Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39302e302f32342d3234203d3e20323633313835.roa
File:                     3137392e34332e39302e302f32342d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          zwKS7OcMsrSFouFqEDCFn2b0LybPRl+qoZcK2kwQ7Ak=
Subject key identifier:   4D:AE:68:CB:98:D2:20:C4:B2:73:6F:28:44:30:A8:ED:19:6E:4C:75
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       3D1D8A407315FA84968FE76DE5BCE938F7FBEDB0
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39302e302f32342d3234203d3e20323633313835.roa
Signing time:             Tue 04 Feb 2025 18:11:52 +0000
ROA not before:           Tue 04 Feb 2025 18:06:52 +0000
ROA not after:            Tue 03 Feb 2026 18:11:52 +0000
asID:                     263185
IP address blocks:        179.43.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1d:8a:40:73:15:fa:84:96:8f:e7:6d:e5:bc:e9:38:f7:fb:ed:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Feb  4 18:06:52 2025 GMT
            Not After : Feb  3 18:11:52 2026 GMT
        Subject: CN=4DAE68CB98D220C4B2736F284430A8ED196E4C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:ae:21:07:26:a9:16:ed:76:19:1d:db:45:
                    97:c2:2b:9b:11:82:a9:f1:86:28:c1:a1:6c:cb:f8:
                    ce:8a:00:56:2f:22:63:92:b9:ba:bf:26:08:f9:36:
                    43:a7:30:32:8e:52:db:a7:14:31:57:f2:6f:0e:f1:
                    a4:30:36:c1:7a:a2:cf:4c:ff:a8:38:4e:e3:1d:77:
                    59:52:d5:63:ff:ae:d4:32:4b:17:8a:6b:a1:9d:9b:
                    fe:8f:1e:d9:09:e9:53:b9:fd:ab:a7:72:c0:53:1c:
                    69:85:6d:64:25:4f:c7:0d:4d:37:33:74:5d:41:60:
                    0c:e1:1d:98:ed:05:10:6c:03:59:30:2e:8a:72:83:
                    1c:c8:1e:b3:c8:4d:91:11:96:cd:46:ff:90:00:27:
                    26:0e:0d:c3:8c:29:31:12:e5:59:15:a0:58:a8:06:
                    34:47:74:5d:30:60:fc:98:b3:cd:e8:bd:da:75:4f:
                    57:b1:dc:fc:12:e5:9c:5f:6e:0f:09:87:bf:22:37:
                    d2:86:c1:e4:96:77:cc:2c:3d:bf:22:03:3a:8c:6d:
                    d5:f7:8e:69:04:05:a1:11:2f:2d:d9:44:37:21:72:
                    0a:ad:39:3d:1f:97:d2:bf:87:0b:e7:81:31:be:ca:
                    1c:27:e1:a0:64:c9:ab:86:28:e9:94:33:01:34:47:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:68:CB:98:D2:20:C4:B2:73:6F:28:44:30:A8:ED:19:6E:4C:75
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39302e302f32342d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:e1:e2:fa:0b:87:e8:24:77:e9:03:ee:e7:61:e0:5b:54:
         2a:c8:3d:b1:e0:db:b5:a8:2b:31:99:fa:00:bd:6c:f6:9f:b7:
         ce:8f:07:f6:b9:ba:b7:46:95:a0:ef:39:11:86:63:34:59:21:
         c8:b5:4c:21:c6:be:51:90:32:ce:e7:eb:c0:e3:23:a8:90:d6:
         1d:16:a2:14:36:7d:15:01:c3:70:bc:bd:26:8e:31:40:f8:3d:
         60:31:2c:d2:82:f2:d1:8b:d5:ca:93:5b:ad:b4:82:78:90:db:
         f5:31:66:a0:73:1a:d0:d3:57:28:cb:65:e9:76:e0:98:46:a1:
         3b:07:97:ae:8a:c0:1a:7d:88:45:21:d4:2c:d6:9e:92:0c:14:
         f5:5d:6f:df:38:80:a1:cb:fb:d2:8a:ea:95:9f:b0:70:77:33:
         32:36:87:14:57:ca:37:34:6c:43:62:e6:bd:03:d5:f6:7c:b7:
         7d:1b:94:26:9f:2b:a9:65:ae:65:a6:c6:fb:c7:54:4e:b7:92:
         3e:66:12:70:c3:48:f6:0a:26:fd:78:59:63:4d:91:7f:01:dc:
         1a:4c:a8:16:d1:16:b5:e9:78:96:1e:ad:33:4c:0a:48:31:39:
         40:8c:d3:11:2b:c2:ba:42:f0:f4:76:ba:ee:d8:fb:36:d5:7b:
         2d:72:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:47:39 2025 by rpki-client