Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa
File:                     3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa (raw, json)
Hash identifier:          +SChVpWPgBz7r7PBipz7NZVlOyGIKKEKu2Cv6OpRkVE=
Subject key identifier:   72:47:C2:56:52:96:C6:6E:C2:B1:91:77:C1:AF:06:44:90:A6:DA:52
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       08374F482BF84FEE74F1C42F67F5FDA1DE776EA9
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa
Signing time:             Tue 04 Feb 2025 18:31:19 +0000
ROA not before:           Tue 04 Feb 2025 18:26:19 +0000
ROA not after:            Tue 03 Feb 2026 18:31:19 +0000
asID:                     27768
IP address blocks:        177.250.128.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:37:4f:48:2b:f8:4f:ee:74:f1:c4:2f:67:f5:fd:a1:de:77:6e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:19 2025 GMT
            Not After : Feb  3 18:31:19 2026 GMT
        Subject: CN=7247C2565296C66EC2B19177C1AF064490A6DA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3a:a5:b1:78:d3:e1:8f:63:3b:30:74:6c:45:
                    ef:d3:3e:ed:cf:4e:3e:16:c4:f5:ab:97:ec:dd:47:
                    e1:61:43:59:0a:85:b3:f1:fa:5b:11:ed:94:75:06:
                    b5:6a:0f:a0:e6:fa:8d:33:22:cc:15:8b:4f:08:92:
                    55:b6:aa:ef:59:1b:23:be:7d:bc:69:cc:fa:f2:1b:
                    61:56:44:00:67:1f:35:5d:0a:d5:8c:a2:d4:ce:4e:
                    18:16:fb:f3:68:71:3d:02:1e:78:ba:c9:6b:b0:61:
                    a0:00:cd:ec:94:fe:91:ce:e2:04:95:f5:95:50:b3:
                    27:d7:c7:cf:e2:95:46:2a:78:34:db:7c:47:c3:69:
                    59:e0:95:10:1c:76:33:4c:4e:54:9f:30:d7:d5:dd:
                    de:f5:57:7e:03:bc:75:bc:48:e1:28:67:3b:44:3e:
                    d1:03:34:4c:f2:b4:6f:bf:5a:6c:7c:78:e4:ba:2d:
                    3f:2d:a9:90:bf:dc:33:fd:6a:b6:0f:a2:db:01:41:
                    8b:14:5f:b6:38:c4:3f:51:ef:25:b0:85:41:fc:32:
                    01:87:5c:50:2b:f9:ed:bd:5d:4a:7a:a1:08:eb:29:
                    3d:ae:e6:12:1a:64:46:10:77:dc:4e:d7:59:e8:29:
                    79:48:c5:8d:dc:be:51:39:be:c7:e6:95:b0:40:cb:
                    f3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:47:C2:56:52:96:C6:6E:C2:B1:91:77:C1:AF:06:44:90:A6:DA:52
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e3132382e302f31382d3138203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         96:91:32:6c:50:92:d8:0c:63:34:a2:f1:8d:57:58:23:bc:3b:
         d9:3c:aa:3c:4e:84:b8:f9:c0:cc:27:e4:7d:4c:b2:67:da:01:
         d2:af:8c:07:38:5b:c7:1a:fd:e5:f3:ad:3b:58:ff:fd:9c:e4:
         fd:fa:26:18:9c:be:7d:bb:41:a3:0f:61:79:1f:f1:f8:80:76:
         41:87:fe:d6:1d:3b:14:db:59:a3:31:18:8a:8a:24:6b:ef:91:
         6b:84:3d:a5:ec:d5:ba:7c:a3:10:c9:23:7d:51:d2:ea:db:a7:
         c4:9c:66:dd:ae:65:70:8e:c3:98:ac:41:9b:f1:12:f1:af:6c:
         5f:9d:e7:82:19:4f:57:e4:c5:4a:47:5b:76:71:28:ed:3e:5b:
         52:6f:8d:c0:b4:f0:4c:cb:8b:c9:22:e9:71:c6:5b:62:ac:5c:
         74:57:33:1e:4a:2a:14:cb:c2:d4:9a:a5:7b:c0:05:7b:4c:2b:
         74:bc:6c:2b:47:72:97:d9:92:f8:c0:dc:e5:c2:ae:7e:13:f7:
         66:c1:00:b3:f9:24:7b:67:15:f7:13:39:be:6a:22:87:ff:03:
         71:3c:5c:27:f1:56:a5:48:64:6e:43:e1:68:f1:63:3e:63:1c:
         32:87:f4:61:62:c1:27:57:5a:c6:53:b6:6d:84:7a:20:3f:34:
         b7:f4:9d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:53 2025 by rpki-client