Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3233312e302f32342d3234203d3e203532343933.roa
File:                     3137392e36302e3233312e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          +6dOV7SKYlCirYjq9J2v+D1oeN3KExFz+Hs3FYZcsQw=
Subject key identifier:   EC:5C:F8:BE:70:7F:FD:DD:05:2C:DD:8A:0A:6A:AF:67:BA:AD:64:5B
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       240D8E6DC76E309238BE397BDC3A6C2CF8CFDC47
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3233312e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 04 Feb 2025 18:13:33 +0000
ROA not before:           Tue 04 Feb 2025 18:08:33 +0000
ROA not after:            Tue 03 Feb 2026 18:13:33 +0000
asID:                     52493
IP address blocks:        179.60.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0d:8e:6d:c7:6e:30:92:38:be:39:7b:dc:3a:6c:2c:f8:cf:dc:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Feb  4 18:08:33 2025 GMT
            Not After : Feb  3 18:13:33 2026 GMT
        Subject: CN=EC5CF8BE707FFDDD052CDD8A0A6AAF67BAAD645B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:00:52:a7:67:06:59:05:fe:e9:c8:63:ef:
                    21:de:1f:1e:c9:e3:aa:b3:ef:01:11:94:05:51:41:
                    85:eb:13:09:6a:99:b2:3d:ec:72:20:a2:36:17:5c:
                    25:71:ec:a2:e7:ff:84:29:9c:98:65:56:d2:15:56:
                    12:d4:ed:52:ee:e9:c7:33:86:12:5d:1b:42:f0:b9:
                    b1:e6:c5:b6:33:5e:56:a2:77:cb:30:01:9c:5d:f4:
                    62:fd:49:b7:19:92:14:af:40:a5:20:81:bc:56:f1:
                    5e:4c:8d:99:8d:1c:7f:74:bc:c1:ae:53:c0:26:50:
                    e5:99:e5:af:a4:78:40:00:20:13:bf:67:c9:7d:cf:
                    e4:24:72:b6:4b:a1:e2:07:17:31:30:75:44:ac:7d:
                    29:3a:06:e9:d6:0a:19:33:10:f8:59:5a:46:2e:02:
                    fc:4e:ef:9a:02:20:81:3b:50:28:7e:2e:ca:df:86:
                    4f:34:c9:39:ef:2a:0b:95:4d:7b:90:ef:76:ff:1e:
                    b2:77:1e:76:35:45:c8:0b:7d:b1:60:43:8f:af:de:
                    63:f6:b1:6c:8b:22:01:c3:2c:d0:a8:e1:1f:75:38:
                    a7:24:cc:76:17:b2:51:14:53:98:75:4c:99:87:d5:
                    fe:20:72:13:54:2a:13:b4:74:8a:51:0e:be:ce:6c:
                    f2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5C:F8:BE:70:7F:FD:DD:05:2C:DD:8A:0A:6A:AF:67:BA:AD:64:5B
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3233312e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:63:bd:35:21:34:be:11:d7:06:5f:48:39:69:1d:f2:b4:ee:
         2c:b1:45:2e:5c:90:a1:d2:2a:5b:fd:6d:9a:51:87:f6:42:24:
         fa:14:ab:9c:58:92:a3:d4:b6:5c:9c:60:d2:97:5e:91:da:d3:
         27:3b:bd:ee:73:cb:03:94:2e:3c:f0:3f:12:a9:8d:b0:9f:12:
         6c:66:7c:77:3d:93:aa:6a:0b:ba:26:29:bf:b3:4b:35:ee:0a:
         56:08:a0:eb:a9:a7:f7:a5:12:aa:3e:17:1d:43:3d:b0:90:92:
         ee:29:d6:8f:33:74:16:29:64:e0:05:62:36:ae:0f:f5:79:09:
         fd:d7:43:fe:0a:45:23:0f:52:93:96:c8:df:ce:8d:46:a8:a5:
         53:b5:fc:04:ab:70:cc:dd:21:ca:c9:aa:7b:c0:36:64:3f:4b:
         f6:c7:05:93:c3:4e:32:20:e9:57:8e:cc:7f:c6:10:dd:9f:ce:
         65:cd:9d:ff:39:10:b8:3c:d5:f4:dc:ec:60:4b:b6:0b:2b:7e:
         f0:53:e0:17:05:79:a1:a9:49:e2:93:05:42:32:6f:70:91:0c:
         2f:68:e2:f9:9d:f8:78:f9:99:a6:22:34:9f:76:cf:3a:bf:1d:
         4f:b1:57:c2:79:03:a2:e0:88:8e:7a:cd:76:de:a0:00:fe:b4:
         84:c2:8b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:02 2025 by rpki-client