Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3137392e34322e3136382e302f32322d3234203d3e203532343336.roa
File:                     3137392e34322e3136382e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          BclgYKPcDluMpmlJHYz88ujCdPoIbm1Iac2DCkywuLw=
Subject key identifier:   68:49:29:58:BC:A2:C3:19:38:FC:89:CE:D9:14:74:36:31:76:49:AC
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       720D31BC19ABF17B8A74F5FDE89C4B0723E7A976
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3137392e34322e3136382e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 04 Feb 2025 18:34:33 +0000
ROA not before:           Tue 04 Feb 2025 18:29:33 +0000
ROA not after:            Tue 03 Feb 2026 18:34:33 +0000
asID:                     52436
IP address blocks:        179.42.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0d:31:bc:19:ab:f1:7b:8a:74:f5:fd:e8:9c:4b:07:23:e7:a9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Feb  4 18:29:33 2025 GMT
            Not After : Feb  3 18:34:33 2026 GMT
        Subject: CN=68492958BCA2C31938FC89CED9147436317649AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:ba:61:01:88:af:b2:a2:46:4c:13:93:d5:
                    22:bf:7d:b8:8e:d2:12:90:98:79:3d:7e:12:3d:6d:
                    35:c7:a3:fb:d5:0f:97:f5:93:d4:1a:d5:2b:5c:46:
                    c6:ab:bf:00:27:a7:90:55:fd:48:7a:9c:31:80:1c:
                    3f:a0:a2:f0:0b:92:27:e5:9d:c9:0f:75:49:db:49:
                    2c:67:77:3c:59:ba:b1:54:57:e5:ba:10:c2:67:83:
                    bd:e9:d3:2a:6e:8d:c4:ca:26:1b:33:90:6d:1d:18:
                    f1:7b:3c:6e:91:08:96:2e:c3:c3:21:14:68:f6:02:
                    65:8c:65:9b:b6:18:42:db:a7:1b:26:f4:a9:12:41:
                    12:5c:59:56:98:2d:c7:bd:25:ce:a2:6d:12:49:b1:
                    77:3e:b1:bb:3a:15:17:e3:5a:e6:22:d0:c6:36:0f:
                    43:65:72:a9:d4:97:a8:e7:17:94:c6:92:db:c5:be:
                    ea:8d:83:b1:67:11:3a:2a:39:d6:20:f0:47:2c:cc:
                    61:76:ee:b9:57:ca:5c:7e:63:70:da:a9:81:3c:c7:
                    eb:d5:4e:95:b2:f3:a3:51:57:ef:81:75:be:6e:2d:
                    55:4c:12:27:02:c0:63:d0:45:0b:5a:7e:d8:87:1f:
                    7e:b4:0e:ec:08:3d:dc:82:3e:5b:20:f3:c4:01:6b:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:49:29:58:BC:A2:C3:19:38:FC:89:CE:D9:14:74:36:31:76:49:AC
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3137392e34322e3136382e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:85:df:a5:45:5e:ad:20:f4:cd:9b:3d:03:33:0a:0b:76:
         87:86:df:78:3c:cf:e4:35:6d:1f:83:56:4a:48:94:dc:5a:47:
         91:80:a6:e7:f8:27:3a:36:df:c4:b7:57:77:28:29:b3:8d:5d:
         d2:3f:16:49:10:97:f6:2c:16:b5:32:67:db:0d:9f:65:96:56:
         f8:c1:05:a4:41:35:10:aa:fb:4c:b0:4b:52:f5:ce:ff:17:c7:
         83:00:91:5e:6e:78:07:14:57:20:8f:03:f9:37:60:27:6f:e3:
         3a:0d:43:db:47:ba:56:a5:9e:36:f9:e4:ae:78:d9:cd:c8:de:
         ca:27:f3:17:b4:f6:1f:71:4f:af:37:53:da:4e:90:af:2a:4d:
         03:13:64:65:a5:c9:b2:1b:b6:4b:02:73:2b:1d:71:41:32:3e:
         e9:fc:ea:3c:53:a2:bc:08:00:ca:fb:43:6f:bf:90:64:a3:55:
         02:9c:2b:98:22:69:a6:56:cc:7e:b7:fc:f9:7c:7b:ad:df:b9:
         6c:43:d8:d2:36:c0:8f:05:48:99:17:d8:2a:b9:cf:24:cd:5a:
         c7:09:da:fe:dd:42:64:fc:5f:aa:29:b6:3a:af:6f:f8:82:45:
         a8:ce:84:81:22:14:b1:a5:c1:ec:d7:ff:c9:da:26:13:6b:14:
         75:f7:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:16:17 2025 by rpki-client