Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/3137392e302e3134382e302f32342d3234203d3e20323633323034.roa
File:                     3137392e302e3134382e302f32342d3234203d3e20323633323034.roa (raw, json)
Hash identifier:          oQba1jDB4fHtgk2f5ted1YV3623nFA571f9A6wPbZGM=
Subject key identifier:   46:8C:B6:C2:CF:31:3F:73:2D:14:3A:A3:B9:2D:7A:ED:37:53:A0:97
Certificate issuer:       /CN=C198D1C54DAB7708481D5361509D7D3E3976EA31
Certificate serial:       28F9ADF0EC4CA5BB5EA1B428D4EED87AFB7F198B
Authority key identifier: C1:98:D1:C5:4D:AB:77:08:48:1D:53:61:50:9D:7D:3E:39:76:EA:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/3137392e302e3134382e302f32342d3234203d3e20323633323034.roa
Signing time:             Tue 04 Feb 2025 19:59:52 +0000
ROA not before:           Tue 04 Feb 2025 19:54:52 +0000
ROA not after:            Tue 03 Feb 2026 19:59:52 +0000
asID:                     263204
IP address blocks:        179.0.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f9:ad:f0:ec:4c:a5:bb:5e:a1:b4:28:d4:ee:d8:7a:fb:7f:19:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C198D1C54DAB7708481D5361509D7D3E3976EA31
        Validity
            Not Before: Feb  4 19:54:52 2025 GMT
            Not After : Feb  3 19:59:52 2026 GMT
        Subject: CN=468CB6C2CF313F732D143AA3B92D7AED3753A097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:dc:1b:df:b5:7c:eb:c4:ef:0b:97:eb:4b:
                    d2:64:f4:68:79:5d:50:09:b0:8c:bb:2c:fd:e0:aa:
                    fc:72:a3:b5:93:0b:45:b8:c4:96:7d:ff:e7:c1:33:
                    59:8a:7b:f6:1f:58:02:c9:02:b5:8b:76:61:5c:6f:
                    09:eb:8c:cb:7c:22:a7:d0:19:58:d2:7b:a7:a6:45:
                    f6:54:4a:cd:99:bf:08:d8:a7:63:35:37:3a:9b:28:
                    d0:24:0c:f8:c1:1d:05:18:60:dd:90:07:4d:6d:67:
                    08:e0:cf:ea:db:0e:02:35:d7:6f:fb:74:d1:fe:eb:
                    e2:0b:95:27:64:7b:3f:4a:5c:da:1a:9c:70:f2:1a:
                    2f:b2:c5:63:e5:ef:31:8d:62:08:5c:4b:8d:5a:26:
                    99:17:dd:6a:70:84:18:b9:fd:29:f0:cf:97:69:90:
                    d4:ec:eb:77:14:f0:29:29:1b:da:91:ad:c3:3c:49:
                    66:2c:18:40:39:16:c7:08:8d:35:ef:ec:db:b4:99:
                    b0:3f:3d:60:d5:24:ed:f5:a9:21:e8:07:69:92:93:
                    83:5d:b8:14:d1:83:0b:f1:61:7a:06:19:71:b0:67:
                    25:64:20:58:13:0c:9d:1b:f6:7b:36:07:85:64:4e:
                    af:b5:e2:2b:4a:3a:ac:9e:28:60:98:59:ca:6f:e9:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8C:B6:C2:CF:31:3F:73:2D:14:3A:A3:B9:2D:7A:ED:37:53:A0:97
            X509v3 Authority Key Identifier:
                keyid:C1:98:D1:C5:4D:AB:77:08:48:1D:53:61:50:9D:7D:3E:39:76:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C198D1C54DAB7708481D5361509D7D3E3976EA31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99BBFC48098D6ABADF687E23044B7D08C231F60798739F7B2665D94E2F81ACAD/0/3137392e302e3134382e302f32342d3234203d3e20323633323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:80:3b:8c:56:c3:3b:29:b1:51:db:b6:bb:25:ce:ad:3f:b4:
         50:54:35:c6:68:1a:aa:37:8f:4f:f8:7b:bb:a7:02:59:e0:56:
         c2:b4:ad:30:86:1d:e8:2d:55:95:0e:86:14:ce:fe:d5:45:d8:
         41:68:0c:b9:01:1b:d7:06:d3:d9:5b:b9:7a:d1:f5:64:4c:54:
         d3:c4:9f:cc:8b:cc:8c:6d:48:f5:5b:58:4c:60:40:0a:1c:f0:
         e6:90:39:7e:4a:bb:e2:e2:82:16:09:a6:57:53:23:d2:b3:0a:
         b4:67:ae:50:43:8b:c4:1f:13:93:3e:f5:4d:3e:00:03:87:1d:
         fd:b5:96:08:33:81:69:96:70:74:6a:a3:59:e5:0a:80:2d:72:
         35:25:59:50:65:93:4e:df:9f:c8:1c:2a:11:34:57:a4:18:e8:
         5c:ae:0f:63:4b:a1:f2:a3:30:5d:31:ab:e2:cb:c4:88:c9:8d:
         da:46:92:b4:13:0a:cb:88:5d:db:60:9c:5b:54:c1:8d:82:5d:
         6e:61:11:3b:00:88:ae:89:52:1c:f3:9a:be:54:7d:4e:be:7c:
         9f:96:95:59:0a:a0:50:05:7a:e6:34:3b:ac:4c:52:e5:6e:77:
         d6:c0:62:4c:ff:1f:ba:f8:ba:48:a9:08:61:02:f7:62:d3:cc:
         e1:61:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:57 2025 by rpki-client