Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/3137392e36302e3139322e302f32322d3234203d3e203332393334.roa
File:                     3137392e36302e3139322e302f32322d3234203d3e203332393334.roa (raw, json)
Hash identifier:          lEpZHejjTDk8wkb8eSASQdI2n9b92bQBn7aPMGRMfm4=
Subject key identifier:   63:9F:7D:FE:9B:12:92:64:1A:69:23:71:0A:12:E2:5D:D2:01:A5:00
Certificate issuer:       /CN=57EE4335FF7D52DB64468C8FA6B4173A9E2635AA
Certificate serial:       4683AEBDB95691AE46A814BDF366777B77FEEE6D
Authority key identifier: 57:EE:43:35:FF:7D:52:DB:64:46:8C:8F:A6:B4:17:3A:9E:26:35:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/3137392e36302e3139322e302f32322d3234203d3e203332393334.roa
Signing time:             Tue 04 Feb 2025 18:40:05 +0000
ROA not before:           Tue 04 Feb 2025 18:35:05 +0000
ROA not after:            Tue 03 Feb 2026 18:40:05 +0000
asID:                     32934
IP address blocks:        179.60.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:83:ae:bd:b9:56:91:ae:46:a8:14:bd:f3:66:77:7b:77:fe:ee:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57EE4335FF7D52DB64468C8FA6B4173A9E2635AA
        Validity
            Not Before: Feb  4 18:35:05 2025 GMT
            Not After : Feb  3 18:40:05 2026 GMT
        Subject: CN=639F7DFE9B1292641A6923710A12E25DD201A500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:6a:87:03:bb:b2:12:36:7a:3d:8c:c9:40:
                    45:4d:86:d6:6b:98:da:40:45:10:01:ba:4b:a3:3e:
                    29:21:bb:31:af:70:09:0a:94:d0:c7:5a:ab:89:17:
                    44:6b:71:01:9e:4b:c5:1e:31:ef:b6:aa:2a:a4:f1:
                    a7:cb:5c:d9:74:b4:80:e7:44:21:f9:76:75:ea:61:
                    19:c1:05:d4:b2:f7:6f:0f:d2:16:78:5f:e8:64:c7:
                    85:27:8b:11:ec:04:c3:5c:73:17:2a:60:49:5a:61:
                    39:d2:c6:a5:dc:df:26:f4:cc:cf:a0:0a:86:8b:15:
                    42:72:f2:5e:79:e1:52:11:59:36:e6:0a:45:08:0b:
                    58:b1:b6:38:2f:83:1b:3e:5a:c6:30:b0:2d:f6:20:
                    0d:a2:eb:c9:32:05:ef:4c:cb:7d:42:e6:bc:a5:60:
                    bc:13:d9:0a:b2:98:9d:e2:9c:da:5d:d5:f6:89:20:
                    36:bb:3c:a5:fb:63:66:05:cc:85:2f:05:19:f7:17:
                    32:26:d6:40:a5:bd:dc:a2:2c:86:92:c4:ab:86:ac:
                    41:02:68:64:33:93:c0:ac:84:67:7f:01:86:8b:9b:
                    e3:2f:52:47:27:ea:3c:4f:5f:0f:6c:ad:69:7a:92:
                    bf:d5:15:6f:a2:db:a0:29:e5:7f:94:19:1d:b1:85:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9F:7D:FE:9B:12:92:64:1A:69:23:71:0A:12:E2:5D:D2:01:A5:00
            X509v3 Authority Key Identifier:
                keyid:57:EE:43:35:FF:7D:52:DB:64:46:8C:8F:A6:B4:17:3A:9E:26:35:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57EE4335FF7D52DB64468C8FA6B4173A9E2635AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0A28BB08EB38D9F687A91BA519566D394D0B227EF344A3DB6064CD624F9D0BA/0/3137392e36302e3139322e302f32322d3234203d3e203332393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:76:60:b0:16:dc:6d:2c:f6:d6:49:d4:e8:3e:af:28:ff:78:
         8a:2c:63:01:9a:98:b7:25:68:f7:bf:7a:8a:cf:1a:c4:6f:5d:
         79:61:45:bd:ed:eb:3d:0e:b0:ba:e5:4c:df:99:db:bf:5c:ac:
         2f:ce:6a:7b:c7:8b:ba:3b:48:98:6b:40:d0:b0:b6:c9:19:a3:
         60:62:3a:05:18:3c:b0:38:d1:d5:70:2f:4d:53:f3:b6:8f:79:
         ee:27:8c:db:2b:0b:48:e1:65:2b:fb:40:61:65:9c:61:56:58:
         db:b8:14:f6:de:95:33:95:f2:5e:a4:a8:78:0d:4f:4d:37:09:
         b4:21:f9:ed:df:a6:4c:fd:fc:02:7a:d2:f5:ed:bf:b5:7c:fc:
         ec:9e:85:ec:36:8d:fe:9e:c1:c7:25:6a:ed:db:de:6b:5d:1a:
         58:6c:d9:d4:8b:ee:d3:c1:73:b6:b8:6e:e0:59:00:b9:80:0e:
         a4:2a:0b:5d:08:2b:65:a7:70:b4:f0:0d:0b:16:0e:7c:78:d5:
         d0:0d:01:e6:2d:8f:bd:04:63:3f:57:21:fa:b5:88:1a:9e:e6:
         37:ad:d5:e3:ed:db:b3:12:e9:9b:10:de:2d:96:f4:a1:0f:f3:
         5c:ee:32:d5:fe:6c:e7:9e:11:4a:b1:17:03:18:be:00:1d:3d:
         a2:7e:72:9a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURoOuvblWka5GqBS982Z3e3f+7m0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdFRTQzMzVGRjdENTJEQjY0NDY4QzhGQTZCNDE3M0E5
RTI2MzVBQTAeFw0yNTAyMDQxODM1MDVaFw0yNjAyMDMxODQwMDVaMDMxMTAvBgNV
BAMTKDYzOUY3REZFOUIxMjkyNjQxQTY5MjM3MTBBMTJFMjVERDIwMUE1MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94WqHA7uyEjZ6PYzJQEVNhtZr
mNpARRABukujPikhuzGvcAkKlNDHWquJF0RrcQGeS8UeMe+2qiqk8afLXNl0tIDn
RCH5dnXqYRnBBdSy928P0hZ4X+hkx4UnixHsBMNccxcqYElaYTnSxqXc3yb0zM+g
CoaLFUJy8l554VIRWTbmCkUIC1ixtjgvgxs+WsYwsC32IA2i68kyBe9My31C5ryl
YLwT2QqymJ3inNpd1faJIDa7PKX7Y2YFzIUvBRn3FzIm1kClvdyiLIaSxKuGrEEC
aGQzk8CshGd/AYaLm+MvUkcn6jxPXw9srWl6kr/VFW+i26Ap5X+UGR2xham3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUY599/psSkmQaaSNxChLiXdIBpQAwHwYDVR0j
BBgwFoAUV+5DNf99UttkRoyPprQXOp4mNaowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEEyOEJCMDhFQjM4RDlGNjg3QTkxQkE1MTk1NjZEMzk0
RDBCMjI3RUYzNDRBM0RCNjA2NENENjI0RjlEMEJBLzAvNTdFRTQzMzVGRjdENTJE
QjY0NDY4QzhGQTZCNDE3M0E5RTI2MzVBQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0VFNDMzNUZGN0Q1MkRCNjQ0
NjhDOEZBNkI0MTczQTlFMjYzNUFBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBBMjhCQjA4RUIzOEQ5RjY4N0E5MUJBNTE5NTY2RDM5NEQwQjIyN0VG
MzQ0QTNEQjYwNjRDRDYyNEY5RDBCQS8wLzMxMzczOTJlMzYzMDJlMzEzOTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzMjM5MzMzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArM8wDAN
BgkqhkiG9w0BAQsFAAOCAQEAMnZgsBbcbSz21knU6D6vKP94iixjAZqYtyVo9796
is8axG9deWFFve3rPQ6wuuVM35nbv1ysL85qe8eLujtImGtA0LC2yRmjYGI6BRg8
sDjR1XAvTVPzto957ieM2ysLSOFlK/tAYWWcYVZY27gU9t6VM5XyXqSoeA1PTTcJ
tCH57d+mTP38AnrS9e2/tXz87J6F7DaN/p7BxyVq7dvea10aWGzZ1Ivu08Fztrhu
4FkAuYAOpCoLXQgrZadwtPANCxYOfHjV0A0B5i2PvQRjP1ch+rWIGp7mN63V4+3b
sxLpmxDeLZb0oQ/zXO4y1f5s554RSrEXAxi+AB09on5ymg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:03:14 2025 by rpki-client