Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137392e302f32342d3234203d3e20323639383632.roa
File:                     3133382e39392e3137392e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          5bBDlAG+HgBRHRUcIgn3nPxNpPYBtRadcTRYN/h50qE=
Subject key identifier:   93:CD:F8:19:29:DB:E8:E9:F8:99:13:56:3F:10:F7:14:26:85:AA:E8
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       3672864E23267F5FCBCF7A31AA8B3FB587D2AF45
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137392e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:53:01 +0000
ROA not before:           Tue 04 Feb 2025 18:48:01 +0000
ROA not after:            Tue 03 Feb 2026 18:53:01 +0000
asID:                     269862
IP address blocks:        138.99.179.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:72:86:4e:23:26:7f:5f:cb:cf:7a:31:aa:8b:3f:b5:87:d2:af:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:01 2025 GMT
            Not After : Feb  3 18:53:01 2026 GMT
        Subject: CN=93CDF81929DBE8E9F89913563F10F7142685AAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:b0:8f:bb:70:a8:5d:f3:6c:db:78:f3:8e:
                    39:11:9d:e8:bb:88:4d:03:77:28:36:9c:14:6e:20:
                    2f:d0:4c:d8:e0:ef:d0:e9:0d:1c:df:5a:d6:85:63:
                    2b:5d:6a:a8:20:0a:7f:46:09:ef:e2:08:d4:9e:26:
                    29:44:da:75:2a:cb:45:4a:06:26:ce:4b:a4:7d:10:
                    ed:6f:6d:50:89:c4:e5:0f:79:3f:2b:ca:b1:2d:d2:
                    7c:f6:8e:94:37:1d:e3:de:9d:7a:69:7a:33:10:ca:
                    39:2c:4c:7a:e4:66:62:45:29:e5:b5:07:94:92:5c:
                    b2:47:44:cc:ed:dc:ce:7c:89:44:97:91:83:09:00:
                    c1:59:cf:5e:f4:51:6d:fd:0b:77:bf:2c:ac:4a:01:
                    40:07:4c:5d:40:e5:b7:92:8c:67:06:60:76:62:9b:
                    1e:1c:ee:4b:95:08:1d:77:58:57:12:ac:6f:32:1a:
                    93:b0:cc:c9:c0:67:b1:d7:f7:38:ff:1e:ab:6e:c8:
                    4d:d1:79:f3:19:a7:95:bf:9e:e1:eb:a8:06:7e:66:
                    43:fc:a5:ee:50:f3:15:43:73:4d:5c:47:fc:f8:ef:
                    8b:da:01:88:81:ce:e5:c0:3a:e8:50:ae:b5:fc:af:
                    62:64:a6:35:b2:b8:52:f3:03:44:3e:d7:c7:ec:e9:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:F8:19:29:DB:E8:E9:F8:99:13:56:3F:10:F7:14:26:85:AA:E8
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3133382e39392e3137392e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:06:08:94:db:d9:d0:12:6d:b0:4c:72:dd:15:54:d5:7e:f7:
         fa:c0:a2:05:1e:da:1c:cb:8f:82:7b:3c:2c:dc:f0:b5:af:11:
         09:ab:d8:be:e6:08:86:42:22:a6:e1:61:64:32:69:f3:4c:c6:
         1d:fb:3f:a0:9f:db:b3:70:eb:5e:49:b3:1d:fd:86:51:14:46:
         5f:1c:3f:ab:e0:71:33:9f:3b:11:6e:f8:2f:08:2f:79:39:b3:
         ae:83:88:a0:6f:df:a8:ee:6a:75:ad:e8:a6:7a:24:a3:66:f2:
         31:45:a1:b8:66:ca:24:10:58:40:8f:1b:e3:9f:b9:09:75:c9:
         fb:dd:f9:2b:e8:61:4f:e6:ca:65:49:dd:54:d5:3d:99:66:17:
         72:e6:66:53:98:d1:cc:b9:e8:5c:cb:44:4d:57:6c:2e:b9:9d:
         e0:e2:ca:4f:5a:9b:d7:12:98:39:c3:8d:4c:0e:6c:a7:7b:d4:
         b0:30:ac:72:fe:67:91:23:b7:b5:1b:cd:88:b3:ec:7e:c4:bf:
         b7:60:6d:f8:d5:7c:e1:d5:68:5e:55:46:3b:ce:8b:0b:73:87:
         6f:97:78:ff:73:04:32:8c:72:29:ac:91:89:05:05:75:ae:b2:
         1c:d3:db:6f:02:2e:f2:6a:cb:35:ed:29:4c:19:2e:0f:89:75:
         52:8f:d3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:09 2025 by rpki-client