Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131302e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e3131302e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          xJHcOBjZOf+mEs2aB5M5a7W9EnWSLNissSCvpVNzc7A=
Subject key identifier:   0D:E5:97:06:07:F0:C8:D0:0E:86:5E:CC:BD:A0:68:B8:E8:A4:7F:48
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       29B223CEC369A8CA62D2034E60BD3E19E634FB76
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131302e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:19 +0000
ROA not before:           Tue 04 Feb 2025 18:51:19 +0000
ROA not after:            Tue 03 Feb 2026 18:56:19 +0000
asID:                     264780
IP address blocks:        179.61.110.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b2:23:ce:c3:69:a8:ca:62:d2:03:4e:60:bd:3e:19:e6:34:fb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:19 2025 GMT
            Not After : Feb  3 18:56:19 2026 GMT
        Subject: CN=0DE5970607F0C8D00E865ECCBDA068B8E8A47F48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:45:d5:9e:44:7c:e5:9b:53:6d:5d:e8:78:9a:
                    06:af:c1:55:ec:5d:d6:09:49:80:86:1c:fd:7a:7f:
                    a5:f1:5b:71:a5:41:10:29:6c:9b:8e:ea:5d:6f:64:
                    5c:08:a1:d9:b6:9e:a0:b6:dc:9c:cb:a5:87:e1:6d:
                    14:db:fb:0c:d0:90:50:7e:2a:e1:02:24:94:8e:56:
                    32:cb:8f:df:03:bc:83:ef:51:62:b0:18:29:b8:f2:
                    3f:42:75:19:a4:cc:d9:e7:b8:b3:51:ad:11:08:b2:
                    c4:61:6d:8b:7e:a8:09:34:09:e3:33:10:87:4f:e7:
                    22:b4:3a:19:ab:bd:68:59:6c:d3:01:9c:48:d4:d0:
                    3f:ba:16:8b:53:33:e5:0b:bb:a3:84:08:72:68:4a:
                    f6:32:d2:4f:5e:1c:fb:dd:3f:32:ac:36:76:08:0c:
                    d3:08:d5:4c:46:7a:2f:23:0c:9d:aa:22:6b:42:e8:
                    ab:97:6c:64:c8:18:39:d3:48:1f:df:ac:c5:2c:36:
                    1e:9a:da:5f:e5:54:2a:1d:7b:11:d5:f0:ee:d0:87:
                    a5:26:5e:d2:13:67:c8:4e:ec:50:85:07:e0:01:8c:
                    a9:76:3f:3b:70:29:58:2b:f3:e6:36:db:c2:af:24:
                    da:9b:78:45:4f:f8:31:ce:da:53:c0:ce:47:bc:cf:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E5:97:06:07:F0:C8:D0:0E:86:5E:CC:BD:A0:68:B8:E8:A4:7F:48
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e3131302e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:38:c9:15:98:eb:b1:6e:57:21:30:99:2e:8c:00:a3:65:54:
         9b:b8:79:45:cd:f4:a7:6d:98:00:50:9e:2f:8c:4a:9d:dc:b2:
         dd:94:a7:10:97:02:40:09:98:85:6c:17:5a:15:be:d5:e7:db:
         90:0a:ee:c6:ee:1c:e7:f2:d4:c1:7e:e2:53:ca:43:a5:a4:38:
         ca:2d:75:dd:e1:7f:02:65:2a:e7:bc:9d:9f:a1:c9:ed:8c:ad:
         f8:07:97:ea:26:7a:69:ef:59:20:1e:55:a0:2a:6c:e6:e4:9b:
         60:5e:16:81:f3:ad:fe:e4:ad:56:02:b7:cc:fa:3f:2f:25:d4:
         1f:13:97:16:68:c7:e6:08:7f:18:ae:fe:de:b3:3f:4b:3e:3c:
         bb:18:86:bb:44:ce:23:93:d0:9c:f2:f6:f3:da:e8:4c:95:4e:
         5c:94:44:7c:55:6b:0f:cd:ef:d1:af:7e:56:cf:ad:58:89:b3:
         cf:59:78:36:bd:e8:ab:bd:e0:d3:da:61:78:3d:6c:80:dd:1c:
         07:4f:79:f3:8d:3b:d7:9e:05:bd:98:e4:ae:cf:d1:4a:6a:ae:
         ff:b9:6c:2e:9e:ac:c5:b8:8d:f9:78:81:6e:42:87:32:3d:c1:
         a0:8a:78:3c:1e:1b:f4:4e:2d:0b:0b:74:54:99:95:8d:2d:87:
         8b:5f:7c:c4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUKbIjzsNpqMpi0gNOYL0+GeY0+3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUxNThBQzgzMENDQzQzNkIwMTYxMkM5NkI5RDY1RjZB
REEzOEYxODAeFw0yNTAyMDQxODUxMTlaFw0yNjAyMDMxODU2MTlaMDMxMTAvBgNV
BAMTKDBERTU5NzA2MDdGMEM4RDAwRTg2NUVDQ0JEQTA2OEI4RThBNDdGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4RdWeRHzlm1NtXeh4mgavwVXs
XdYJSYCGHP16f6XxW3GlQRApbJuO6l1vZFwIodm2nqC23JzLpYfhbRTb+wzQkFB+
KuECJJSOVjLLj98DvIPvUWKwGCm48j9CdRmkzNnnuLNRrREIssRhbYt+qAk0CeMz
EIdP5yK0OhmrvWhZbNMBnEjU0D+6FotTM+ULu6OECHJoSvYy0k9eHPvdPzKsNnYI
DNMI1UxGei8jDJ2qImtC6KuXbGTIGDnTSB/frMUsNh6a2l/lVCodexHV8O7Qh6Um
XtITZ8hO7FCFB+ABjKl2PztwKVgr8+Y228KvJNqbeEVP+DHO2lPAzke8z+HrAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDeWXBgfwyNAOhl7MvaBouOikf0gwHwYDVR0j
BBgwFoAUxRWKyDDMxDawFhLJa51l9q2jjxgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84M0I2ODg0NTI1MjRGMjk3OUFBRTU3RTBFQjVBQkY5NjQ3
MDRCMDgwMEIwM0JDNkFCODc1ODJCQjNCQTFCMUEyLzAvQzUxNThBQzgzMENDQzQz
NkIwMTYxMkM5NkI5RDY1RjZBREEzOEYxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNTE1OEFDODMwQ0NDNDM2QjAx
NjEyQzk2QjlENjVGNkFEQTM4RjE4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODNCNjg4NDUyNTI0RjI5NzlBQUU1N0UwRUI1QUJGOTY0NzA0QjA4MDBC
MDNCQzZBQjg3NTgyQkIzQkExQjFBMi8wLzMxMzczOTJlMzYzMTJlMzEzMTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzczODMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz1u
MA0GCSqGSIb3DQEBCwUAA4IBAQCpOMkVmOuxblchMJkujACjZVSbuHlFzfSnbZgA
UJ4vjEqd3LLdlKcQlwJACZiFbBdaFb7V59uQCu7G7hzn8tTBfuJTykOlpDjKLXXd
4X8CZSrnvJ2focntjK34B5fqJnpp71kgHlWgKmzm5JtgXhaB863+5K1WArfM+j8v
JdQfE5cWaMfmCH8Yrv7esz9LPjy7GIa7RM4jk9Cc8vbz2uhMlU5clER8VWsPze/R
r35Wz61YibPPWXg2veirveDT2mF4PWyA3RwHT3nzjTvXngW9mOSuz9FKaq7/uWwu
nqzFuI35eIFuQocyPcGging8Hhv0Ti0LC3RUmZWNLYeLX3zE
-----END CERTIFICATE-----
Generated at Thu Feb 13 19:06:09 2025 by rpki-client