Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa
File:                     3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          ZdsG86b+FcM+UBOt0dFPWgI/HfenH2ijjMngzZLnxgM=
Subject key identifier:   CD:A5:E1:53:B9:D3:2F:FC:2A:80:BD:9A:05:CF:56:94:80:73:1D:39
Certificate issuer:       /CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8
Certificate serial:       6B70935235F16267EDC6E6C70FBFC476ABF408C8
Authority key identifier: 0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa
Signing time:             Tue 04 Feb 2025 18:33:49 +0000
ROA not before:           Tue 04 Feb 2025 18:28:49 +0000
ROA not after:            Tue 03 Feb 2026 18:33:49 +0000
asID:                     271904
IP address blocks:        179.63.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:93:52:35:f1:62:67:ed:c6:e6:c7:0f:bf:c4:76:ab:f4:08:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8
        Validity
            Not Before: Feb  4 18:28:49 2025 GMT
            Not After : Feb  3 18:33:49 2026 GMT
        Subject: CN=CDA5E153B9D32FFC2A80BD9A05CF569480731D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:76:c0:f7:6f:6f:69:8b:08:e0:b3:6d:8c:ab:
                    95:c9:eb:83:09:82:94:f6:12:e9:07:85:d9:9f:e7:
                    7f:cc:24:37:f6:e0:59:3b:ac:37:79:47:71:6b:45:
                    69:6a:ae:35:52:0e:09:95:7f:8d:2f:6a:cb:90:a4:
                    4b:bb:03:cb:94:cc:e1:dd:ab:76:3b:33:5e:40:6d:
                    97:1c:d7:91:39:85:37:23:8a:01:66:62:a5:0e:0b:
                    d8:1f:1d:cf:25:6a:43:a3:5f:09:9a:7e:04:cd:4f:
                    92:07:0b:1b:c5:d9:11:ba:c9:af:14:cf:db:5c:4c:
                    9d:8b:c9:62:5f:22:a8:d0:20:43:7c:14:a5:26:28:
                    ce:8b:af:12:b1:9a:00:97:17:54:70:bd:50:d3:f2:
                    dc:2c:d2:73:c7:21:62:5b:9c:31:3f:df:3e:51:f5:
                    d5:05:24:08:da:f4:68:3e:7d:d0:84:f3:f0:ac:72:
                    0f:9c:f2:6f:85:db:17:70:24:aa:d0:92:73:b0:aa:
                    95:46:2f:1d:a5:35:78:b5:1c:50:dd:00:9d:a6:7b:
                    13:a5:b5:6c:96:bf:dc:7c:48:fb:a1:e9:cb:53:d9:
                    bd:0b:37:ac:ca:00:51:5a:e3:29:1b:b6:b2:09:85:
                    53:73:0f:4e:9c:b5:8e:5c:4e:52:52:38:4c:06:cc:
                    e5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A5:E1:53:B9:D3:2F:FC:2A:80:BD:9A:05:CF:56:94:80:73:1D:39
            X509v3 Authority Key Identifier:
                keyid:0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:7c:07:c6:b9:1a:e0:e0:e0:6e:69:97:b3:25:4b:f8:79:91:
         b0:3f:e3:5e:62:be:70:f7:c9:0b:e0:92:f2:e2:9c:d3:d7:28:
         8f:57:42:63:d2:00:6a:0e:c7:23:fb:54:6f:ab:84:15:cc:f0:
         cb:a0:9e:ec:5b:e8:7b:a5:87:39:f4:00:65:01:88:84:d7:97:
         e1:6d:65:e9:61:c8:0a:71:89:90:e5:02:47:af:03:3c:e1:9b:
         56:c5:90:e1:c8:dd:94:9f:0f:ed:dd:b9:e8:36:21:52:6c:83:
         3d:b9:bc:62:ed:10:47:da:ef:6f:48:d9:55:95:d4:12:b3:77:
         1c:77:0c:28:a8:00:40:e1:55:c6:e7:c5:b1:38:a2:62:21:a8:
         f3:1a:e9:61:79:b7:b4:af:b9:96:15:3c:c7:de:f1:77:6b:9b:
         17:04:94:29:f2:d4:cd:c0:80:23:66:e7:63:69:59:7c:0a:fe:
         d7:64:ac:7c:cc:ba:c2:95:78:4a:91:4a:7c:ed:12:54:5d:5c:
         cd:24:fc:00:e0:a9:36:79:6b:32:18:b5:86:a3:b3:83:6c:dd:
         d6:36:ff:90:79:f3:86:e8:38:a0:00:19:9a:c9:1b:c2:14:52:
         bf:58:ca:42:de:15:7a:82:93:b3:2f:e7:f8:b2:b2:5c:af:59:
         77:83:a1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client