Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203135313639.roa
File:                     3137392e302e31342e302f32342d3234203d3e203135313639.roa (raw, json)
Hash identifier:          sIWkL8wecma5KzWS/87luqNxb6kE6IWg/rYFTwHtH+A=
Subject key identifier:   45:FA:34:76:F4:C6:E9:7D:19:B5:40:E5:84:AC:4A:5B:84:78:54:47
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       27EADD5B5E971F7AF2592CB69F482A1EE823E1F6
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203135313639.roa
Signing time:             Tue 04 Feb 2025 18:37:06 +0000
ROA not before:           Tue 04 Feb 2025 18:32:06 +0000
ROA not after:            Tue 03 Feb 2026 18:37:06 +0000
asID:                     15169
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ea:dd:5b:5e:97:1f:7a:f2:59:2c:b6:9f:48:2a:1e:e8:23:e1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:06 2025 GMT
            Not After : Feb  3 18:37:06 2026 GMT
        Subject: CN=45FA3476F4C6E97D19B540E584AC4A5B84785447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:ac:da:df:be:39:0c:46:a0:42:41:e9:7a:
                    cb:40:eb:a6:8c:a1:b0:f9:fc:fa:95:11:8f:71:f7:
                    15:0f:11:a0:ab:14:ca:10:a4:5e:62:6b:14:af:96:
                    b0:f0:c9:4d:da:68:91:a9:ee:fc:56:55:ab:4f:4b:
                    c1:18:1b:d7:fc:d5:0b:e4:aa:8b:e3:88:b3:c9:4a:
                    bc:f4:31:f0:94:9c:0f:17:62:a6:35:f8:f6:d4:f5:
                    14:26:56:c6:7f:9f:45:57:fa:80:2a:49:30:3e:19:
                    cd:e9:77:30:9e:28:2b:38:fc:ea:dd:93:aa:56:81:
                    4c:1b:dd:fc:70:60:7a:2b:89:c2:37:90:93:7a:fd:
                    eb:8d:3a:da:39:05:74:b1:c8:2b:70:b5:ac:db:d0:
                    14:43:d0:e9:fe:8d:55:5c:ef:6e:e8:b5:d3:04:8e:
                    92:78:e4:7b:4c:09:89:9a:75:fd:1f:cb:1f:49:f3:
                    f1:48:e6:64:58:96:d9:5a:65:a6:70:3d:80:c1:c3:
                    87:4d:58:c4:63:68:87:e8:21:db:5d:04:25:ae:cd:
                    d5:c8:8e:3a:a1:ea:40:90:13:f6:1f:ff:0c:b8:41:
                    f3:72:73:e0:0e:2c:aa:14:ea:df:12:3b:bc:6a:54:
                    22:7b:33:31:7e:04:52:da:91:10:a1:93:53:02:47:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:34:76:F4:C6:E9:7D:19:B5:40:E5:84:AC:4A:5B:84:78:54:47
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203135313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:89:4d:e4:be:c3:e7:00:d9:db:a2:64:3e:93:87:17:22:53:
         92:cb:5f:58:33:60:9a:e3:0e:34:e2:ea:13:92:d9:c0:1a:27:
         e7:45:12:90:b3:54:56:7b:c2:c6:ad:22:76:1b:31:fd:ee:90:
         dc:03:55:84:0e:06:01:77:87:8d:cf:e4:cf:51:da:e2:c5:df:
         d4:f9:54:38:70:3f:34:1e:a7:7d:94:f9:64:7c:da:14:a1:c1:
         5a:9b:a2:2c:6f:bb:d5:1b:ad:8e:c2:16:b1:d4:ed:af:2c:8d:
         4b:61:d3:76:87:58:ac:ee:32:6c:83:0b:8d:1c:b3:9d:88:f7:
         c0:0c:2d:62:1f:70:fc:8d:c5:44:dd:c4:a9:88:3d:d3:c6:7e:
         d8:19:cb:1a:e5:ee:c3:71:0b:72:d9:8a:8e:35:27:46:0e:d3:
         80:84:f4:0e:55:f0:24:23:2a:90:fd:d4:e5:f8:b2:10:47:c9:
         db:86:0b:4b:15:e7:34:7d:b0:24:63:58:04:72:7a:c3:d1:b8:
         a0:8a:cb:70:15:92:25:0e:7c:a8:8f:1a:37:58:6f:82:d9:0b:
         cf:7a:d9:43:f4:75:2f:ef:82:19:5f:91:da:c7:f3:83:1b:a6:
         87:7a:ba:a9:25:4d:65:3e:8c:8d:52:5d:d0:b1:81:3a:f7:ba:
         08:62:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:04:34 2025 by rpki-client