Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3232342e302f31392d3139203d3e203130323639.roa
File:                     3137392e34322e3232342e302f31392d3139203d3e203130323639.roa (raw, json)
Hash identifier:          4TTcahEwZMr5U7jJ6hOTnKy0lrzeA9hmwsV4RIblH7E=
Subject key identifier:   E8:FD:6E:82:FA:FD:17:37:60:1C:2B:3A:E6:47:21:A9:9D:98:CB:DD
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       30AA646774B8869B01656CD6542F70D4E470A9EA
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3232342e302f31392d3139203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:15 +0000
ROA not before:           Tue 04 Feb 2025 18:07:15 +0000
ROA not after:            Tue 03 Feb 2026 18:12:15 +0000
asID:                     10269
IP address blocks:        179.42.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:aa:64:67:74:b8:86:9b:01:65:6c:d6:54:2f:70:d4:e4:70:a9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:15 2025 GMT
            Not After : Feb  3 18:12:15 2026 GMT
        Subject: CN=E8FD6E82FAFD1737601C2B3AE64721A99D98CBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:35:87:48:6f:e5:9f:b8:c5:6b:66:90:ab:
                    08:84:c5:61:d7:db:94:b9:63:a4:a6:2b:4d:bd:6b:
                    d4:6d:15:4e:cf:f5:c8:4b:b1:95:99:6f:7f:8c:68:
                    bf:ed:7b:29:20:f4:b9:47:11:bc:87:c5:78:22:37:
                    c3:f3:57:01:57:08:92:82:7d:19:9e:d9:84:d5:cb:
                    5f:81:df:84:ec:2c:b9:b2:2b:ea:9e:9d:13:14:72:
                    19:7b:04:9f:e6:a8:da:e0:26:33:f8:88:7f:ed:6b:
                    d4:7b:e2:ef:f1:c0:68:1b:c5:5b:ff:ab:c6:73:da:
                    32:3d:f1:bd:25:16:ab:76:d7:a6:24:02:cb:69:3f:
                    90:4e:0d:aa:75:fb:a1:38:86:4b:80:ba:3a:2c:fa:
                    51:7e:f1:66:b3:ce:d2:7c:65:02:1b:d7:ef:65:2d:
                    2b:5c:fd:d6:b5:89:c6:a1:09:a0:23:74:b4:47:f3:
                    d4:20:32:e3:bf:be:9c:dc:44:10:f6:15:01:f2:31:
                    a7:6e:f8:5f:7a:b1:35:93:62:0e:7b:15:45:cd:41:
                    c7:da:d9:87:a3:93:4e:98:42:59:19:4c:2b:71:8a:
                    b4:bc:9b:66:7c:de:8e:09:92:23:27:75:27:7b:a7:
                    dd:48:41:81:9d:d4:32:20:8d:6a:15:d1:24:b6:e7:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FD:6E:82:FA:FD:17:37:60:1C:2B:3A:E6:47:21:A9:9D:98:CB:DD
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3137392e34322e3232342e302f31392d3139203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:ff:ba:1b:a0:46:e1:f9:b8:73:a2:5f:b5:c6:86:ab:6d:71:
         1c:0f:ef:9c:0e:b0:00:e2:b5:26:32:83:a0:1c:2c:80:3d:16:
         aa:54:6b:3b:11:47:4f:fd:65:5a:7c:de:da:ee:18:ee:eb:5d:
         14:0c:82:72:bd:3a:4f:53:a6:67:64:f9:e6:f2:e1:4e:fe:0d:
         c9:b4:1f:99:75:69:d2:1f:57:2d:05:7e:18:e8:5c:1b:56:e2:
         0e:4e:b4:f4:60:b7:13:db:f5:05:c1:2f:7b:1b:78:fc:8a:73:
         47:34:14:72:5d:6d:40:ad:75:1f:48:5d:a1:65:e7:df:42:fe:
         5b:06:9f:b5:b9:66:39:f0:ff:9e:bb:cf:4d:17:02:16:9d:61:
         ef:66:3f:36:b3:c3:94:03:a5:90:2e:17:a4:61:b6:de:0e:c9:
         0f:fa:d3:2b:10:14:4d:94:1d:ff:56:b1:98:5f:8e:bd:d4:57:
         bf:a1:0d:3b:70:43:23:c4:01:fa:36:f2:47:e7:d6:b7:d6:de:
         51:04:53:dd:cb:0f:89:16:eb:6f:1c:15:19:c9:fb:b8:5e:eb:
         33:1d:f9:36:d7:e9:3f:b2:40:f9:d6:e3:86:c3:09:ba:2b:75:
         1e:cc:a5:99:1e:62:50:cf:83:68:2d:da:37:f9:79:ea:36:62:
         17:b8:54:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:03 2025 by rpki-client