Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3137322e302f32322d3234203d3e20323633383232.roa
File:                     3137392e36322e3137322e302f32322d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          KxZkinvN5vSQ0s0WcL2xJ2s7vAyjTcO4F6xbGDmldjo=
Subject key identifier:   60:DE:43:6C:90:70:0A:82:79:AC:B9:19:7E:D4:5A:63:72:77:EC:10
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       76F398D38F6BEC45E168F2DB5D84C84D93E60DF5
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3137322e302f32322d3234203d3e20323633383232.roa
Signing time:             Tue 04 Feb 2025 18:30:32 +0000
ROA not before:           Tue 04 Feb 2025 18:25:32 +0000
ROA not after:            Tue 03 Feb 2026 18:30:32 +0000
asID:                     263822
IP address blocks:        179.62.172.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f3:98:d3:8f:6b:ec:45:e1:68:f2:db:5d:84:c8:4d:93:e6:0d:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:32 2025 GMT
            Not After : Feb  3 18:30:32 2026 GMT
        Subject: CN=60DE436C90700A8279ACB9197ED45A637277EC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:ca:17:8a:3b:a0:78:34:94:ae:55:da:8b:
                    b0:5b:9c:cd:16:32:e3:3f:3a:5c:2c:4e:48:65:e8:
                    da:f3:f1:90:34:31:2d:10:cc:08:23:e8:19:7a:b9:
                    7f:e8:d2:76:9a:9f:b9:c2:07:68:54:2d:63:92:e7:
                    1e:60:19:aa:32:48:ab:d8:7a:bc:fa:c7:46:1b:be:
                    8a:8a:8d:4a:8e:ba:c1:55:c3:ac:cb:6c:72:5c:14:
                    32:51:99:8a:3f:ce:19:dc:fa:b2:2e:b4:de:9d:3f:
                    be:32:bb:49:ad:7a:3c:fb:6f:60:fe:53:e8:f2:74:
                    e5:6a:07:f7:2c:5d:5e:5c:f6:d9:da:21:6d:ae:a4:
                    29:9e:bb:4d:9f:93:98:8b:e8:70:a7:00:06:73:b2:
                    30:2e:45:d4:eb:1c:1a:65:d7:c5:5c:44:01:10:a1:
                    6d:41:1d:0a:b6:26:aa:dc:6c:b2:e3:7e:7b:38:5b:
                    73:54:03:58:4f:4c:83:fa:2d:2a:4c:c9:d5:2f:99:
                    10:41:2f:27:a0:5d:bf:9c:c3:00:05:e5:b7:d4:fa:
                    20:b8:a4:9c:fe:16:0a:cc:4f:1b:9b:6a:f7:df:dd:
                    ba:46:98:fe:ba:69:f8:dc:d2:28:eb:db:7e:8b:dc:
                    b1:04:af:0b:74:89:7f:13:1e:a1:49:22:5e:37:4a:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DE:43:6C:90:70:0A:82:79:AC:B9:19:7E:D4:5A:63:72:77:EC:10
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3137322e302f32322d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:ce:3f:a2:b1:4c:e0:ec:85:56:25:a1:f7:4f:eb:a0:3e:
         5a:f4:9b:41:0e:af:79:28:7e:46:ed:7a:9e:cd:e0:fc:52:a3:
         8a:d2:22:f5:32:b0:c7:c5:4d:cf:78:99:57:c4:5d:88:02:54:
         b5:3a:f3:bd:00:1f:2c:f4:d4:05:40:62:6e:88:6d:bf:5a:84:
         be:af:56:3f:b2:94:6d:3e:27:c2:ce:ea:75:c9:7e:f9:b7:88:
         18:c4:e3:7d:a6:a7:98:ef:eb:d4:f4:97:78:bd:10:f7:f3:f3:
         5a:30:75:58:34:cd:2f:48:20:7c:34:22:64:fd:11:29:44:1a:
         c8:81:fe:9a:67:e5:a9:68:14:26:ab:20:6e:ba:61:a6:c5:a8:
         fa:07:be:af:e8:d7:fe:3e:a4:60:3b:eb:79:08:02:e7:4e:1c:
         13:49:40:cf:90:7f:37:b4:ef:ab:68:c4:a9:10:b6:e7:73:a3:
         49:08:86:f8:79:ce:2e:a4:f9:f7:e0:87:a7:5c:68:00:3c:64:
         78:78:6e:54:5e:05:b3:53:dd:61:ce:ee:24:cd:56:ed:83:07:
         cf:71:6c:14:b6:28:12:7d:f3:15:cc:de:69:b2:1f:22:76:f2:
         02:0c:69:18:84:04:8e:41:6d:bc:03:54:f4:8b:ab:1f:a7:b4:
         50:26:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:51 2025 by rpki-client