Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa
File:                     3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          R2JSj/c5FCaqtBYdAS6U7R+yqIbLAzmGdEMfhjvfmk0=
Subject key identifier:   16:BD:A7:6E:10:A0:71:04:08:01:A2:3B:82:29:8E:6E:91:F0:98:30
Certificate issuer:       /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial:       6D250BAF7F71E234A1C7908B7BAB8CDB9CD6E7DF
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa
Signing time:             Tue 04 Feb 2025 17:59:03 +0000
ROA not before:           Tue 04 Feb 2025 17:54:03 +0000
ROA not after:            Tue 03 Feb 2026 17:59:03 +0000
asID:                     262234
IP address blocks:        179.49.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:25:0b:af:7f:71:e2:34:a1:c7:90:8b:7b:ab:8c:db:9c:d6:e7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
        Validity
            Not Before: Feb  4 17:54:03 2025 GMT
            Not After : Feb  3 17:59:03 2026 GMT
        Subject: CN=16BDA76E10A071040801A23B82298E6E91F09830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:56:b3:b4:de:de:80:e6:01:0f:ae:22:e2:79:
                    a6:d0:2d:10:91:b6:25:cf:4d:40:c6:42:19:bf:ff:
                    8b:99:03:39:a3:c3:88:54:63:6b:60:ad:eb:0e:9c:
                    26:b8:fe:46:a6:85:ec:11:56:2e:f3:db:c8:9c:e8:
                    b1:26:c1:40:32:7f:8d:25:d1:13:ff:09:c9:f3:dd:
                    09:00:31:ac:33:4f:03:ab:8a:fd:4e:45:c7:0b:3a:
                    ef:62:11:2f:8f:61:a6:07:66:e0:d4:82:84:d3:f9:
                    a7:54:f6:e4:b2:1f:d6:a5:4d:c9:bd:9a:c1:9a:74:
                    c7:0a:b4:5c:b8:e9:26:f8:46:96:37:1c:aa:fc:92:
                    a0:93:52:71:da:0c:13:67:18:c7:de:e9:89:85:38:
                    af:94:98:32:b0:1d:81:8e:ac:b1:68:d2:12:51:0b:
                    44:3b:a0:40:0e:ce:cf:85:a6:e1:93:9b:1b:df:b3:
                    36:ce:4e:f1:fd:15:0b:25:b1:61:b3:51:7b:cf:62:
                    96:6c:87:e1:55:2b:68:aa:c9:8c:46:42:1e:a6:6f:
                    ce:4c:10:e9:20:13:60:f8:d0:3a:29:eb:e5:cd:9e:
                    53:d5:55:90:d7:b9:54:38:2e:65:8a:a6:af:fd:25:
                    44:e0:5f:07:7a:ee:3b:d3:b3:fc:59:4f:72:29:dc:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BD:A7:6E:10:A0:71:04:08:01:A2:3B:82:29:8E:6E:91:F0:98:30
            X509v3 Authority Key Identifier:
                keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:99:f7:a8:ad:1f:7c:63:9c:ed:c2:ba:79:b3:07:eb:ce:
         43:c9:fb:aa:d8:8a:43:43:62:ed:78:d7:48:8a:40:68:26:8f:
         46:36:2a:cb:ff:b3:ca:e7:e7:22:3e:05:9a:76:d0:63:92:70:
         8a:ea:2a:74:c3:4a:4b:63:1d:00:a7:f1:58:3a:4f:aa:1e:ab:
         fd:e6:74:3d:4e:2d:cc:ee:4c:23:1b:0f:64:0d:bf:20:fc:1a:
         df:ca:c3:7a:27:e9:fa:63:e4:09:27:95:15:b4:f5:e4:7d:a6:
         89:19:25:20:a9:d6:cc:93:1f:2c:3d:56:9f:6d:e7:dd:b3:7a:
         2c:8e:af:05:f3:61:77:70:84:36:5e:50:5d:4d:74:90:80:89:
         4c:12:87:79:01:ee:26:b3:f4:67:cd:09:ea:de:c9:4a:d0:a3:
         1f:7a:d2:82:89:ab:cf:19:b5:da:39:97:40:52:ee:46:4e:00:
         d6:9a:e4:df:37:1f:6e:fd:c7:fb:ed:af:97:4c:85:2c:4e:4b:
         a7:88:20:17:5e:85:ef:c7:b1:ff:06:6f:28:6a:21:ad:eb:aa:
         1e:d4:37:b2:cd:9d:7a:83:21:10:01:04:62:a1:cf:d7:c6:da:
         56:9b:16:6d:22:4c:38:58:48:cd:6b:a1:cf:3b:fc:31:a7:8e:
         02:0e:cb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:19 2025 by rpki-client