Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32342d3235203d3e203635313035.roa
File:                     3137392e302e32302e302f32342d3235203d3e203635313035.roa (raw, json)
Hash identifier:          FietV4nbBzl7X/sLCaoYfKb5JaXsEimaJMWPWhtL+mA=
Subject key identifier:   FD:6D:95:ED:9D:9C:B2:4F:51:C8:29:B4:C3:9D:81:35:BF:9B:9D:B0
Certificate issuer:       /CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
Certificate serial:       2AC2AC454BA9DFFA6041F3D2398A3FDB8D2DDC
Authority key identifier: 99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32342d3235203d3e203635313035.roa
Signing time:             Tue 04 Feb 2025 18:20:59 +0000
ROA not before:           Tue 04 Feb 2025 18:15:59 +0000
ROA not after:            Tue 03 Feb 2026 18:20:59 +0000
asID:                     65105
IP address blocks:        179.0.20.0/24 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c2:ac:45:4b:a9:df:fa:60:41:f3:d2:39:8a:3f:db:8d:2d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991D588A86F87B224C9CDAEAF9C96C6555E8038E
        Validity
            Not Before: Feb  4 18:15:59 2025 GMT
            Not After : Feb  3 18:20:59 2026 GMT
        Subject: CN=FD6D95ED9D9CB24F51C829B4C39D8135BF9B9DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2d:16:b1:b8:55:d0:f0:75:ef:e1:fb:af:56:
                    31:66:b0:92:fa:5f:8b:87:dc:0e:fc:74:1b:7d:95:
                    81:f3:b6:08:51:b5:90:ca:4c:6b:9f:72:c2:dd:f1:
                    27:e5:6c:51:17:90:25:52:37:cd:1f:46:f8:10:71:
                    22:58:09:e9:19:d7:59:dc:02:5d:40:b2:fd:9f:73:
                    55:44:45:a2:82:67:64:9b:cd:02:da:b7:a1:1e:c4:
                    32:64:d6:3d:b4:ca:6e:73:8b:21:18:3d:bd:b7:3c:
                    62:44:f8:77:71:d6:ef:92:84:40:a5:5f:69:f9:8e:
                    67:63:8a:be:55:93:aa:da:6c:45:40:a8:ef:b1:65:
                    91:ca:8a:52:c6:5a:c6:6d:dd:c1:f8:ef:f6:a9:c4:
                    15:f4:bc:69:80:fe:6f:67:e3:b2:55:32:40:90:a3:
                    8b:65:c7:6b:da:65:0c:eb:20:15:55:e2:74:84:ab:
                    28:5d:e9:3a:72:5d:16:40:ac:a1:4b:d0:3d:f0:72:
                    e9:bf:38:0a:84:58:20:d7:6d:50:d9:12:ed:5e:ce:
                    f7:53:d9:37:71:99:b6:35:d0:88:30:b9:c6:65:e6:
                    7d:c0:27:03:46:4c:d0:7a:b2:45:6c:41:7c:ae:e2:
                    89:03:e5:78:d4:c0:da:66:71:3a:de:77:ec:d4:87:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:95:ED:9D:9C:B2:4F:51:C8:29:B4:C3:9D:81:35:BF:9B:9D:B0
            X509v3 Authority Key Identifier:
                keyid:99:1D:58:8A:86:F8:7B:22:4C:9C:DA:EA:F9:C9:6C:65:55:E8:03:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/991D588A86F87B224C9CDAEAF9C96C6555E8038E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8A1C9722391B934E58B785E7CB43CE4B3F3556686D396FBA61FE06EC4CCD1E4C/0/3137392e302e32302e302f32342d3235203d3e203635313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:45:63:24:0c:ea:a9:45:40:f7:44:36:52:1f:9c:ba:f3:f8:
         cc:91:26:28:2a:1e:14:2f:25:7e:ea:c7:02:65:a4:5f:b1:b6:
         3a:b2:4a:a5:1f:65:08:7d:97:a0:da:40:f3:08:63:e3:33:22:
         42:68:c7:07:6b:ab:18:9d:9c:8f:66:4a:b3:de:ad:3d:d2:ad:
         b1:0f:ce:0b:d6:18:ed:96:c0:70:d2:c2:54:a5:62:cc:cc:5e:
         14:aa:7b:32:5c:43:f1:b2:ef:33:ec:1b:46:44:74:2f:64:ec:
         90:80:ff:1d:1c:1c:3c:e0:36:0d:92:f8:9d:9a:42:fa:cb:93:
         b0:9b:72:5e:7f:16:ca:77:4a:67:70:32:a1:27:e8:05:00:f0:
         c3:0e:e2:5d:94:ac:c3:6d:ae:dd:82:80:dd:a8:82:8c:da:80:
         21:14:d5:51:a1:d3:9c:7b:c1:b6:92:02:73:e6:4e:65:bb:e4:
         03:ff:56:fc:c7:96:8c:36:2c:e7:0b:18:4a:2e:96:f6:8f:56:
         c0:44:2d:c9:46:82:23:ff:0b:b3:99:18:93:9b:75:4f:0f:c7:
         17:ed:9e:52:4b:bb:41:cd:c0:d3:92:c4:1c:59:52:95:d8:7c:
         bf:56:e3:a6:72:5f:c4:02:6a:aa:64:b8:06:75:ee:c1:a9:15:
         17:70:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:51 2025 by rpki-client