Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/3137392e36332e3234302e302f32322d3234203d3e203532343336.roa
File:                     3137392e36332e3234302e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          wQwiSPoStl6brkCD8uN3eivISd4aNhd5eU9nhKze53g=
Subject key identifier:   A1:31:F4:D2:48:E6:D7:61:26:E5:1B:D8:73:20:63:14:D3:FF:31:96
Certificate issuer:       /CN=558C8747A49F897C4126F7858E42A85E9DD69C56
Certificate serial:       184FF3F99894976280AA91C1C7EAF12C3AE9B010
Authority key identifier: 55:8C:87:47:A4:9F:89:7C:41:26:F7:85:8E:42:A8:5E:9D:D6:9C:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/558C8747A49F897C4126F7858E42A85E9DD69C56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/3137392e36332e3234302e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 04 Feb 2025 18:09:56 +0000
ROA not before:           Tue 04 Feb 2025 18:04:56 +0000
ROA not after:            Tue 03 Feb 2026 18:09:56 +0000
asID:                     52436
IP address blocks:        179.63.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4f:f3:f9:98:94:97:62:80:aa:91:c1:c7:ea:f1:2c:3a:e9:b0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558C8747A49F897C4126F7858E42A85E9DD69C56
        Validity
            Not Before: Feb  4 18:04:56 2025 GMT
            Not After : Feb  3 18:09:56 2026 GMT
        Subject: CN=A131F4D248E6D76126E51BD873206314D3FF3196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:57:f9:a9:7b:9d:c7:25:1f:3f:13:f7:1a:
                    0d:0b:22:ad:ba:dc:77:1c:55:55:dc:09:30:8f:b2:
                    0d:f7:90:43:a3:5e:47:a9:7c:35:7a:ae:13:1c:31:
                    a4:c0:e1:37:6a:03:52:75:5e:56:bb:ca:a6:e4:c4:
                    3d:30:17:dd:1d:0e:d3:b4:23:21:d3:a8:7a:15:0b:
                    06:2f:bb:fa:56:dc:19:8a:33:67:b9:4d:93:25:51:
                    7c:d8:63:0f:9b:ea:53:27:59:83:ea:6c:7a:00:0c:
                    41:93:7a:a2:ec:32:47:6d:65:4a:35:b1:5d:ad:9d:
                    ba:43:1b:ef:bf:53:a1:7e:a2:70:3e:22:f4:d0:11:
                    ba:75:04:44:dc:43:d5:1b:2d:37:13:f0:9d:16:25:
                    76:3e:bb:d9:08:c5:46:97:09:55:c8:46:f0:df:68:
                    f4:d8:2f:0f:7c:cc:6c:f7:c7:05:ce:a6:55:df:66:
                    44:18:be:91:17:89:6e:61:f7:cd:50:a1:d1:20:94:
                    76:25:e5:15:28:d3:e5:76:d0:33:49:72:14:3a:81:
                    f4:56:fa:59:42:e7:d2:b9:32:e6:a0:09:7a:d5:a4:
                    71:0c:30:7c:7d:d1:55:b5:c4:fb:08:15:04:f8:e3:
                    ad:1d:7e:69:06:9b:76:38:11:83:84:12:0c:8b:96:
                    c4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:31:F4:D2:48:E6:D7:61:26:E5:1B:D8:73:20:63:14:D3:FF:31:96
            X509v3 Authority Key Identifier:
                keyid:55:8C:87:47:A4:9F:89:7C:41:26:F7:85:8E:42:A8:5E:9D:D6:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/558C8747A49F897C4126F7858E42A85E9DD69C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/558C8747A49F897C4126F7858E42A85E9DD69C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88169BC7DC8746EE5F7060DA2AC5A77F20DDA00E320EAE911004CD859D28D60B/0/3137392e36332e3234302e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:5b:b6:f6:a1:65:f5:ce:6a:12:a7:d7:4c:b7:79:19:8a:
         26:70:0d:cf:44:86:f5:77:46:cd:55:0b:05:fc:96:16:e9:b5:
         05:d0:82:fd:04:9d:b8:c5:2f:ed:a9:c6:b5:92:3d:11:a4:bb:
         09:ce:ca:bc:bf:41:e4:e7:22:05:d2:46:ab:9c:ed:f5:a4:2e:
         37:46:e7:07:c0:10:bc:5a:1b:98:75:87:97:8d:ca:ee:17:84:
         d3:72:19:10:8d:d3:bf:0c:01:ba:1f:1c:a0:39:3d:9b:2a:7e:
         25:74:bc:33:c3:71:44:fa:f4:54:18:b1:37:da:16:e7:1d:ba:
         59:66:96:77:a9:47:81:c8:e7:ec:a2:6f:c3:7c:a2:4d:12:e2:
         4f:d0:39:8b:39:56:12:21:2a:85:ce:da:ef:8d:59:8a:f7:83:
         7f:63:38:62:d5:89:3a:24:57:8c:3a:7f:eb:93:9a:ce:ca:56:
         87:fb:11:82:7a:6f:e5:12:53:e8:48:68:3a:38:6d:88:39:9b:
         9e:26:cd:ce:63:9d:66:07:a5:04:e1:78:4a:1d:34:be:bf:58:
         2b:86:58:b8:9f:c8:40:10:72:3f:04:7a:41:59:a2:0e:75:eb:
         d1:fb:46:4b:12:29:25:4b:53:95:5e:5c:9d:af:d4:9c:e2:83:
         e4:df:9a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:21 2025 by rpki-client