Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2033353439.roa
File:                     3137392e302e31342e302f32342d3234203d3e2033353439.roa (raw, json)
Hash identifier:          mOTkaTGoABa0EH8pyAB1f8SXWg0KR5HKa17CamAA9S0=
Subject key identifier:   D6:5E:D4:F2:6C:59:6D:8B:9C:1B:61:93:3A:D8:EE:D8:40:30:6A:A4
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       0CA340302C6309AE862F798458072DCAFF88E2EA
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:37:11 +0000
ROA not before:           Tue 04 Feb 2025 18:32:11 +0000
ROA not after:            Tue 03 Feb 2026 18:37:11 +0000
asID:                     3549
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a3:40:30:2c:63:09:ae:86:2f:79:84:58:07:2d:ca:ff:88:e2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:11 2025 GMT
            Not After : Feb  3 18:37:11 2026 GMT
        Subject: CN=D65ED4F26C596D8B9C1B61933AD8EED840306AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:38:1f:3a:a7:74:59:a3:b8:5c:06:cd:3e:
                    30:6b:ab:64:ea:27:ad:76:3c:24:26:29:b3:53:2d:
                    6d:82:13:89:9e:41:9e:36:a0:2b:bc:70:08:9d:0d:
                    e7:ee:92:21:c6:6e:86:dc:71:5a:4e:62:4b:f1:0d:
                    60:d1:5f:b8:b8:44:87:2f:3e:2a:22:8a:eb:64:a8:
                    fd:55:e2:49:8b:d5:bf:37:8d:ae:e8:41:65:dc:2f:
                    62:74:20:bb:03:c9:22:39:9b:1d:a0:40:01:05:80:
                    fd:80:5d:91:cf:ee:37:d0:6d:c7:35:5a:e2:9e:47:
                    73:a8:3d:18:bb:d9:14:96:0e:44:63:21:14:b7:5b:
                    38:53:d3:33:50:38:6c:fe:39:1c:fc:75:52:28:c1:
                    61:a3:6b:fd:50:14:2c:a5:3d:4c:7a:98:25:1f:a3:
                    83:f2:17:9d:b9:62:99:e0:37:48:b5:39:51:03:c6:
                    68:69:75:f3:d6:b7:81:e0:d9:b0:c5:ee:67:56:4e:
                    d2:96:ad:f5:19:fb:78:16:8b:ad:71:fe:9e:03:08:
                    38:92:db:8f:3a:d3:e4:70:4a:dd:2a:c2:8b:7f:3f:
                    18:2e:86:58:2b:39:3c:b1:77:1e:7f:2e:f5:d1:60:
                    a2:50:87:d9:f5:af:61:09:55:e6:dc:14:b3:32:73:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5E:D4:F2:6C:59:6D:8B:9C:1B:61:93:3A:D8:EE:D8:40:30:6A:A4
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e5:a7:21:ae:0d:e1:0c:f2:32:7e:62:07:4f:49:8d:8b:32:
         56:d4:6f:55:f3:b9:01:9a:b8:ae:d1:c2:6a:43:da:10:21:ef:
         d4:c7:3c:e9:ff:83:48:0b:7d:8b:f1:f6:de:0a:4a:e9:ce:34:
         03:df:79:f7:cc:52:35:d6:12:45:ab:66:6b:8a:9c:54:7d:d3:
         3b:0a:da:d6:c9:08:75:91:6e:71:e7:32:b7:2f:fc:3b:65:f4:
         be:bb:b3:4a:a1:83:62:84:cd:33:76:d2:91:00:0e:7f:a4:4a:
         54:a0:ab:81:25:b3:e8:cc:92:51:94:04:91:6f:b0:39:0c:93:
         1b:af:1b:ce:02:65:ec:a0:85:47:fa:e8:bf:e7:aa:b4:64:da:
         74:dd:f3:54:b6:ce:ac:90:57:ca:a7:5c:33:5c:cc:41:a8:e1:
         37:87:22:37:da:d0:db:ef:cd:36:82:90:e8:bc:eb:48:79:31:
         a3:ea:b2:25:ab:bd:8e:4b:f2:ee:86:94:69:c2:78:7a:b1:c7:
         80:6c:de:84:f6:fc:95:ad:37:a7:3f:ee:49:d4:ec:ec:67:2d:
         22:39:4d:99:0b:6b:c5:84:0e:70:8f:2c:b3:09:a9:c1:4e:8a:
         03:d3:27:ca:47:bc:78:2d:b7:bf:3e:8f:49:69:1e:c4:12:95:
         73:c9:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:27 2025 by rpki-client