Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135342e302f32342d3234203d3e20323636373337.roa
File:                     3137372e37332e3135342e302f32342d3234203d3e20323636373337.roa (raw, json)
Hash identifier:          gpR2tO41017m6oku3lU26HiouHul6Aw4bWN0EfyWIaI=
Subject key identifier:   3C:45:D4:00:A4:4C:55:D6:0B:18:0D:72:DE:BB:DF:00:94:89:6E:D4
Certificate issuer:       /CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
Certificate serial:       1D571ADA1873CE845CACAFB0F212767338570B66
Authority key identifier: 1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135342e302f32342d3234203d3e20323636373337.roa
Signing time:             Tue 18 Mar 2025 22:12:23 +0000
ROA not before:           Tue 18 Mar 2025 22:07:23 +0000
ROA not after:            Tue 17 Mar 2026 22:12:23 +0000
asID:                     266737
IP address blocks:        177.73.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:57:1a:da:18:73:ce:84:5c:ac:af:b0:f2:12:76:73:38:57:0b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8
        Validity
            Not Before: Mar 18 22:07:23 2025 GMT
            Not After : Mar 17 22:12:23 2026 GMT
        Subject: CN=3C45D400A44C55D60B180D72DEBBDF0094896ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:b1:dd:1b:9b:d3:fc:1c:fe:38:12:29:29:
                    e0:38:a4:e6:14:25:19:db:be:e3:6e:6f:d3:dc:75:
                    5b:94:53:b1:92:0d:2d:47:29:1e:e5:8e:a9:01:4f:
                    f7:50:77:e4:8a:37:2c:76:8c:4e:9b:b9:92:a4:bd:
                    bd:12:65:a6:d9:fd:08:89:53:5b:a4:26:2b:ef:d9:
                    d4:dc:61:a9:6f:e3:db:5c:28:21:47:7c:15:f9:4c:
                    38:63:ea:0e:ba:93:df:58:82:7e:d9:37:c3:17:c3:
                    1b:53:a3:f2:47:5b:0e:3c:54:9b:3f:af:63:db:4e:
                    3f:cf:ac:82:d1:02:50:a8:17:e0:cf:5c:36:e2:96:
                    b7:05:f4:fd:a3:4a:e6:27:7a:6b:15:f9:3b:96:f0:
                    a1:82:b9:b9:95:40:3e:72:ca:3e:cc:b6:03:4c:e2:
                    90:1d:84:f4:8b:30:da:09:db:05:32:07:b5:09:15:
                    95:11:1d:cd:f3:a4:d1:9c:9c:f4:1e:61:0e:93:71:
                    96:e4:1a:5c:f9:af:b2:f6:ac:e9:17:77:c8:a0:1d:
                    e8:5f:2b:27:24:f5:78:83:76:fb:18:b0:ac:c9:a1:
                    de:2d:44:d4:46:f6:2c:b1:7b:ab:01:17:9d:1b:fb:
                    85:a3:6c:20:3e:ea:c2:7b:36:8d:0b:c7:3a:f2:22:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:45:D4:00:A4:4C:55:D6:0B:18:0D:72:DE:BB:DF:00:94:89:6E:D4
            X509v3 Authority Key Identifier:
                keyid:1E:C7:B3:1A:1A:B1:BB:CD:34:3A:42:B4:F1:AC:4D:6E:DB:3B:3D:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EC7B31A1AB1BBCD343A42B4F1AC4D6EDB3B3DC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2640994DAD0823F46C2F5E1B731C06AA780E636136AFA402B63199EC1364364/0/3137372e37332e3135342e302f32342d3234203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:26:d3:f1:5c:a7:b8:47:a6:b3:df:bd:c4:e4:cc:e4:8e:78:
         c9:27:5d:0f:5a:a6:23:2b:ea:e7:de:59:2f:d1:3e:2a:6a:9e:
         12:4d:83:32:0e:0c:37:5b:66:58:94:6d:80:ba:df:66:5a:b3:
         3b:5c:46:bd:7d:9c:fd:b9:e4:a3:a7:a6:bb:2c:d8:c6:9e:7d:
         e5:76:02:02:33:73:4a:46:e3:80:b3:85:c1:ab:88:c6:ef:e0:
         91:1e:e1:81:2b:7a:ea:b6:58:41:a1:6f:e8:6e:1e:6e:c0:c6:
         ad:6d:97:5b:b6:28:63:41:7f:bf:fe:b2:d6:72:38:3c:54:4e:
         23:40:22:1c:e3:8b:6a:b3:fa:68:d7:d3:16:a3:fd:95:1c:31:
         15:9a:e6:04:05:89:91:2b:a4:f8:1a:d1:09:30:2c:da:b5:97:
         0c:50:1f:2d:76:45:88:36:83:6d:1d:dd:32:76:7c:25:62:2a:
         96:e4:b2:56:62:2c:dc:7e:b3:6c:32:97:46:9d:d7:c5:db:13:
         67:e8:33:c1:10:84:f9:28:49:3d:0d:17:0b:2a:0f:14:a9:76:
         ae:f9:34:32:4f:7e:a5:b6:58:e5:9e:91:9c:63:e3:90:df:d5:
         ee:94:1a:ee:d3:27:9f:10:f5:71:e5:95:06:6e:38:f0:8e:3d:
         cd:6d:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:10 2025 by rpki-client