Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3234203d3e20323731393239.roa
File:                     3137392e302e34322e302f32332d3234203d3e20323731393239.roa (raw, json)
Hash identifier:          KxR12/w1Qaxtrv/Pm1thbv4pRL0oc7bdeJSB0DNFJuc=
Subject key identifier:   11:ED:80:16:65:21:B1:FE:E5:CB:78:C1:1C:E9:F7:D5:F5:40:04:C9
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       7A307C94CC91ABD2420978E63ECCD8F0040ACB43
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3234203d3e20323731393239.roa
Signing time:             Tue 04 Feb 2025 18:02:21 +0000
ROA not before:           Tue 04 Feb 2025 17:57:21 +0000
ROA not after:            Tue 03 Feb 2026 18:02:21 +0000
asID:                     271929
IP address blocks:        179.0.42.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:30:7c:94:cc:91:ab:d2:42:09:78:e6:3e:cc:d8:f0:04:0a:cb:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Feb  4 17:57:21 2025 GMT
            Not After : Feb  3 18:02:21 2026 GMT
        Subject: CN=11ED80166521B1FEE5CB78C11CE9F7D5F54004C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:b2:b7:f3:28:44:23:59:5c:d1:76:04:fb:
                    52:06:a1:50:1a:3f:1b:61:d5:49:c9:f7:78:ad:59:
                    18:d3:64:fd:84:49:dc:36:cc:57:0e:26:2a:53:00:
                    11:b4:ec:11:7c:d2:52:76:5f:77:8e:82:bc:98:f4:
                    18:66:49:d6:64:2b:02:a4:a1:5b:b0:2b:08:bb:31:
                    d2:56:2d:87:ae:c0:52:0e:3c:f2:c3:6a:52:30:00:
                    a9:46:f5:5b:55:02:b9:51:14:78:cd:45:f9:48:3a:
                    17:85:b3:49:20:34:84:af:79:fd:3f:93:a4:6a:bc:
                    98:79:76:b0:52:4a:73:10:d5:46:37:4d:19:b0:98:
                    ad:ea:7c:fc:8c:f9:66:fb:8a:12:c4:c6:39:b1:c1:
                    f3:9f:63:ea:8d:6b:2f:c4:6a:e9:8a:8e:39:d9:95:
                    cf:43:aa:6b:4c:a1:10:07:0a:85:35:6b:0e:0f:0c:
                    47:30:4c:69:d9:36:a2:25:9b:26:8e:83:dc:9b:aa:
                    b5:6f:61:11:f0:ae:87:aa:c0:e1:06:87:78:e5:fd:
                    60:42:26:10:a5:2d:7c:15:25:9f:e6:52:db:c7:26:
                    92:37:e6:95:32:e0:ba:7e:4e:70:96:70:73:ba:37:
                    cd:72:60:54:51:88:ba:23:28:da:e9:42:0b:46:48:
                    c0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:ED:80:16:65:21:B1:FE:E5:CB:78:C1:1C:E9:F7:D5:F5:40:04:C9
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34322e302f32332d3234203d3e20323731393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:83:21:0a:75:ae:41:e0:48:e6:e1:83:25:86:6e:b9:f9:ab:
         14:43:74:28:bc:30:30:a0:a0:e1:03:d9:b3:2e:c5:f8:17:cc:
         d8:1b:0e:42:17:40:a9:c0:d8:c2:ca:8e:4c:d5:b4:bc:e5:41:
         8d:b3:1c:be:15:5f:83:d9:a5:a2:a0:be:4b:e0:dc:7b:7d:2b:
         6d:fc:de:d0:26:d6:d5:97:95:3f:5a:c0:6d:8c:32:d2:73:f4:
         0e:9e:93:84:0b:5f:ff:b4:2a:3d:13:30:d7:f7:47:a5:ce:75:
         e2:74:0e:73:00:f8:30:b7:1b:ee:f1:15:02:6b:af:09:13:f3:
         2a:d4:e2:4a:40:b0:fb:8a:8b:b3:c4:0f:86:57:31:20:32:7e:
         7b:3f:2c:26:50:3c:a7:9a:fa:c0:18:db:5b:24:d0:df:40:15:
         aa:78:c5:08:0e:ce:2c:64:bb:42:9d:ce:91:a5:71:d3:fd:9c:
         3d:64:52:95:5a:c3:a0:a1:f0:0a:2e:81:24:48:79:43:26:24:
         6e:4e:56:a2:4c:de:42:ac:81:ee:c0:a6:61:01:74:43:77:ac:
         e3:db:e3:cb:92:a3:a7:00:13:bd:72:91:ad:27:21:09:ef:df:
         97:23:c8:1d:da:6a:58:c1:c9:57:e7:89:75:c5:48:0b:e3:4b:
         c5:3e:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:55:11 2025 by rpki-client