       /CN=5B867361525607203EC4E746C6F22CC6EB34BE67
Certificate serial:       20DF61A787E05FCDD7087729113C348EC62FC0D1
Authority key identifier: 5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/3137392e36332e37322e302f32322d3234203d3e20323732383130.roa
Signing time:             Tue 04 Feb 2025 18:35:47 +0000
ROA not before:           Tue 04 Feb 2025 18:30:47 +0000
ROA not after:            Tue 03 Feb 2026 18:35:47 +0000
asID:                     272810
IP address blocks:        179.63.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:df:61:a7:87:e0:5f:cd:d7:08:77:29:11:3c:34:8e:c6:2f:c0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B867361525607203EC4E746C6F22CC6EB34BE67
        Validity
            Not Before: Feb  4 18:30:47 2025 GMT
            Not After : Feb  3 18:35:47 2026 GMT
        Subject: CN=3A70580EA5E077CE2146D5A0F81CCB9B92782D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:5e:1f:9f:ee:fe:d4:a2:3e:7d:d5:a7:91:
                    42:4c:b7:17:bd:86:b0:cf:73:72:38:b8:45:a7:f5:
                    c1:7e:bb:3f:5b:13:26:0c:b2:90:be:19:b7:62:b3:
                    69:ae:e5:4a:7e:2f:bf:d9:23:d5:cf:75:75:e7:7d:
                    9b:4a:c5:48:0b:95:f9:07:6d:e6:5e:3b:b0:10:ff:
                    7f:88:36:2c:c8:51:8b:a7:b4:12:3a:2a:1a:f7:30:
                    5c:5f:bd:55:aa:5f:00:99:d6:91:d1:11:83:44:3f:
                    11:8a:72:8a:36:60:21:15:7c:9e:9d:a0:e4:01:6c:
                    95:86:04:ec:c6:89:7c:38:37:fd:f5:c5:8b:d0:21:
                    6f:1b:25:ac:09:0f:74:a5:a4:d4:f7:c6:3a:68:60:
                    8e:9b:f8:ab:c5:d7:74:d7:56:d5:f0:df:44:b8:d4:
                    4e:6e:88:fc:d0:e7:95:72:e6:16:3a:d7:23:2a:ae:
                    77:fc:da:89:23:5e:ae:19:7d:93:a9:99:64:fe:d4:
                    7b:ae:f4:4e:6a:ac:98:57:73:ae:b2:ff:32:54:99:
                    b8:d2:2b:28:52:05:9b:15:8b:d5:ee:37:d5:f5:34:
                    ac:80:fb:2e:67:11:40:6b:fb:57:0b:6a:ed:f8:c8:
                    2f:3d:90:d7:7a:9e:28:e5:3f:1a:bd:4c:77:a5:2a:
                    6c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:58:0E:A5:E0:77:CE:21:46:D5:A0:F8:1C:CB:9B:92:78:2D:50
            X509v3 Authority Key Identifier:
                keyid:5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/3137392e36332e37322e302f32322d3234203d3e20323732383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:33:08:f5:87:de:b4:80:20:53:0e:b3:37:90:1d:0b:9a:6c:
         7a:f9:db:48:42:71:bd:9b:12:dc:be:56:4f:94:eb:cf:f7:6a:
         0a:03:9e:f7:aa:65:07:b0:cb:bf:94:b1:a9:ee:71:09:08:16:
         83:82:54:4c:b8:bb:ef:77:23:e1:fd:76:26:3e:60:81:52:2d:
         25:a6:6d:17:77:8f:b8:06:ec:df:36:c2:88:f0:17:68:96:a4:
         06:0b:a6:9f:8d:ee:9b:16:3a:be:e8:9e:cb:55:b4:0f:cc:92:
         7c:fc:0a:a0:f7:e9:ba:31:f1:2c:48:75:12:a9:9b:65:d3:af:
         4f:20:d3:30:01:54:a2:f1:0b:b1:7c:03:c3:ec:bd:c0:75:5b:
         63:bd:84:85:4f:06:bb:9c:85:8e:3d:dc:f6:4a:cd:be:c5:eb:
         d7:df:34:ce:16:59:30:38:d1:db:8f:60:a1:6d:49:6a:12:b3:
         e2:e0:4d:bc:94:05:f1:96:2d:09:9e:a9:e9:2d:47:56:44:f4:
         93:01:20:85:91:d0:20:ae:7d:39:60:d3:81:88:62:71:c1:72:
         dd:03:f9:9e:7b:0c:0c:b1:fe:d6:88:31:54:1e:69:84:6b:bc:
         3e:5d:c1:89:be:58:fe:14:a8:c4:ac:71:a1:7e:85:75:6d:7c:
         3a:ea:42:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:50 2025 by rpki-client