Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3231342e302f32342d3234203d3e20323732393534.roa
File:                     3137372e3233342e3231342e302f32342d3234203d3e20323732393534.roa (raw, json)
Hash identifier:          zLxBXYtIdgueQ6G+ezOCqvkfh77n/Aq8RYmPFaK5G9g=
Subject key identifier:   79:28:7A:8A:C6:71:6F:70:EF:95:53:B2:11:4F:A6:21:98:23:E5:42
Certificate issuer:       /CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
Certificate serial:       7B3F86894FF4F8012A8AA6CBFFDD67CDF23CAA8C
Authority key identifier: C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3231342e302f32342d3234203d3e20323732393534.roa
Signing time:             Tue 04 Feb 2025 18:54:38 +0000
ROA not before:           Tue 04 Feb 2025 18:49:38 +0000
ROA not after:            Tue 03 Feb 2026 18:54:38 +0000
asID:                     272954
IP address blocks:        177.234.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3f:86:89:4f:f4:f8:01:2a:8a:a6:cb:ff:dd:67:cd:f2:3c:aa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2550A5D309EE2128E4FCDC02CD4AC5C576069E2
        Validity
            Not Before: Feb  4 18:49:38 2025 GMT
            Not After : Feb  3 18:54:38 2026 GMT
        Subject: CN=79287A8AC6716F70EF9553B2114FA6219823E542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:e4:ec:03:06:24:60:5b:a8:c6:6b:9e:db:
                    0a:dd:f8:e7:87:5a:fe:48:bf:1f:ea:a3:3c:86:ee:
                    4e:b4:72:2a:fe:0d:b1:c1:03:df:1b:ef:cf:d4:05:
                    b2:4b:20:a2:fb:19:f7:02:cb:8c:f9:8e:f2:7a:e8:
                    8b:89:3e:b3:15:c1:4b:5f:e7:fe:fe:d0:d4:a4:d5:
                    79:ef:38:80:cf:ec:5d:bb:a2:0b:26:da:70:38:ad:
                    f4:46:e4:7d:7f:f8:41:1d:84:16:e3:62:78:82:3c:
                    83:ec:39:64:66:36:50:ee:53:72:2f:93:eb:74:f9:
                    0c:f8:05:18:d9:ae:35:5b:c9:87:0d:1a:22:77:12:
                    7b:5f:80:ad:94:c1:49:6c:13:37:5c:e6:f8:67:b4:
                    4d:44:e3:42:01:88:8a:da:f4:b2:0c:02:af:fe:0f:
                    b8:44:b8:52:bb:dd:96:5d:58:7f:4b:a9:bd:29:5b:
                    39:01:e3:5a:7e:c2:1a:e7:83:b2:17:fe:23:fb:57:
                    b8:1f:b8:84:b0:09:98:d1:a8:ef:51:72:c1:57:5b:
                    d3:43:2c:c3:cc:00:2c:cc:c8:ab:36:7f:6d:7d:7d:
                    7f:f8:44:7e:10:85:12:ed:da:fb:e3:de:a6:4d:ff:
                    54:a5:09:f3:51:66:df:93:ba:9b:67:75:55:d0:61:
                    9c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:28:7A:8A:C6:71:6F:70:EF:95:53:B2:11:4F:A6:21:98:23:E5:42
            X509v3 Authority Key Identifier:
                keyid:C2:55:0A:5D:30:9E:E2:12:8E:4F:CD:C0:2C:D4:AC:5C:57:60:69:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2550A5D309EE2128E4FCDC02CD4AC5C576069E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0B746828A73803EE0AC2CCCF9D588C384A867E4A735BA471AE9620098431F63/0/3137372e3233342e3231342e302f32342d3234203d3e20323732393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:33:38:b6:50:4e:61:4c:76:e0:f5:4d:35:fa:fb:76:b3:f1:
         01:f6:9c:da:61:4d:da:4a:55:b0:00:3d:37:5b:c4:06:d4:74:
         25:26:6f:a0:e2:5f:08:c6:7f:fc:51:3e:91:72:82:cb:d5:9f:
         ad:fc:7b:a5:0d:e4:ef:27:2a:9e:fe:4b:00:43:dd:15:bd:ca:
         f9:3c:8b:7c:07:ba:89:b7:c3:0a:b5:e5:0b:ce:44:95:06:3a:
         87:41:33:ab:1c:90:04:bc:0f:70:e3:db:bd:7f:ed:21:43:c1:
         77:64:31:8d:35:03:4a:c0:75:5d:54:dd:c5:a3:f3:a3:f1:25:
         5f:cc:0e:61:aa:60:6c:7e:3f:74:df:ff:aa:18:95:93:a0:d1:
         cf:ed:4b:93:48:4e:db:c6:89:b5:9d:09:da:c8:2c:59:91:bd:
         b8:29:df:cf:8c:67:e0:f9:70:ed:09:94:fa:7f:fd:f3:a8:cb:
         75:2c:58:b2:76:34:af:d0:02:56:66:49:6d:5d:fe:16:9c:fe:
         70:96:40:0a:a7:1f:38:42:91:10:13:54:95:57:a1:5e:ab:ac:
         3e:52:66:48:d5:bb:59:10:29:91:6e:d6:81:ff:1a:e2:3d:22:
         d9:34:79:c1:42:14:79:27:a3:39:d1:63:10:31:24:9a:8d:8b:
         49:dc:21:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:52:50 2025 by rpki-client