Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139312e302f32342d3234203d3e20323733383738.roa
File:                     3137392e36332e3139312e302f32342d3234203d3e20323733383738.roa (raw, json)
Hash identifier:          54Dx7llFms+LUVqv5Mbh4l3bgPfyi/71VSEH+7jAFkI=
Subject key identifier:   C5:5C:1F:D2:1D:F4:DE:F0:B0:AA:99:E4:40:04:A7:91:F5:8E:67:77
Certificate issuer:       /CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
Certificate serial:       1D4848AA718989703A083592A7D92A7956B8055B
Authority key identifier: 4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139312e302f32342d3234203d3e20323733383738.roa
Signing time:             Tue 25 Feb 2025 23:40:00 +0000
ROA not before:           Tue 25 Feb 2025 23:35:00 +0000
ROA not after:            Tue 24 Feb 2026 23:40:00 +0000
asID:                     273878
IP address blocks:        179.63.191.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:48:48:aa:71:89:89:70:3a:08:35:92:a7:d9:2a:79:56:b8:05:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A
        Validity
            Not Before: Feb 25 23:35:00 2025 GMT
            Not After : Feb 24 23:40:00 2026 GMT
        Subject: CN=C55C1FD21DF4DEF0B0AA99E44004A791F58E6777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:d2:ab:62:f3:d2:46:19:0d:c7:b8:2b:17:
                    a4:b9:11:c7:fd:50:16:69:aa:19:d4:fa:7d:7b:2d:
                    46:be:f9:73:6f:1e:b4:a0:e2:e3:40:d6:1b:e0:76:
                    18:70:bf:8e:71:5f:56:5c:0f:89:ed:5b:2b:37:5a:
                    60:c1:a5:61:9b:61:6f:87:69:63:56:6d:87:01:21:
                    08:14:37:01:70:30:8d:90:41:1e:f0:3f:1c:8b:39:
                    c6:a0:2c:ed:a6:bd:5e:34:a6:63:ec:93:c0:b1:b9:
                    de:d4:b8:43:e3:db:f8:c5:d9:f1:31:03:24:fe:25:
                    c2:95:b2:74:da:05:2a:ac:b9:6d:9c:54:f4:74:b9:
                    c1:c3:08:d7:16:6f:a5:bc:96:0c:ad:d7:05:69:f5:
                    7a:24:70:9c:9d:d8:6c:6f:ee:3a:30:e6:1a:32:d3:
                    e5:57:45:1f:b0:47:d0:08:90:b0:e4:3a:4b:81:65:
                    7a:35:2a:61:ce:36:10:13:cc:7b:b5:71:a6:88:23:
                    d0:d1:c3:41:8c:7b:2a:7e:14:79:a4:23:9a:62:bb:
                    83:e3:12:43:84:8e:db:27:bc:82:ef:ff:c8:5d:88:
                    97:09:8c:b8:5a:c9:c5:81:3b:33:fd:da:fc:de:60:
                    1e:aa:d9:ad:9f:e3:f3:51:4c:8c:26:1b:8d:13:d7:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:1F:D2:1D:F4:DE:F0:B0:AA:99:E4:40:04:A7:91:F5:8E:67:77
            X509v3 Authority Key Identifier:
                keyid:4B:16:7B:48:38:74:A1:27:B2:C4:F0:C2:AC:D9:F1:EF:CD:B0:21:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B167B483874A127B2C4F0C2ACD9F1EFCDB0210A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B71DF8E839AF34312DD7D71FB39907842FD27DE7EC1B331829FF182E1A10C3E9/0/3137392e36332e3139312e302f32342d3234203d3e20323733383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e8:55:1c:5a:cc:0d:5d:41:b8:1f:08:17:25:26:f2:23:61:
         8e:84:53:e7:7d:ad:a0:5a:6e:6e:3a:12:2b:5b:59:b1:94:ca:
         b2:63:a7:46:40:31:60:e7:fc:d1:27:ab:97:83:9c:dd:33:34:
         e3:12:84:a1:54:03:1f:e9:df:b4:65:cd:b1:22:1f:36:b5:d1:
         27:d6:1e:53:49:2b:34:11:5f:b8:fa:92:f8:70:e8:fc:3d:15:
         8e:dc:f3:a6:a6:8d:de:a6:d1:d9:4e:b5:46:95:99:44:ba:95:
         dd:12:bb:48:23:9c:7e:5c:d4:a7:04:15:fc:0e:b4:24:f4:55:
         b1:e2:e9:90:4f:2c:3e:02:ac:4f:d0:71:48:df:b6:f7:24:88:
         ef:75:52:a7:bb:fe:23:08:29:45:f6:13:f1:7f:c0:9c:8d:93:
         5a:de:75:31:04:c0:2b:c1:88:d6:19:c0:ed:be:d8:03:03:62:
         60:5e:d2:39:d2:18:f0:d1:f2:7b:4a:5d:4f:da:83:01:6a:5d:
         a7:5c:a8:3a:c3:4d:f9:20:46:fa:3d:91:b7:b3:7a:b9:bf:ab:
         3d:d1:f3:4c:43:98:9a:4e:a5:9a:cf:eb:83:75:d0:ac:d5:c8:
         c6:fd:f5:02:25:7e:b5:cf:f7:72:a2:4c:c6:7b:89:27:25:bd:
         49:60:9b:f7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHUhIqnGJiXA6CDWSp9kqeVa4BVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxNjdCNDgzODc0QTEyN0IyQzRGMEMyQUNEOUYxRUZD
REIwMjEwQTAeFw0yNTAyMjUyMzM1MDBaFw0yNjAyMjQyMzQwMDBaMDMxMTAvBgNV
BAMTKEM1NUMxRkQyMURGNERFRjBCMEFBOTlFNDQwMDRBNzkxRjU4RTY3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjC9KrYvPSRhkNx7grF6S5Ecf9
UBZpqhnU+n17LUa++XNvHrSg4uNA1hvgdhhwv45xX1ZcD4ntWys3WmDBpWGbYW+H
aWNWbYcBIQgUNwFwMI2QQR7wPxyLOcagLO2mvV40pmPsk8Cxud7UuEPj2/jF2fEx
AyT+JcKVsnTaBSqsuW2cVPR0ucHDCNcWb6W8lgyt1wVp9XokcJyd2Gxv7jow5hoy
0+VXRR+wR9AIkLDkOkuBZXo1KmHONhATzHu1caaII9DRw0GMeyp+FHmkI5piu4Pj
EkOEjtsnvILv/8hdiJcJjLhaycWBOzP92vzeYB6q2a2f4/NRTIwmG40T19GTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUxVwf0h303vCwqpnkQASnkfWOZ3cwHwYDVR0j
BBgwFoAUSxZ7SDh0oSeyxPDCrNnx782wIQowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzFERjhFODM5QUYzNDMxMkREN0Q3MUZCMzk5MDc4NDJG
RDI3REU3RUMxQjMzMTgyOUZGMTgyRTFBMTBDM0U5LzAvNEIxNjdCNDgzODc0QTEy
N0IyQzRGMEMyQUNEOUYxRUZDREIwMjEwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QjE2N0I0ODM4NzRBMTI3QjJD
NEYwQzJBQ0Q5RjFFRkNEQjAyMTBBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjcxREY4RTgzOUFGMzQzMTJERDdENzFGQjM5OTA3ODQyRkQyN0RFN0VD
MUIzMzE4MjlGRjE4MkUxQTEwQzNFOS8wLzMxMzczOTJlMzYzMzJlMzEzOTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzgzNzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsz+/
MA0GCSqGSIb3DQEBCwUAA4IBAQBD6FUcWswNXUG4HwgXJSbyI2GOhFPnfa2gWm5u
OhIrW1mxlMqyY6dGQDFg5/zRJ6uXg5zdMzTjEoShVAMf6d+0Zc2xIh82tdEn1h5T
SSs0EV+4+pL4cOj8PRWO3POmpo3eptHZTrVGlZlEupXdErtII5x+XNSnBBX8DrQk
9FWx4umQTyw+AqxP0HFI37b3JIjvdVKnu/4jCClF9hPxf8CcjZNa3nUxBMArwYjW
GcDtvtgDA2JgXtI50hjw0fJ7Sl1P2oMBal2nXKg6w035IEb6PZG3s3q5v6s90fNM
Q5iaTqWaz+uDddCs1cjG/fUCJX61z/dyokzGe4knJb1JYJv3
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:05 2025 by rpki-client