Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa
File:                     3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa (raw, json)
Hash identifier:          mkhGuKlu1rZ4y+eUpLLeN1ZHuJ0WA7PbGCfzwXNJYT8=
Subject key identifier:   26:B4:67:C1:E6:EF:A8:6F:39:90:53:DD:96:2F:44:34:68:BC:42:CD
Certificate issuer:       /CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
Certificate serial:       152AC677E1D803792B1EDAF8201ECEA2CCE93EBF
Authority key identifier: 15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa
Signing time:             Tue 04 Feb 2025 18:07:59 +0000
ROA not before:           Tue 04 Feb 2025 18:02:59 +0000
ROA not after:            Tue 03 Feb 2026 18:07:59 +0000
asID:                     263686
IP address blocks:        179.63.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2a:c6:77:e1:d8:03:79:2b:1e:da:f8:20:1e:ce:a2:cc:e9:3e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568
        Validity
            Not Before: Feb  4 18:02:59 2025 GMT
            Not After : Feb  3 18:07:59 2026 GMT
        Subject: CN=26B467C1E6EFA86F399053DD962F443468BC42CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cf:08:e4:4f:eb:b1:ad:7e:fb:5a:7b:c8:68:
                    3e:91:0a:8c:4c:8c:8c:10:9a:27:df:e6:77:fa:d0:
                    36:af:ae:d6:f9:be:38:4e:72:40:81:33:bd:40:46:
                    5d:40:70:23:32:88:0a:99:a0:fa:96:f0:9f:35:c3:
                    7a:fc:70:9a:c1:ec:85:cc:0f:dc:93:cb:13:fa:59:
                    f6:2f:bc:45:72:0e:06:d0:c4:88:37:1d:79:6f:8c:
                    fe:37:4b:e7:93:95:7b:22:96:08:9a:a4:3d:6e:ec:
                    7b:44:6b:b8:a5:a0:57:c6:b9:9c:2c:bb:03:8e:e9:
                    d7:61:70:cd:9b:87:83:4a:1d:5a:a3:2c:03:96:13:
                    1a:0c:11:9f:73:7b:22:46:16:a4:14:67:0f:dc:d2:
                    a4:da:27:99:f1:e6:15:56:0b:71:c7:e0:01:75:74:
                    bc:6e:5d:11:d4:e4:8c:a6:5e:67:85:55:68:67:22:
                    bd:92:1c:8f:52:4b:67:dd:fb:88:5f:52:fb:c2:88:
                    f3:67:2d:22:bb:55:48:f6:4c:66:5f:c2:9a:08:b5:
                    62:dc:0a:e9:15:09:65:f9:43:a0:27:da:ad:10:e8:
                    d0:a5:41:1b:0d:4c:6b:78:13:70:a8:a8:c4:25:bf:
                    cd:84:d5:17:bf:33:97:44:88:e7:11:2b:af:e5:dc:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:67:C1:E6:EF:A8:6F:39:90:53:DD:96:2F:44:34:68:BC:42:CD
            X509v3 Authority Key Identifier:
                keyid:15:16:C2:FE:3F:3E:4B:8C:86:41:B5:BD:C6:BD:64:83:D9:1D:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1516C2FE3F3E4B8C8641B5BDC6BD6483D91D2568.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9AB340B0872A073FB39EAC32A11DD049ADA33A26A7D12BE470A245100509C2A2/0/3137392e36332e3235322e302f32322d3234203d3e20323633363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:85:bb:1a:03:13:22:70:65:2b:8e:05:47:95:4c:4a:68:
         90:6f:b6:1d:fd:47:52:d6:b2:81:2d:28:9c:92:56:dc:a0:a6:
         c2:ff:5b:c9:44:6a:f1:6c:c9:98:6e:d4:7e:83:21:c3:04:49:
         33:a3:2e:67:8f:70:c9:21:aa:e7:d8:82:b7:b0:c1:a4:31:0e:
         0d:fd:02:b7:96:ee:17:e3:fc:a8:47:06:de:72:28:0e:c9:62:
         19:88:74:eb:ad:10:22:9d:60:6e:0d:b8:72:be:6d:0d:23:9f:
         7b:07:84:60:a6:f8:d6:82:98:88:af:b2:38:00:e6:73:d2:5d:
         ac:c8:3f:01:b6:d3:e9:0a:74:f3:ac:7d:b5:a6:30:09:38:d2:
         66:d5:53:2f:d1:eb:39:c6:75:fa:97:dd:b4:c3:35:1b:ac:6c:
         1f:de:30:4e:8f:e4:e1:30:af:3e:04:1b:57:e2:d2:90:d8:bd:
         f7:86:a4:f5:d4:19:8f:42:ca:12:ec:93:a0:a8:af:80:3b:04:
         16:57:b4:50:92:7f:c6:9a:b5:45:ec:9a:ff:17:1b:a3:ca:3b:
         76:6a:54:f2:23:68:96:35:b1:22:66:5b:86:72:6d:be:fc:83:
         91:9e:ce:c2:9b:b4:a0:12:80:02:4c:13:59:95:b0:76:e0:13:
         43:fd:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:03 2025 by rpki-client