Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39392e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e39392e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          SFs7lIbMlH/qi3fvV+jzStK4ZCrLfFVSZ/BDnwXrFgs=
Subject key identifier:   80:B4:D1:17:21:82:A4:66:34:5E:AA:33:34:68:72:60:69:AF:D8:4B
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       061660B912884F1301C8A5FD2AD7D40AC8D87C89
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39392e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 04 Feb 2025 18:56:20 +0000
ROA not before:           Tue 04 Feb 2025 18:51:20 +0000
ROA not after:            Tue 03 Feb 2026 18:56:20 +0000
asID:                     264780
IP address blocks:        179.61.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:60:b9:12:88:4f:13:01:c8:a5:fd:2a:d7:d4:0a:c8:d8:7c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Feb  4 18:51:20 2025 GMT
            Not After : Feb  3 18:56:20 2026 GMT
        Subject: CN=80B4D1172182A466345EAA333468726069AFD84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bc:8c:d3:56:cd:21:0b:be:65:12:62:76:c6:
                    2d:de:85:8e:b6:5c:60:cd:36:f9:c1:20:82:1f:6e:
                    50:38:22:d0:9e:3f:0f:cc:07:51:90:fd:8d:f9:fc:
                    4e:72:da:53:bf:08:c0:eb:d4:ca:8a:de:ac:c8:c1:
                    f9:c0:49:06:14:76:69:7d:2d:8e:34:6d:74:2a:f1:
                    0c:21:cd:51:27:6c:17:de:f5:66:b0:d6:de:15:94:
                    3c:56:58:cc:20:64:5f:54:2d:d2:e3:e3:a0:4a:f7:
                    f6:1f:6b:6e:85:43:0b:1b:54:07:60:45:44:e6:5b:
                    be:6a:ad:5a:3c:61:4d:5f:dd:18:37:f0:32:59:51:
                    6a:30:38:ef:e9:a0:44:07:b1:38:cd:e1:22:44:c7:
                    2e:fe:4a:5d:7f:f5:95:48:9d:81:9e:00:84:11:5a:
                    49:2a:c7:62:36:8d:e9:ac:7d:72:14:2e:fd:a7:ec:
                    75:0e:f6:63:99:f8:87:5b:f7:ea:ad:7e:eb:6f:cd:
                    b6:9c:cf:9b:f5:90:96:63:61:da:0a:7b:42:a0:f4:
                    ac:0d:21:8b:3d:32:a1:91:38:b6:a6:19:77:0a:e9:
                    71:1b:c7:a5:ef:de:1d:9a:d1:f5:c5:5a:a0:38:08:
                    a1:45:71:33:20:12:e9:21:fb:0b:2d:c3:63:30:73:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:D1:17:21:82:A4:66:34:5E:AA:33:34:68:72:60:69:AF:D8:4B
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39392e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:7f:9c:29:22:ce:26:63:7e:74:56:53:58:e8:c8:c9:0d:f9:
         2e:19:82:40:90:ca:d0:4a:65:fa:19:4f:23:4f:50:09:ee:2a:
         d8:9e:e3:fc:ae:94:8a:aa:71:eb:c0:a7:38:30:34:43:b1:54:
         36:11:18:d1:36:e7:ef:53:cf:db:f9:a3:c0:2a:74:ce:27:10:
         f9:64:0a:4d:94:b7:88:27:7f:0b:c5:12:4a:d2:98:8e:89:f0:
         c1:7a:a2:16:97:c7:04:d7:0e:7f:a6:0e:19:f4:15:ee:42:13:
         35:c0:64:c7:ea:94:e0:ba:7e:64:92:c8:6d:af:04:52:e2:39:
         1d:bf:eb:24:66:45:1f:e8:c1:be:81:05:55:40:43:a3:9f:9f:
         ec:27:2e:66:9e:03:ca:6b:7f:94:df:96:bc:6d:82:0b:72:ae:
         a6:a1:bd:39:3f:03:a6:73:c3:98:3c:38:04:b0:86:fc:af:9a:
         1c:2a:1d:d0:54:98:9f:ce:d8:93:73:45:ba:d2:a0:8c:8f:09:
         92:a3:1b:9d:61:1d:42:d9:97:6e:a8:6f:3f:fb:8f:ac:19:2b:
         40:81:89:00:d2:e6:7c:3e:4e:4a:a5:23:e5:ff:c9:55:da:3b:
         69:1b:f5:61:95:78:83:73:fc:78:61:c5:bf:57:88:c6:17:d9:
         53:b3:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 18:26:30 2025 by rpki-client