Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e32342e302f32312d3231203d3e203237373638.roa
File:                     3137372e3235302e32342e302f32312d3231203d3e203237373638.roa (raw, json)
Hash identifier:          4HysEcdf1QRSUpmVAcFxfxVjGiIP42w94v6IklJHock=
Subject key identifier:   E7:75:88:EC:59:1C:D2:02:99:F6:45:EE:F3:D8:3E:86:29:3B:EB:07
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       3044A97B3B403AAA7118B786F979B2BEDAA81422
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e32342e302f32312d3231203d3e203237373638.roa
Signing time:             Fri 06 Dec 2024 18:35:00 +0000
ROA not before:           Fri 06 Dec 2024 18:30:00 +0000
ROA not after:            Fri 05 Dec 2025 18:35:00 +0000
asID:                     27768
IP address blocks:        177.250.24.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:44:a9:7b:3b:40:3a:aa:71:18:b7:86:f9:79:b2:be:da:a8:14:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  6 18:30:00 2024 GMT
            Not After : Dec  5 18:35:00 2025 GMT
        Subject: CN=E77588EC591CD20299F645EEF3D83E86293BEB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:e3:c8:35:55:69:5c:7c:03:b5:00:62:cc:
                    7d:65:fc:c7:09:8e:a0:97:07:82:bf:d1:9b:81:cd:
                    5b:3d:7d:2e:db:cf:d2:50:76:b8:3b:b3:c4:b8:ad:
                    56:0a:90:2f:22:7a:3e:3a:9a:40:5a:69:78:f2:ff:
                    6a:18:86:a4:f1:9b:d4:60:63:cb:b0:27:e0:4a:05:
                    69:5c:d3:8e:7b:92:b7:ec:2a:50:77:dc:5a:cc:ad:
                    39:c7:b0:e8:0a:bb:44:99:f5:4f:75:6b:c7:98:32:
                    42:c6:27:9b:b1:14:98:a7:91:0f:86:f8:b8:d3:ca:
                    97:0f:7f:d7:3d:46:1f:d9:97:6f:37:70:7c:cc:69:
                    a4:d0:f7:d9:6c:a4:50:f3:e1:4f:79:21:f5:0b:c5:
                    8d:4a:68:f0:29:8c:d4:19:92:d6:40:93:37:7c:40:
                    8b:a1:bb:b9:d5:62:0f:c2:d9:ff:3e:7c:ba:79:aa:
                    32:15:bc:e5:14:e7:10:ea:5c:2f:ab:ec:43:17:9b:
                    39:bb:a7:e2:2c:7f:fb:06:c4:d8:e3:89:8c:df:8f:
                    af:8e:91:80:30:c9:fe:06:0c:7f:99:42:1c:d8:b1:
                    17:df:1c:d0:7a:74:4d:cf:3e:94:f1:8f:3e:80:d9:
                    ec:9d:1f:fb:a9:e5:92:4c:a7:eb:52:33:e1:3d:d2:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:75:88:EC:59:1C:D2:02:99:F6:45:EE:F3:D8:3E:86:29:3B:EB:07
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3137372e3235302e32342e302f32312d3231203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:83:59:dc:74:e3:5d:96:b3:fd:e2:99:50:55:b3:c4:05:ac:
         d5:ec:45:32:92:f7:bb:9f:0b:2e:80:ae:2e:f5:81:21:58:41:
         84:f2:b9:b5:fd:85:00:40:a0:9c:ca:8e:d7:9b:96:72:df:b3:
         fd:8c:5a:ce:eb:f8:fe:f3:ac:7b:71:ae:f5:94:b9:b8:ad:b7:
         87:31:50:7d:c0:cb:05:e1:d0:38:00:41:b9:8d:74:00:c7:b5:
         45:87:67:5c:79:f3:65:92:be:ac:c5:f7:f3:07:18:cc:ba:31:
         2d:0e:9f:1f:0a:9a:29:04:01:32:d6:6b:fc:1b:cd:2e:5a:1e:
         82:9b:cf:0c:68:40:ff:89:b0:1e:3a:95:41:c8:20:65:96:b0:
         1f:1d:af:5a:ff:80:4b:72:43:52:87:89:3a:8e:1c:ef:4e:84:
         03:ea:1a:dc:29:8b:a8:61:91:e1:5f:8e:6c:1c:66:60:cc:9b:
         30:b0:e0:cc:77:57:e3:85:d1:5b:dd:80:69:dc:9e:9d:b7:a1:
         af:23:f4:cf:d0:25:af:0f:65:4a:2b:73:e6:2c:42:ee:13:0f:
         cd:39:58:86:68:96:b7:a8:4d:55:4d:95:87:01:b2:06:be:5f:
         e3:19:9e:39:4d:e4:17:90:58:91:3a:b8:4f:51:7e:80:07:da:
         b5:11:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client