Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3137392e302e3134392e302f32342d3234203d3e20323731373934.roa
File:                     3137392e302e3134392e302f32342d3234203d3e20323731373934.roa (raw, json)
Hash identifier:          aGL7+RUWd7oMQI3t0tQg8S8v26uJzmy4ZEG/8CFUVUQ=
Subject key identifier:   4D:BF:E3:30:CB:C6:89:C2:74:42:06:92:D1:A6:F1:17:86:E9:16:F2
Certificate issuer:       /CN=7104CDD93B39A8C01D7C8289677F1150E057E4A5
Certificate serial:       0839EFCFAC62533F12B672D0BF72FD83430D4D77
Authority key identifier: 71:04:CD:D9:3B:39:A8:C0:1D:7C:82:89:67:7F:11:50:E0:57:E4:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3137392e302e3134392e302f32342d3234203d3e20323731373934.roa
Signing time:             Tue 04 Feb 2025 18:29:05 +0000
ROA not before:           Tue 04 Feb 2025 18:24:05 +0000
ROA not after:            Tue 03 Feb 2026 18:29:05 +0000
asID:                     271794
IP address blocks:        179.0.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:39:ef:cf:ac:62:53:3f:12:b6:72:d0:bf:72:fd:83:43:0d:4d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7104CDD93B39A8C01D7C8289677F1150E057E4A5
        Validity
            Not Before: Feb  4 18:24:05 2025 GMT
            Not After : Feb  3 18:29:05 2026 GMT
        Subject: CN=4DBFE330CBC689C274420692D1A6F11786E916F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ac:e2:cc:4a:68:56:c5:e2:c5:e0:52:6a:7d:
                    1e:15:79:b8:2a:65:ff:d4:4e:6a:e0:d3:0d:54:c7:
                    eb:50:bf:8e:c0:91:71:ed:0a:07:57:89:27:70:f3:
                    74:56:d1:f4:58:8c:70:2c:f4:42:b5:00:99:60:b0:
                    54:f4:3e:41:24:a6:8f:d5:91:0b:08:30:95:f8:60:
                    6c:e6:5a:37:3f:6c:f4:24:93:02:26:44:f4:00:69:
                    0d:d4:f8:f3:47:94:14:ee:8c:8f:8d:64:24:43:a2:
                    78:11:54:da:68:1d:43:9e:2e:c9:7a:5b:7f:da:22:
                    75:06:39:d5:5e:c0:b6:27:35:d4:57:1e:86:6f:22:
                    e3:e0:b5:78:54:ad:07:d3:f1:b5:12:33:e9:ec:a1:
                    2c:4f:6a:5d:6d:5e:6b:0b:72:d7:96:bc:a4:e2:9a:
                    3a:31:45:38:0f:22:82:5d:9a:c7:ef:95:ae:07:05:
                    e9:ef:1b:14:51:83:d2:ed:a6:8d:71:06:bb:c2:02:
                    88:32:25:c1:96:7d:ea:e2:5a:e0:37:4f:62:df:22:
                    00:85:fc:cd:0e:7d:cc:cd:b8:58:18:d0:60:b5:dc:
                    a7:18:0a:c7:8f:23:87:3f:c6:18:7e:14:c1:ab:3c:
                    d4:d6:92:a3:ef:f6:0d:86:d1:d6:00:ce:f6:39:42:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:E3:30:CB:C6:89:C2:74:42:06:92:D1:A6:F1:17:86:E9:16:F2
            X509v3 Authority Key Identifier:
                keyid:71:04:CD:D9:3B:39:A8:C0:1D:7C:82:89:67:7F:11:50:E0:57:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3137392e302e3134392e302f32342d3234203d3e20323731373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:5b:cc:32:3d:1f:a6:c3:1b:9e:73:2d:68:39:c3:3f:3f:
         82:be:58:b2:9a:75:19:e7:0b:70:85:e4:91:28:07:ba:83:af:
         88:05:06:1a:b7:e3:ec:e0:63:6e:27:a0:89:95:5a:5d:91:10:
         fa:b2:f7:53:4a:07:52:7c:0f:2a:f2:88:64:c5:3e:76:99:56:
         ec:62:62:33:48:5e:e0:48:e7:7f:1e:2e:65:23:ab:46:88:32:
         a3:ed:38:13:25:1d:3d:f1:e4:54:4a:36:70:2b:33:0d:71:c7:
         c0:d9:fe:f1:14:d7:e9:c0:80:5d:61:1a:72:72:39:b3:a8:0a:
         63:2a:52:ec:e5:37:39:e2:c3:6d:eb:21:5d:dc:44:cb:cb:89:
         c5:76:67:9b:c1:ab:ff:c1:66:26:32:a0:f0:de:7d:73:4a:34:
         0a:15:ad:57:82:5d:e6:89:95:8f:e8:c3:36:7c:00:36:db:e6:
         2d:b2:b1:ec:4a:4f:fa:19:76:79:4b:92:f5:47:78:fc:49:30:
         fc:14:40:a3:2e:f6:02:e1:54:a2:ad:eb:19:7d:b4:28:fb:c7:
         73:96:12:a0:16:89:b5:7f:7f:dd:42:8b:7d:e4:e0:80:fd:96:
         e5:27:3f:f5:e9:18:fc:84:00:cb:c8:bc:2d:92:32:79:56:03:
         9e:df:10:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:30 2025 by rpki-client