Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203532333736.roa
File:                     3137392e302e31342e302f32342d3234203d3e203532333736.roa (raw, json)
Hash identifier:          OE7syDZ9hG8/JlXvb1IkEun2z9IWSGtLcRglHjV1fZQ=
Subject key identifier:   DC:23:3C:18:5A:A2:2F:A1:A7:9C:BC:FC:F1:EE:8C:17:67:7F:53:A3
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       3F605BBFA3B596A0BE0BE0B94C1E7DD7AEC80347
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203532333736.roa
Signing time:             Wed 05 Feb 2025 20:55:00 +0000
ROA not before:           Wed 05 Feb 2025 20:50:00 +0000
ROA not after:            Wed 04 Feb 2026 20:55:00 +0000
asID:                     52376
IP address blocks:        179.0.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:60:5b:bf:a3:b5:96:a0:be:0b:e0:b9:4c:1e:7d:d7:ae:c8:03:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  5 20:50:00 2025 GMT
            Not After : Feb  4 20:55:00 2026 GMT
        Subject: CN=DC233C185AA22FA1A79CBCFCF1EE8C17677F53A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7c:e5:cf:74:d5:f4:02:17:fe:30:19:ef:59:
                    c7:cb:8c:04:64:c1:d9:fb:03:30:36:c2:5a:d7:2d:
                    88:ac:3a:8e:da:1f:ab:a7:a7:af:10:97:2e:01:12:
                    fa:3c:0d:74:48:59:e7:d4:e7:2b:3d:05:78:f3:4a:
                    08:0d:b0:3c:20:0b:37:3c:8e:6b:90:c2:5b:9b:a6:
                    38:c7:4a:74:27:e1:1d:fb:a2:36:2f:47:03:cb:1c:
                    5b:e6:ba:54:d3:43:5a:30:3e:e6:65:af:0a:2a:67:
                    ae:c7:a4:2e:7a:1e:15:2f:bf:f2:00:f0:d2:64:eb:
                    0a:77:cf:0f:c5:99:da:16:56:e2:23:37:5e:fe:9a:
                    b6:86:de:f4:ce:ee:d7:e8:b2:0a:8b:b5:92:83:94:
                    52:39:73:de:aa:f3:0f:4b:f6:e5:e2:2f:e9:3a:53:
                    a7:e3:e2:a8:9f:c3:49:18:e1:af:c6:bd:e9:42:8c:
                    5c:6a:aa:25:46:db:fe:ed:f7:bb:77:09:34:02:50:
                    48:9c:b7:42:4c:43:28:bf:5f:c3:ce:d1:11:b6:d7:
                    b8:34:ce:fa:1b:92:79:fb:0e:d3:70:58:c1:f7:5e:
                    b3:04:55:40:dd:32:47:25:c6:24:40:5d:01:6b:35:
                    59:d0:dc:86:a3:50:a6:5c:9b:2f:6b:19:a6:33:54:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:23:3C:18:5A:A2:2F:A1:A7:9C:BC:FC:F1:EE:8C:17:67:7F:53:A3
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:81:b4:b0:b1:d0:f3:b3:81:e2:0e:92:81:4d:bc:f5:9f:
         a2:90:7a:41:88:8f:e2:29:e8:5f:75:40:80:18:72:1d:a9:8f:
         dc:ba:2b:e9:34:65:a1:a5:c0:31:3f:18:e9:40:39:32:c1:db:
         c0:2e:ae:29:d0:4f:cd:ca:2b:17:1e:0b:7c:b3:b0:78:34:d2:
         c4:8c:ec:59:c0:b1:8f:ba:2a:34:5a:b0:18:1a:6f:58:93:64:
         01:d6:12:12:4f:f1:ea:93:02:5e:f6:9d:56:c8:d9:c1:b8:92:
         a3:88:86:47:6f:59:46:be:d6:db:37:e3:ed:c8:bc:c6:3c:84:
         4f:5b:0b:db:14:a0:3c:f2:89:7b:db:a7:ec:74:07:cc:7f:f1:
         bb:33:b6:a3:06:28:e7:a4:31:ba:95:66:88:4c:a7:22:8c:1f:
         d3:fd:49:6f:b9:2a:01:cb:65:b2:dd:70:ce:37:94:51:07:8d:
         7a:b0:34:8a:4c:00:44:47:50:1b:fb:20:2e:44:db:7d:38:8d:
         a5:ff:9e:64:44:9a:41:c8:69:04:96:ea:97:82:4d:bb:02:fc:
         21:6f:00:7d:6c:af:a5:37:2b:af:b5:30:73:a9:92:f7:25:04:
         12:67:01:29:ac:b1:01:ca:52:60:77:30:45:73:00:4a:ca:79:
         10:dc:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:59:01 2025 by rpki-client