Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27983.roa
File:                     AS27983.roa (raw, json)
Hash identifier:          qzpW56vZFL6HzZbqT/yR3BdWC51UJ7PpRNYkGhIHPTw=
Subject key identifier:   68:D6:AD:AB:7C:AA:02:43:14:6C:A0:43:6F:C2:C7:CD:C3:91:46:94
Certificate issuer:       /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial:       624854F18C02BFBF95AA9EA88E0FEE5CC4A05560
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27983.roa
Signing time:             Tue 04 Feb 2025 18:13:41 +0000
ROA not before:           Tue 04 Feb 2025 18:08:41 +0000
ROA not after:            Tue 03 Feb 2026 18:13:41 +0000
asID:                     27983
IP address blocks:        179.40.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:48:54:f1:8c:02:bf:bf:95:aa:9e:a8:8e:0f:ee:5c:c4:a0:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
        Validity
            Not Before: Feb  4 18:08:41 2025 GMT
            Not After : Feb  3 18:13:41 2026 GMT
        Subject: CN=68D6ADAB7CAA0243146CA0436FC2C7CDC3914694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:46:2e:42:57:ef:9f:e2:d1:bb:f8:88:64:
                    48:89:49:28:3f:42:9d:5d:39:76:da:6f:17:39:05:
                    5b:f1:67:f5:be:d8:6d:4e:58:c1:aa:69:bc:f2:65:
                    ac:24:01:b1:21:76:3a:de:be:53:07:76:83:aa:16:
                    8d:ef:c5:96:2c:d6:b6:5d:3a:0b:af:ee:26:da:4d:
                    2d:07:88:b5:43:9d:4a:6f:a1:43:b7:f8:0f:e7:5c:
                    f8:d0:58:86:a5:e4:e1:14:50:0e:7b:54:9e:12:d0:
                    fe:b9:16:fe:b9:3b:0d:57:49:80:d0:07:69:3e:20:
                    cd:b3:7e:f1:5c:d5:57:ae:94:58:d0:d3:47:75:ac:
                    95:33:08:8a:76:05:b1:2e:0e:e1:c4:51:0d:c8:80:
                    d2:ee:f1:04:2f:e7:12:fe:84:a4:d0:a3:4d:52:9c:
                    e0:cf:4b:70:de:2d:ee:f9:44:ba:0b:7b:65:bc:e7:
                    63:2b:21:26:e8:86:04:65:87:b9:d7:4a:1e:24:31:
                    27:12:d4:ef:f5:8d:9a:09:a0:e7:1c:19:82:e9:4f:
                    90:04:e4:22:d7:59:69:14:e8:5f:09:44:7a:64:cd:
                    5b:09:0e:49:03:3a:63:06:fb:71:0e:19:fb:1a:8c:
                    f1:13:7b:3a:27:17:85:49:0e:0f:af:ae:c1:10:b1:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D6:AD:AB:7C:AA:02:43:14:6C:A0:43:6F:C2:C7:CD:C3:91:46:94
            X509v3 Authority Key Identifier:
                keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS27983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.40.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:28:f9:50:0b:97:cf:6c:9e:99:e5:2e:55:28:0d:ab:1b:
         ff:6d:04:e6:d6:82:8c:8e:32:38:66:e6:8d:df:e6:05:4e:2c:
         3e:e8:9c:2d:a9:00:f3:f8:af:a8:e2:14:44:74:ca:5c:83:84:
         7d:87:0f:f2:86:1e:e6:f9:52:2a:0d:98:7f:95:9a:0e:40:85:
         00:b7:f7:63:8b:e4:5f:14:2e:f2:5d:55:01:ab:c7:ac:e4:4a:
         ec:e4:b6:af:28:67:68:e8:1e:4b:35:fe:2c:80:6d:f6:c2:ef:
         c7:d0:68:af:39:ba:c7:5d:e2:f6:58:e2:de:3f:32:83:db:a2:
         de:05:44:66:09:2b:24:04:57:92:c6:97:15:90:5e:45:b3:42:
         24:dc:83:74:ad:1d:e7:ef:9f:95:3d:9c:12:33:db:7f:48:c9:
         88:a8:89:04:dd:6b:e1:0a:48:75:86:bd:f9:cd:fd:60:6c:5e:
         08:e3:73:35:eb:98:d8:78:3c:1e:ac:23:5e:3a:b5:a5:73:fe:
         6f:b6:c6:f6:ee:85:85:63:a9:6d:58:8e:9b:26:31:16:10:f8:
         81:c5:97:79:88:7d:c9:0b:4f:08:e3:d7:85:88:d9:a0:1f:32:
         9b:c0:ad:c6:4c:e6:fd:82:5e:d3:1c:a1:53:c6:e5:cb:f6:10:
         78:fe:25:bb
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUYkhU8YwCv7+Vqp6ojg/uXMSgVWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwODE5QzdDOUI0Qzg1Q0UwQjFEMjI3NDFCRTVFNDBB
MUYwRTdCMTAeFw0yNTAyMDQxODA4NDFaFw0yNjAyMDMxODEzNDFaMDMxMTAvBgNV
BAMTKDY4RDZBREFCN0NBQTAyNDMxNDZDQTA0MzZGQzJDN0NEQzM5MTQ2OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrUYuQlfvn+LRu/iIZEiJSSg/
Qp1dOXbabxc5BVvxZ/W+2G1OWMGqabzyZawkAbEhdjrevlMHdoOqFo3vxZYs1rZd
Oguv7ibaTS0HiLVDnUpvoUO3+A/nXPjQWIal5OEUUA57VJ4S0P65Fv65Ow1XSYDQ
B2k+IM2zfvFc1VeulFjQ00d1rJUzCIp2BbEuDuHEUQ3IgNLu8QQv5xL+hKTQo01S
nODPS3DeLe75RLoLe2W852MrISbohgRlh7nXSh4kMScS1O/1jZoJoOccGYLpT5AE
5CLXWWkU6F8JRHpkzVsJDkkDOmMG+3EOGfsajPETezonF4VJDg+vrsEQsY5tAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUaNatq3yqAkMUbKBDb8LHzcORRpQwHwYDVR0j
BBgwFoAUQQgZx8m0yFzgsdInQb5eQKHw57EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMw
NDFDQ0YwNjQwODAzODQzODk4QkU1NkM0REY2QzMyLzAvNDEwODE5QzdDOUI0Qzg1
Q0UwQjFEMjI3NDFCRTVFNDBBMUYwRTdCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTA4MTlDN0M5QjRDODVDRTBC
MUQyMjc0MUJFNUU0MEExRjBFN0IxLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81RDFBNUU2NUFDQjQxNzMzOTg1NUFEQTVBNkM1NDE2REMwNDFDQ0YwNjQw
ODAzODQzODk4QkU1NkM0REY2QzMyLzAvQVMyNzk4My5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMoMjAN
BgkqhkiG9w0BAQsFAAOCAQEAiFoo+VALl89snpnlLlUoDasb/20E5taCjI4yOGbm
jd/mBU4sPuicLakA8/ivqOIURHTKXIOEfYcP8oYe5vlSKg2Yf5WaDkCFALf3Y4vk
XxQu8l1VAavHrORK7OS2ryhnaOgeSzX+LIBt9sLvx9Borzm6x13i9lji3j8yg9ui
3gVEZgkrJARXksaXFZBeRbNCJNyDdK0d5++flT2cEjPbf0jJiKiJBN1r4QpIdYa9
+c39YGxeCONzNeuY2Hg8HqwjXjq1pXP+b7bG9u6FhWOpbViOmyYxFhD4gcWXeYh9
yQtPCOPXhYjZoB8ym8Ctxkzm/YJe0xyhU8bly/YQeP4luw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:08 2025 by rpki-client