Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/3137372e38372e3235302e302f32342d3234203d3e20323730303631.roa
File:                     3137372e38372e3235302e302f32342d3234203d3e20323730303631.roa (raw, json)
Hash identifier:          mrHAuqyeJfchCRaBhP7Gb9BJMWM8Lrt1uDGqZtbiM/o=
Subject key identifier:   FB:24:24:84:C9:06:63:41:14:7B:62:BD:35:03:66:0F:66:C9:B3:20
Certificate issuer:       /CN=8216836CFEBB6D738CAAE53C6968AA4C1180539B
Certificate serial:       44BFF28001C052041BF0B9290C2B6C433FFB00CF
Authority key identifier: 82:16:83:6C:FE:BB:6D:73:8C:AA:E5:3C:69:68:AA:4C:11:80:53:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/3137372e38372e3235302e302f32342d3234203d3e20323730303631.roa
Signing time:             Tue 04 Feb 2025 18:54:59 +0000
ROA not before:           Tue 04 Feb 2025 18:49:59 +0000
ROA not after:            Tue 03 Feb 2026 18:54:59 +0000
asID:                     270061
IP address blocks:        177.87.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:f2:80:01:c0:52:04:1b:f0:b9:29:0c:2b:6c:43:3f:fb:00:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8216836CFEBB6D738CAAE53C6968AA4C1180539B
        Validity
            Not Before: Feb  4 18:49:59 2025 GMT
            Not After : Feb  3 18:54:59 2026 GMT
        Subject: CN=FB242484C9066341147B62BD3503660F66C9B320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:1c:35:ba:f8:d2:63:3d:cd:a4:c7:76:e7:
                    39:2c:d1:90:fd:ba:ae:59:0e:e3:3c:fe:43:9f:1a:
                    83:5e:32:61:62:a8:55:32:0c:94:88:66:74:7e:3d:
                    75:6b:42:d2:cb:a0:f0:f1:85:08:39:8e:b9:2f:ef:
                    e5:a3:f6:38:fe:c7:d0:ad:3b:59:ec:98:ac:9a:9c:
                    0f:86:5e:72:15:5d:c6:18:bf:c1:ae:ad:f8:6c:dd:
                    04:e3:30:7d:cd:7d:4b:dd:92:65:0d:1d:a9:c8:92:
                    1e:91:65:2e:5b:30:90:6c:80:e0:ea:c6:2e:b6:aa:
                    8c:68:e6:55:c8:01:68:d4:26:15:ae:4f:ce:9d:2b:
                    26:8d:b6:10:ed:f6:db:89:94:1b:bd:12:3d:33:1a:
                    2d:19:05:c0:86:5d:1a:6a:d4:fc:02:83:be:5e:66:
                    05:2c:8e:55:02:bf:9f:51:03:6f:37:90:b0:b2:6f:
                    9d:5d:8d:59:54:e7:eb:6e:cb:77:80:9f:2f:9b:20:
                    fd:7e:be:f7:0e:9f:6b:1b:e5:1f:c1:b9:86:8a:bf:
                    8a:df:92:14:8a:6d:7a:3a:69:9e:d2:cd:6e:74:3f:
                    24:e8:db:a6:fe:73:f2:60:2b:f1:3f:0d:a3:df:a9:
                    fe:f4:44:e1:d3:02:3d:b9:63:bf:fe:08:d1:e4:d0:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:24:24:84:C9:06:63:41:14:7B:62:BD:35:03:66:0F:66:C9:B3:20
            X509v3 Authority Key Identifier:
                keyid:82:16:83:6C:FE:BB:6D:73:8C:AA:E5:3C:69:68:AA:4C:11:80:53:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8216836CFEBB6D738CAAE53C6968AA4C1180539B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/932BF618BE2DF16F7C820FC42441AE90D713E344AEC8FEFE013933B533504615/0/3137372e38372e3235302e302f32342d3234203d3e20323730303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a0:0f:c6:33:3d:b8:62:22:0f:05:f0:ec:84:a1:3c:ab:3b:
         a8:36:78:ae:2d:f9:df:6d:36:b4:5f:d5:49:ea:ef:d7:c8:3c:
         b5:46:6f:34:34:9e:38:0d:0f:67:26:bc:a3:8b:0a:b8:cd:d0:
         0f:4b:08:12:4e:73:80:bb:73:5e:d7:b3:a4:94:1d:eb:9a:22:
         15:7f:bf:5d:8f:4e:ac:45:0a:19:17:b0:e7:ff:0a:a6:22:d2:
         67:b9:45:a7:18:3b:fc:26:05:64:b5:02:77:21:0c:c5:cc:7a:
         7f:44:3c:50:18:48:03:a6:d7:12:75:71:34:10:22:13:c6:2b:
         91:a9:e6:fc:b1:2d:04:b4:01:2e:13:b9:38:53:fd:9b:7d:eb:
         60:f8:78:77:81:70:9a:40:89:02:f5:ba:4c:06:f2:0f:29:b9:
         1b:63:04:4e:f1:43:2c:e7:dc:42:d0:b8:18:18:22:b2:5f:12:
         b0:ec:08:ca:4e:c3:23:ad:d7:45:9d:ea:11:7f:ce:b1:28:37:
         10:43:1a:2b:03:90:6a:ae:45:80:12:bf:af:2e:98:0e:71:6f:
         cf:bd:58:33:d3:5b:96:9c:a5:f6:fb:67:7d:b6:b4:3d:ca:bc:
         38:ea:d4:d3:97:33:56:30:48:3f:f0:d2:6c:bd:03:b9:fb:65:
         cc:75:2c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:05 2025 by rpki-client