Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3137392e36302e302e302f31392d3234203d3e203131383135.roa
File:                     3137392e36302e302e302f31392d3234203d3e203131383135.roa (raw, json)
Hash identifier:          MBQ0RQNKiGZ0E77TcyXBY5T6l8grEUi2ezsvPKIeOJg=
Subject key identifier:   47:40:EB:88:88:6B:2B:DE:7D:19:72:86:E9:FA:50:38:A2:81:6A:CA
Certificate issuer:       /CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
Certificate serial:       68BE35FC59E38D6E925CE1A25F36037665B9F83B
Authority key identifier: D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3137392e36302e302e302f31392d3234203d3e203131383135.roa
Signing time:             Tue 04 Feb 2025 18:34:28 +0000
ROA not before:           Tue 04 Feb 2025 18:29:28 +0000
ROA not after:            Tue 03 Feb 2026 18:34:28 +0000
asID:                     11815
IP address blocks:        179.60.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:be:35:fc:59:e3:8d:6e:92:5c:e1:a2:5f:36:03:76:65:b9:f8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F5141990A0252C37D63112FB6ECA5DBC5686B6
        Validity
            Not Before: Feb  4 18:29:28 2025 GMT
            Not After : Feb  3 18:34:28 2026 GMT
        Subject: CN=4740EB88886B2BDE7D197286E9FA5038A2816ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:14:57:99:2b:78:de:81:25:8e:16:34:45:
                    fd:1f:6f:b0:e4:7f:f9:cd:55:61:c6:a5:76:51:a7:
                    49:74:56:5f:ea:d1:74:16:28:04:f7:8e:90:7f:4d:
                    d3:39:86:04:95:90:78:26:59:f3:76:fe:ec:87:0e:
                    90:c2:eb:aa:a6:a1:57:0b:50:14:54:a9:15:50:85:
                    ea:ba:f2:b5:3a:a9:57:aa:2a:ba:d1:84:f3:ed:51:
                    6e:a3:2c:67:36:f2:90:1f:be:73:dc:c7:93:b1:48:
                    fa:85:d9:68:78:88:f9:52:6f:54:b8:d5:a9:18:53:
                    c0:bd:da:0b:3b:89:ff:5e:2b:91:8e:c0:5a:f2:06:
                    3e:39:6c:51:90:e5:73:74:24:aa:37:6a:b8:98:73:
                    70:39:08:e1:b2:1a:3b:4f:02:a1:ff:06:52:5b:46:
                    8b:20:d5:50:91:cf:cf:96:50:66:21:98:5a:fb:3f:
                    b0:c3:a5:40:c8:bc:59:61:9b:34:4c:2d:b5:c3:89:
                    55:8a:af:47:a1:15:fa:00:98:a8:18:44:a3:fe:b6:
                    95:df:e6:fa:25:05:f5:f4:33:b8:02:70:1f:63:b3:
                    51:b9:a9:fd:6e:d3:02:51:dd:16:ee:38:16:e0:19:
                    d2:a3:3d:b6:8c:45:4a:af:d4:bd:20:e1:ed:44:ec:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:40:EB:88:88:6B:2B:DE:7D:19:72:86:E9:FA:50:38:A2:81:6A:CA
            X509v3 Authority Key Identifier:
                keyid:D2:F5:14:19:90:A0:25:2C:37:D6:31:12:FB:6E:CA:5D:BC:56:86:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2F5141990A0252C37D63112FB6ECA5DBC5686B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2FFDCA30C15CD59970A7E7AFAEC3A91AF4301AC9008B0FFC3B8F9775F56F2FD/0/3137392e36302e302e302f31392d3234203d3e203131383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c4:39:e1:0a:fb:1f:8b:47:16:77:80:79:af:0d:a7:42:26:79:
         35:9f:0c:70:05:26:64:18:57:9e:af:6e:9c:0d:e3:4f:66:b4:
         67:2a:b2:46:16:aa:61:4e:16:8f:6c:7e:93:cf:02:81:02:19:
         4e:c1:ca:a8:f8:6f:2b:b0:01:95:44:30:99:05:ed:81:64:ea:
         66:4a:0c:da:51:26:59:c7:3c:52:d7:95:1a:a2:b9:0a:d6:1c:
         74:7b:50:99:a9:ad:3f:d6:6c:d6:fa:e0:c0:b9:84:81:6f:ac:
         06:f5:cd:e9:0c:e3:ec:13:b6:33:dd:9a:56:be:55:73:b7:0b:
         c5:42:f5:3d:56:de:e3:93:18:c6:51:a3:65:72:36:79:0c:fe:
         27:81:db:b1:f3:c4:1c:ac:24:5a:33:58:51:29:f8:c9:05:61:
         49:b3:50:ec:85:37:9b:62:bc:ef:e3:cf:73:9b:09:4d:41:f1:
         0f:0a:25:b7:33:ef:9a:dc:60:e7:9b:75:b0:01:b8:fd:90:f6:
         73:43:e2:32:5c:f9:9e:81:99:af:82:b0:8c:3e:71:27:c4:fe:
         15:fc:44:e3:91:e8:54:6c:89:f5:7d:38:6b:9c:18:df:ad:4d:
         d4:f0:59:44:88:f8:38:f4:b7:d2:96:36:52:b5:4b:15:5c:ce:
         f7:d3:d8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:19 2025 by rpki-client