Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135322e302f32342d3234203d3e20323636373337.roa
File:                     3137372e37332e3135322e302f32342d3234203d3e20323636373337.roa (raw, json)
Hash identifier:          qvyYgeiDILl6Q1r2MFnPKSA9x9Hj2GHuhIam44gM1uk=
Subject key identifier:   72:AE:23:0C:EF:7D:BD:F4:3A:C2:B0:77:91:DE:A3:02:AE:1B:59:BB
Certificate issuer:       /CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
Certificate serial:       15E82B3CFE1B467BF08FCE5235FBF12E1AA5E785
Authority key identifier: 1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135322e302f32342d3234203d3e20323636373337.roa
Signing time:             Mon 17 Mar 2025 23:12:10 +0000
ROA not before:           Mon 17 Mar 2025 23:07:10 +0000
ROA not after:            Mon 16 Mar 2026 23:12:10 +0000
asID:                     266737
IP address blocks:        177.73.152.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e8:2b:3c:fe:1b:46:7b:f0:8f:ce:52:35:fb:f1:2e:1a:a5:e7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
        Validity
            Not Before: Mar 17 23:07:10 2025 GMT
            Not After : Mar 16 23:12:10 2026 GMT
        Subject: CN=72AE230CEF7DBDF43AC2B07791DEA302AE1B59BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:47:21:65:75:a6:09:8b:c9:98:c2:1e:49:
                    c0:48:f5:ba:ed:bc:ae:a4:28:4e:a6:bf:31:02:df:
                    2c:d5:f8:20:9a:65:73:d0:ff:e8:9e:9c:00:a3:89:
                    98:7a:a0:4d:b2:63:2b:e6:d0:c9:5f:18:4d:33:17:
                    10:1d:f9:71:b0:da:12:05:57:11:8d:23:3d:ef:34:
                    32:f8:81:a9:8c:23:d9:7a:af:38:c2:7c:dc:05:02:
                    77:04:35:72:1d:6a:d2:86:4e:12:37:95:34:82:00:
                    8b:b3:96:d6:7c:b0:01:f7:2b:0e:f6:c4:39:80:5e:
                    0b:16:ef:e6:74:22:3f:71:c4:e9:9e:4e:f6:63:70:
                    cc:d0:97:19:27:b9:55:29:81:62:d4:61:f6:25:e2:
                    0e:54:42:f3:29:96:d7:65:4a:d0:a0:f7:13:0c:98:
                    68:83:6c:b3:5c:86:0d:31:6e:a5:3f:08:e7:91:a4:
                    36:1b:c9:67:ec:d7:d5:3f:a5:e5:2b:97:a8:10:3c:
                    99:5f:1a:70:bb:44:f2:8c:43:37:06:60:19:67:d2:
                    9a:be:ca:a3:13:09:4a:72:63:d3:8a:ca:d1:40:8d:
                    e9:13:b1:28:a6:ae:c4:52:8d:f5:5e:ef:27:1a:5c:
                    0b:67:b8:9a:a0:c7:7e:a4:2a:35:d2:06:6e:36:ee:
                    0e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:AE:23:0C:EF:7D:BD:F4:3A:C2:B0:77:91:DE:A3:02:AE:1B:59:BB
            X509v3 Authority Key Identifier:
                keyid:1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135322e302f32342d3234203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:90:8a:35:2d:13:0f:3d:65:f7:6d:04:46:44:0e:b7:80:e6:
         85:c5:f8:ad:e9:d2:95:cd:90:37:fd:63:86:33:bf:38:85:c6:
         39:0e:14:48:f3:9b:d9:4b:03:c2:09:7c:55:3a:07:4f:47:bd:
         61:31:8d:ce:c9:86:15:d6:ae:dd:4d:16:52:3f:d4:40:5c:bc:
         a5:89:ee:f5:94:c7:f8:c1:e5:47:68:1c:19:9c:ad:86:b5:7b:
         ed:58:70:8e:76:24:69:75:05:5d:d2:8a:0e:52:a8:0e:f8:83:
         04:2a:fc:ee:6d:75:53:e6:25:df:67:7c:8c:6a:c4:0c:43:cc:
         88:d9:e9:94:5c:90:69:5f:00:78:76:d5:c5:5a:ea:e8:e0:cf:
         85:94:97:40:34:70:63:3f:8e:b1:dc:4f:81:c0:3b:cb:0c:50:
         12:7e:ba:a9:ee:61:e2:f3:23:90:75:6f:b8:e7:04:bb:55:2f:
         c4:6e:05:25:ec:b2:cb:c6:75:00:b5:84:79:32:7f:8c:5b:05:
         f1:fd:4f:a2:aa:6d:08:56:22:4b:dd:92:91:88:dc:50:b4:fd:
         88:84:38:e5:33:0c:50:6f:b6:1f:51:b1:6f:80:4a:0c:62:09:
         28:ae:15:78:12:a6:e5:a1:80:75:0b:18:48:84:c8:ba:92:7b:
         e5:45:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:08 2025 by rpki-client