Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35352e302f32342d3234203d3e203532343638.roa
File:                     3137392e36302e35352e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          iBwj3LwCxSn+trQ2LpXyaXwtNqH4IswX7AvIdSM0taY=
Subject key identifier:   75:06:62:48:0F:B8:F2:BA:65:EA:24:31:3F:CC:62:16:A2:E5:67:C1
Certificate issuer:       /CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
Certificate serial:       05B97056688E7BD9DCC406FB170801084A5825E7
Authority key identifier: 08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35352e302f32342d3234203d3e203532343638.roa
Signing time:             Sat 08 Feb 2025 14:35:00 +0000
ROA not before:           Sat 08 Feb 2025 14:30:00 +0000
ROA not after:            Sat 07 Feb 2026 14:35:00 +0000
asID:                     52468
IP address blocks:        179.60.55.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b9:70:56:68:8e:7b:d9:dc:c4:06:fb:17:08:01:08:4a:58:25:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF
        Validity
            Not Before: Feb  8 14:30:00 2025 GMT
            Not After : Feb  7 14:35:00 2026 GMT
        Subject: CN=750662480FB8F2BA65EA24313FCC6216A2E567C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:75:96:26:e2:50:28:28:12:4f:b5:46:ae:
                    a7:5a:42:00:73:30:fc:fc:34:53:23:82:04:d7:b5:
                    04:fa:8a:ad:97:25:86:6f:3b:82:a2:61:b3:1c:26:
                    43:49:40:c2:aa:b5:d6:76:4c:3a:53:59:13:7d:b2:
                    9d:2a:75:54:b3:d5:2c:2f:d3:93:3c:65:cf:cd:fd:
                    8f:5b:32:f7:ee:e6:52:f3:50:82:40:67:a0:03:78:
                    59:4a:7e:7d:72:dc:26:da:fb:28:e9:a0:3d:65:6d:
                    fc:f8:1a:ad:82:0d:53:c0:37:96:bd:30:10:61:30:
                    63:d9:f5:54:98:b8:75:4f:c0:71:60:a8:f9:f4:71:
                    13:ac:b9:52:4f:e1:10:26:3a:5f:9a:35:02:e9:a2:
                    5b:4f:63:83:a4:57:54:c1:db:08:bb:8c:6a:af:88:
                    e4:eb:00:b1:bc:c0:b0:28:98:ab:c9:4b:5a:f1:98:
                    96:96:1e:09:79:3e:05:6a:8b:b1:bc:2c:e6:00:d6:
                    fd:b2:5f:d5:d2:3d:c9:36:16:d5:dc:9c:21:d8:3e:
                    2c:fe:30:a3:a4:41:d2:80:3f:e8:f2:c3:28:f4:6d:
                    e8:59:ff:a2:a1:90:3c:96:d4:bb:af:31:26:3b:46:
                    55:c6:12:3f:be:35:a4:e4:94:13:7e:1d:a2:10:fb:
                    1f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:06:62:48:0F:B8:F2:BA:65:EA:24:31:3F:CC:62:16:A2:E5:67:C1
            X509v3 Authority Key Identifier:
                keyid:08:06:8D:F7:BE:8B:7B:50:27:B2:FC:A1:92:7A:DB:4C:9E:65:D3:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08068DF7BE8B7B5027B2FCA1927ADB4C9E65D3CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8DEBA3AEF36A65CA66BCE01252476696412E76E1D9F044FF626A994961CAF2E/0/3137392e36302e35352e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:c5:c3:10:3e:85:46:96:df:0d:aa:3e:c2:ed:15:77:68:e1:
         3f:14:70:bf:84:1d:33:27:a8:cc:86:1b:b3:15:13:94:92:07:
         32:6f:87:d3:ff:42:19:33:f8:3d:27:fe:8f:7c:4f:f1:ca:35:
         47:4e:42:15:af:e7:48:9a:62:42:a6:1f:db:5c:f4:5f:88:88:
         b5:73:69:9b:44:d1:08:dd:32:f0:84:b6:83:f9:55:38:bb:03:
         e1:f8:e4:10:82:b8:81:d0:de:3e:07:1c:e9:4c:7d:24:75:c8:
         62:66:ac:7d:13:e9:98:2d:a3:1a:c9:46:2b:bc:78:a6:0b:87:
         6f:a8:74:80:31:97:08:6d:9e:be:d0:d1:c8:20:71:2d:4a:d8:
         09:4b:4d:02:bd:e5:2d:64:66:21:e0:7e:f9:32:e1:9b:a8:2a:
         6a:9f:5d:d1:fa:20:c4:be:fe:80:51:25:71:bc:15:67:2b:c6:
         44:69:ec:2c:ee:cd:61:2b:69:82:1b:60:34:d4:ac:35:1c:ff:
         52:d0:bf:58:20:b3:5c:37:7a:c4:66:07:63:b1:b8:83:22:ad:
         6f:60:04:49:14:2d:75:08:da:d3:be:32:c5:4f:9a:72:62:3c:
         43:e0:7a:28:11:e3:00:40:13:54:ed:42:42:67:8e:84:96:8a:
         19:29:02:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:41 2025 by rpki-client