Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303134.roa
File:                     3137392e302e31342e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          pRWNhi9TKgsPclpmOIGqQfg4Mm9sbVtvMumTa1H2Nh4=
Subject key identifier:   D8:51:75:21:9D:0F:90:4C:19:44:B7:B2:56:6C:B0:EA:03:41:4A:15
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       0C529C6760A9505A7B5FE0B0385E489F77ED8780
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:37:15 +0000
ROA not before:           Tue 04 Feb 2025 18:32:15 +0000
ROA not after:            Tue 03 Feb 2026 18:37:15 +0000
asID:                     11014
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:9c:67:60:a9:50:5a:7b:5f:e0:b0:38:5e:48:9f:77:ed:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:15 2025 GMT
            Not After : Feb  3 18:37:15 2026 GMT
        Subject: CN=D85175219D0F904C1944B7B2566CB0EA03414A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7d:18:2b:26:d5:97:7d:be:da:f0:79:a3:05:
                    c9:f9:ac:2a:64:f9:03:7b:db:aa:a9:cf:dd:44:32:
                    d9:19:48:74:59:12:52:69:96:5c:93:48:43:74:1f:
                    5a:4a:83:90:73:e0:59:de:45:2e:56:60:f9:35:14:
                    d7:93:46:8c:3d:5d:75:d1:3d:12:17:31:84:a1:e4:
                    37:ce:85:f4:b7:ef:3c:18:c8:81:fc:32:a4:bc:12:
                    5f:62:73:98:a4:db:dc:3c:ac:db:ae:a3:6e:2d:dc:
                    ab:ed:a1:e2:72:67:ee:16:a4:04:43:39:20:c4:f9:
                    cf:af:ee:f9:f8:87:c9:b0:d8:58:72:48:b8:17:fc:
                    06:d8:9e:d7:37:6a:9c:b9:64:3f:40:7c:a5:92:9e:
                    0d:25:32:55:0a:36:48:2b:c8:8e:41:3e:a8:32:a5:
                    13:41:95:f7:5c:1b:59:f8:1a:9e:a9:bc:3f:dd:d8:
                    94:38:d6:c6:65:f1:bb:ce:77:b5:49:fa:cc:e2:b9:
                    f8:d3:f4:d6:79:11:35:6e:49:b7:b6:35:fa:c3:0c:
                    dd:d1:9a:41:73:2a:2b:e3:26:c5:3d:59:1e:4d:6a:
                    1a:0d:ba:4a:79:3d:97:a7:84:10:54:b1:f1:e1:00:
                    37:9a:46:ba:6d:5a:2f:2e:50:cc:ae:7a:e0:27:12:
                    1b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:75:21:9D:0F:90:4C:19:44:B7:B2:56:6C:B0:EA:03:41:4A:15
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:23:7b:f6:9e:44:45:77:c8:70:30:24:0c:c2:ad:81:18:
         62:72:62:04:fc:97:e4:22:20:84:d9:76:c3:b4:df:3b:53:16:
         02:15:fa:52:b5:cd:96:12:30:af:c7:4c:90:91:a1:2c:1d:ae:
         62:9c:62:5c:d6:33:ab:d0:2a:06:fe:91:36:ee:80:1e:df:10:
         76:e5:0d:3a:bc:a6:30:47:8d:b5:9b:d9:00:2c:76:da:13:63:
         29:25:17:05:c9:f2:90:55:82:2a:3b:1c:d5:33:2e:b4:0f:66:
         4b:da:6b:53:d3:13:90:5b:c2:55:44:77:52:50:06:21:03:fc:
         94:1b:b4:97:5a:51:fd:24:b5:cc:bc:da:a9:30:10:07:8f:28:
         da:f1:23:fd:33:98:8d:05:7d:3f:8a:bb:66:c0:28:d3:8e:4a:
         4f:dd:01:dc:da:aa:f8:d3:76:e3:92:31:9e:4f:5c:53:d2:b7:
         bc:a8:d7:92:9a:a7:9c:29:67:30:13:c6:4f:35:63:98:57:7f:
         7b:e4:50:d3:ad:d3:5c:71:6d:a9:ea:b1:da:27:30:cb:a8:03:
         e0:d3:a8:6d:09:50:30:82:2e:9c:84:80:b9:0c:9a:1c:31:08:
         59:ed:06:1a:20:9b:e7:8c:35:9e:46:e5:87:3f:6d:ee:5b:ca:
         9a:e5:80:ad
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUDFKcZ2CpUFp7X+CwOF5In3fth4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4M0I1RjVBRERFMjQ2MUUwMDdERENGNzlBNDUzNEFG
QzdBNTc3RjAeFw0yNTAyMDQxODMyMTVaFw0yNjAyMDMxODM3MTVaMDMxMTAvBgNV
BAMTKEQ4NTE3NTIxOUQwRjkwNEMxOTQ0QjdCMjU2NkNCMEVBMDM0MTRBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTfRgrJtWXfb7a8HmjBcn5rCpk
+QN726qpz91EMtkZSHRZElJpllyTSEN0H1pKg5Bz4FneRS5WYPk1FNeTRow9XXXR
PRIXMYSh5DfOhfS37zwYyIH8MqS8El9ic5ik29w8rNuuo24t3KvtoeJyZ+4WpARD
OSDE+c+v7vn4h8mw2FhySLgX/AbYntc3apy5ZD9AfKWSng0lMlUKNkgryI5BPqgy
pRNBlfdcG1n4Gp6pvD/d2JQ41sZl8bvOd7VJ+sziufjT9NZ5ETVuSbe2NfrDDN3R
mkFzKivjJsU9WR5NahoNukp5PZenhBBUsfHhADeaRrptWi8uUMyueuAnEhuXAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU2FF1IZ0PkEwZRLeyVmyw6gNBShUwHwYDVR0j
BBgwFoAUEoO19a3eJGHgB93PeaRTSvx6V38wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zRDBBMkUxRkM0NEI1M0Y0RDAzMDkwMUNEQ0NFRjYxRTQ5
QTg0Rjk5NTQ3RjY2RjA5MzQyNzkwQkFFMDMzQjVELzAvMTI4M0I1RjVBRERFMjQ2
MUUwMDdERENGNzlBNDUzNEFGQzdBNTc3Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjgzQjVGNUFEREUyNDYxRTAw
N0REQ0Y3OUE0NTM0QUZDN0E1NzdGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0QwQTJFMUZDNDRCNTNGNEQwMzA5MDFDRENDRUY2MUU0OUE4NEY5OTU0
N0Y2NkYwOTM0Mjc5MEJBRTAzM0I1RC8wLzMxMzczOTJlMzAyZTMxMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMxMzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAswAOMA0GCSqG
SIb3DQEBCwUAA4IBAQBr6SN79p5ERXfIcDAkDMKtgRhicmIE/JfkIiCE2XbDtN87
UxYCFfpStc2WEjCvx0yQkaEsHa5inGJc1jOr0CoG/pE27oAe3xB25Q06vKYwR421
m9kALHbaE2MpJRcFyfKQVYIqOxzVMy60D2ZL2mtT0xOQW8JVRHdSUAYhA/yUG7SX
WlH9JLXMvNqpMBAHjyja8SP9M5iNBX0/irtmwCjTjkpP3QHc2qr403bjkjGeT1xT
0re8qNeSmqecKWcwE8ZPNWOYV3975FDTrdNccW2p6rHaJzDLqAPg06htCVAwgi6c
hIC5DJocMQhZ7QYaIJvnjDWeRuWHP23uW8qa5YCt
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:06 2025 by rpki-client