Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32332d3233203d3e20323730303437.roa
File:                     3137392e302e3138342e302f32332d3233203d3e20323730303437.roa (raw, json)
Hash identifier:          Tovtnxs0BzC/aG5sMUwxIm+tRF1bT1k8A8YhE0Oqy54=
Subject key identifier:   2F:FB:43:F7:F2:DD:BC:BB:69:E2:AD:9E:2F:93:76:81:AB:3F:62:A2
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       42B43385D58D523AEEFD9864F35F1DF8E4157AD1
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32332d3233203d3e20323730303437.roa
Signing time:             Tue 04 Feb 2025 18:02:04 +0000
ROA not before:           Tue 04 Feb 2025 17:57:04 +0000
ROA not after:            Tue 03 Feb 2026 18:02:04 +0000
asID:                     270047
IP address blocks:        179.0.184.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b4:33:85:d5:8d:52:3a:ee:fd:98:64:f3:5f:1d:f8:e4:15:7a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Feb  4 17:57:04 2025 GMT
            Not After : Feb  3 18:02:04 2026 GMT
        Subject: CN=2FFB43F7F2DDBCBB69E2AD9E2F937681AB3F62A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:54:4e:2f:8d:2f:8e:58:33:e8:10:bf:76:
                    2b:b2:c9:cc:be:d8:3b:d9:5e:d6:f5:e5:d1:e8:ef:
                    89:4d:60:20:ca:c8:1a:fd:a1:b3:0a:bd:89:db:e9:
                    f6:4c:cb:c6:db:d3:a7:f2:eb:61:5a:3b:c1:a2:40:
                    dc:51:38:c5:c2:64:ed:7c:04:43:95:80:2d:39:80:
                    7c:28:dd:16:fb:9d:7b:30:4a:aa:e8:32:3e:e1:c3:
                    83:5c:ae:39:5f:06:10:e3:0d:18:c5:39:f0:45:81:
                    fc:4a:17:e2:e6:f9:2d:4c:01:e7:d4:72:60:fc:82:
                    9b:65:5e:f2:19:95:e4:16:78:f7:ae:ee:ab:96:42:
                    22:34:9d:a5:cb:5a:dd:e5:9f:2a:f1:d0:e4:e4:8b:
                    5b:39:81:90:b3:34:b1:f4:46:4d:ab:a8:6a:6a:63:
                    31:d5:ad:51:62:b1:25:e5:47:f3:69:3e:68:8d:54:
                    75:cd:10:ed:df:ad:92:ce:52:2c:f9:cc:31:97:15:
                    ea:27:21:ba:43:98:03:0c:ce:63:cd:89:0c:64:b4:
                    21:63:2b:5f:81:ea:49:32:69:28:be:97:4f:45:a9:
                    61:58:65:a0:ab:eb:71:8a:46:f5:49:5e:0b:6a:80:
                    b5:43:fa:59:c7:ff:7d:6c:eb:51:4f:b1:23:db:a7:
                    c3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:43:F7:F2:DD:BC:BB:69:E2:AD:9E:2F:93:76:81:AB:3F:62:A2
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32332d3233203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:7c:3b:b2:27:9f:2c:bd:90:04:3c:29:e4:7f:29:5e:31:
         34:65:b3:bf:90:c3:76:60:00:df:24:2f:f0:7b:92:ae:0e:ca:
         6b:4a:db:88:37:cc:7b:8a:50:2e:e7:94:c7:de:24:b4:eb:53:
         6b:97:ab:c9:54:95:bd:d1:5f:57:8d:70:f3:0a:f8:ff:aa:e0:
         6e:82:71:30:92:f0:eb:e5:02:11:e0:21:d0:91:ed:54:83:19:
         0e:35:3e:fc:28:cb:01:79:0e:75:ba:50:85:82:b4:1a:c5:4b:
         2b:30:53:ab:46:87:2f:aa:2b:ee:c9:57:ae:95:bc:aa:76:91:
         f5:df:69:cb:30:f4:dc:08:ce:0f:ac:35:c1:f4:c5:ab:a5:c8:
         78:6a:7d:2c:cb:85:4f:e9:66:06:d8:c3:e3:98:92:8b:46:36:
         dc:3d:7f:aa:43:76:ba:a0:a7:dc:34:10:8a:c7:b3:11:90:b1:
         84:a9:bb:59:0a:6e:70:ca:f0:01:8e:59:f1:88:72:72:76:fd:
         fd:7b:06:b0:91:5c:0e:1e:9b:07:dc:a1:79:19:81:ac:ec:7d:
         e1:f7:e9:ee:94:20:a4:a1:51:af:19:59:8b:f4:14:95:ef:75:
         ff:6d:a8:e1:15:a6:25:ca:e6:6b:7e:02:6c:36:ee:ce:0d:89:
         e8:8f:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:27:03 2025 by rpki-client