Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e20323131383636.roa
File:                     3137392e302e31342e302f32342d3234203d3e20323131383636.roa (raw, json)
Hash identifier:          ExV/6oXRiQCj1XRvFE4+rGSjQW8KZtik35UqBADxf3A=
Subject key identifier:   E3:86:3E:81:70:91:DB:06:E9:B8:9E:A6:C3:1F:0F:B3:50:57:53:13
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       748FD131C781B74355DB4C2C38FECC4F977DD9D8
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e20323131383636.roa
Signing time:             Tue 04 Feb 2025 18:37:16 +0000
ROA not before:           Tue 04 Feb 2025 18:32:16 +0000
ROA not after:            Tue 03 Feb 2026 18:37:16 +0000
asID:                     211866
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:8f:d1:31:c7:81:b7:43:55:db:4c:2c:38:fe:cc:4f:97:7d:d9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:16 2025 GMT
            Not After : Feb  3 18:37:16 2026 GMT
        Subject: CN=E3863E817091DB06E9B89EA6C31F0FB350575313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:14:f8:da:b3:6d:5f:a4:15:9d:59:7b:da:92:
                    20:de:00:fe:42:cb:e4:e1:93:3f:17:73:d4:09:9c:
                    e4:45:d0:64:ea:8b:f1:3a:c9:89:48:2c:e2:89:b7:
                    86:04:a2:45:6e:74:43:db:59:5a:4c:b0:e7:10:9d:
                    3e:a3:68:dd:c4:0d:23:48:fa:ce:9b:e6:95:12:b2:
                    de:4c:10:38:04:57:fc:51:aa:b2:b0:87:df:29:bc:
                    07:9b:ae:50:9e:2f:fb:9a:af:99:b8:01:49:37:7d:
                    bb:57:75:ef:0b:5b:1f:66:11:12:b7:e7:6b:b6:bf:
                    0f:2d:4d:0a:59:b2:9e:75:65:b7:f9:1b:da:f5:ba:
                    1d:3a:8a:51:b3:4f:5d:26:7a:15:c0:72:ce:cb:a2:
                    de:09:2f:95:0d:24:1c:2f:0d:db:77:50:bb:1e:8f:
                    f5:db:ad:13:9b:d5:7e:25:d2:b4:20:81:67:cf:1d:
                    8c:98:1a:d5:fb:71:65:83:dd:1c:d4:13:da:9a:25:
                    ec:b0:ae:96:47:b7:3f:29:fb:2c:20:92:76:8a:11:
                    83:d4:53:b9:b4:75:f3:37:ae:5c:ac:ec:c7:78:46:
                    e0:82:5c:1e:95:77:5c:0a:4d:db:8a:a2:7e:df:2f:
                    01:14:97:1d:d4:40:16:e0:53:5e:43:e1:a2:fb:19:
                    2b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:3E:81:70:91:DB:06:E9:B8:9E:A6:C3:1F:0F:B3:50:57:53:13
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e20323131383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:b6:fa:c6:ca:fd:96:bd:40:0a:01:28:1d:87:b4:9f:f5:
         10:e2:40:47:37:e5:68:75:94:92:13:59:33:b9:b3:1b:fc:78:
         e7:ba:fd:19:12:87:41:98:0a:6c:b8:dc:06:c7:63:e1:5e:4d:
         dc:94:8c:db:bf:d5:55:4c:88:e4:f3:95:9a:c1:c7:0a:61:95:
         36:dc:50:ab:40:af:41:8b:88:b7:d8:42:db:5e:cf:62:be:e2:
         14:8f:9f:11:99:5b:cd:1e:c9:aa:a0:1b:01:6b:54:aa:96:c2:
         35:36:56:db:88:ff:71:2e:ba:e1:4e:60:eb:f1:bc:1c:86:3b:
         5e:96:5b:8c:3f:ab:e9:95:e4:b5:a8:76:2d:86:6f:b9:10:b2:
         da:9d:59:de:36:0c:39:d9:58:18:10:f9:c9:13:21:da:84:2b:
         b4:cd:22:81:3c:ca:56:37:bf:47:65:ef:f3:0e:71:ac:8a:57:
         29:ff:7e:b6:f5:3b:41:fd:90:40:86:4e:61:9d:f6:79:4d:62:
         04:e8:a7:ad:cd:1f:3c:1d:f5:0a:99:5f:f8:02:21:60:a3:86:
         ca:cb:62:92:91:68:db:5e:7c:95:ef:f8:0a:c3:1a:e1:27:21:
         8e:27:ac:96:32:a4:77:6c:a5:5e:94:3a:23:93:65:30:c8:30:
         8d:82:b2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:02:50 2025 by rpki-client