Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35312e302f32342d3234203d3e20323635373939.roa
File:                     3137392e36302e35312e302f32342d3234203d3e20323635373939.roa (raw, json)
Hash identifier:          A7ZfpVL9k7oePcqMyU0pREN1zbDPFruz6rI3Sd5xflg=
Subject key identifier:   F0:67:FB:F4:E8:2E:46:5B:84:DB:62:E2:14:79:1E:7B:94:CA:53:83
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       6AA6CA1578BD5E7607A43369E57B6F9D6C5DA006
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35312e302f32342d3234203d3e20323635373939.roa
Signing time:             Tue 04 Feb 2025 18:20:29 +0000
ROA not before:           Tue 04 Feb 2025 18:15:29 +0000
ROA not after:            Tue 03 Feb 2026 18:20:29 +0000
asID:                     265799
IP address blocks:        179.60.51.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a6:ca:15:78:bd:5e:76:07:a4:33:69:e5:7b:6f:9d:6c:5d:a0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Feb  4 18:15:29 2025 GMT
            Not After : Feb  3 18:20:29 2026 GMT
        Subject: CN=F067FBF4E82E465B84DB62E214791E7B94CA5383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:3a:50:fe:b4:0d:3c:8c:e0:b7:cc:9f:1a:
                    3e:15:9c:be:d3:98:7a:ff:fa:98:68:dd:94:69:4a:
                    7d:cb:ba:b1:78:73:5a:7c:b6:5b:a0:ef:89:65:83:
                    56:d8:34:b3:fe:47:55:03:ec:31:1e:42:94:79:ca:
                    69:04:20:2f:da:a2:88:a4:f7:53:65:39:0d:ea:33:
                    51:56:0a:99:52:67:f0:fa:3e:a5:a2:99:5e:28:f2:
                    f0:a3:75:d1:fd:e9:53:88:7c:8b:9e:9d:4a:8f:90:
                    8f:97:9e:f3:45:b3:7d:bd:4d:e0:c7:ac:93:86:a6:
                    ac:3d:e0:80:54:91:52:41:fb:fd:fc:9a:86:1d:c6:
                    2d:99:b4:3a:e4:99:ed:b4:c6:d5:95:00:8f:54:8d:
                    c7:01:1f:d3:42:a4:bd:0a:be:24:8a:78:19:d6:03:
                    30:49:26:1a:c2:d2:a7:41:b8:75:4a:af:4c:73:73:
                    d6:7c:23:e0:62:0d:84:4f:06:1c:ae:e7:c6:a4:70:
                    54:15:47:17:41:7a:23:de:25:6f:60:e3:79:c2:9e:
                    5a:06:6e:d6:0e:87:b8:9d:ca:d6:9d:07:44:0a:aa:
                    ee:3f:90:26:5f:11:ca:3d:9e:fd:86:da:e2:b6:8f:
                    f4:68:cb:88:f9:12:4e:33:6b:f1:f0:e7:aa:7e:d9:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:67:FB:F4:E8:2E:46:5B:84:DB:62:E2:14:79:1E:7B:94:CA:53:83
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35312e302f32342d3234203d3e20323635373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:59:3f:e4:35:fa:0f:8d:97:93:05:59:7c:d0:e3:a7:e3:03:
         9e:d1:6e:2d:bd:1a:03:70:d3:b8:22:32:e9:7c:10:f0:f6:cd:
         de:ba:22:2d:64:ee:c2:59:5d:14:af:a2:17:dc:e9:3b:93:5f:
         f5:e6:b1:c8:dc:0a:17:3f:a4:ad:7f:c2:af:4f:f1:8b:a0:b9:
         c3:e0:87:73:f5:39:94:d1:56:50:33:e7:30:27:ea:ee:98:cc:
         94:2e:2b:8e:7b:9c:c7:98:33:24:e7:78:15:1c:a0:f3:b3:c2:
         11:34:86:b5:8c:c3:8c:d4:c2:b5:d3:53:55:51:27:de:3b:d0:
         6e:2c:48:a3:d7:59:88:60:05:9c:52:a1:10:7d:c1:3d:81:11:
         c7:ef:41:d4:47:23:80:e7:62:d6:68:a7:f0:6b:7d:d5:33:0c:
         28:0c:d1:fc:76:ed:3f:24:bb:67:69:e9:94:69:40:3b:60:43:
         66:f6:08:30:fc:55:b8:0d:38:e0:87:93:cf:1e:a7:b8:64:05:
         89:4f:79:61:1f:be:b4:43:88:9b:c5:9c:ac:a8:19:0c:1a:a2:
         2a:a8:93:4a:3b:44:39:47:c4:f4:d0:7f:cf:3a:d5:66:85:8a:
         2b:bd:64:be:62:f9:ea:15:9b:f0:94:c5:b5:44:a7:77:ad:07:
         ae:80:8a:30
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaqbKFXi9XnYHpDNp5XtvnWxdoAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgwNjhERjdCRThCN0I1MDI3QjJGQ0ExOTI3QURCNEM5
RTY1RDNDRjAeFw0yNTAyMDQxODE1MjlaFw0yNjAyMDMxODIwMjlaMDMxMTAvBgNV
BAMTKEYwNjdGQkY0RTgyRTQ2NUI4NERCNjJFMjE0NzkxRTdCOTRDQTUzODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6DpQ/rQNPIzgt8yfGj4VnL7T
mHr/+pho3ZRpSn3LurF4c1p8tlug74llg1bYNLP+R1UD7DEeQpR5ymkEIC/aooik
91NlOQ3qM1FWCplSZ/D6PqWimV4o8vCjddH96VOIfIuenUqPkI+XnvNFs329TeDH
rJOGpqw94IBUkVJB+/38moYdxi2ZtDrkme20xtWVAI9UjccBH9NCpL0KviSKeBnW
AzBJJhrC0qdBuHVKr0xzc9Z8I+BiDYRPBhyu58akcFQVRxdBeiPeJW9g43nCnloG
btYOh7idytadB0QKqu4/kCZfEco9nv2G2uK2j/Roy4j5Ek4za/Hw56p+2RTJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8Gf79OguRluE22LiFHkee5TKU4MwHwYDVR0j
BBgwFoAUCAaN976Le1AnsvyhknrbTJ5l088wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOERFQkEzQUVGMzZBNjVDQTY2QkNFMDEyNTI0NzY2OTY0
MTJFNzZFMUQ5RjA0NEZGNjI2QTk5NDk2MUNBRjJFLzAvMDgwNjhERjdCRThCN0I1
MDI3QjJGQ0ExOTI3QURCNEM5RTY1RDNDRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wODA2OERGN0JFOEI3QjUwMjdC
MkZDQTE5MjdBREI0QzlFNjVEM0NGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThERUJBM0FFRjM2QTY1Q0E2NkJDRTAxMjUyNDc2Njk2NDEyRTc2RTFE
OUYwNDRGRjYyNkE5OTQ5NjFDQUYyRS8wLzMxMzczOTJlMzYzMDJlMzUzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNTM3MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALM8MzAN
BgkqhkiG9w0BAQsFAAOCAQEANVk/5DX6D42XkwVZfNDjp+MDntFuLb0aA3DTuCIy
6XwQ8PbN3roiLWTuwlldFK+iF9zpO5Nf9eaxyNwKFz+krX/Cr0/xi6C5w+CHc/U5
lNFWUDPnMCfq7pjMlC4rjnucx5gzJOd4FRyg87PCETSGtYzDjNTCtdNTVVEn3jvQ
bixIo9dZiGAFnFKhEH3BPYERx+9B1EcjgOdi1min8Gt91TMMKAzR/HbtPyS7Z2np
lGlAO2BDZvYIMPxVuA044IeTzx6nuGQFiU95YR++tEOIm8WcrKgZDBqiKqiTSjtE
OUfE9NB/zzrVZoWKK71kvmL56hWb8JTFtUSnd60HroCKMA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:03 2025 by rpki-client