Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/3137392e302e33312e302f32342d3234203d3e20323633313933.roa
File:                     3137392e302e33312e302f32342d3234203d3e20323633313933.roa (raw, json)
Hash identifier:          Eh1veZNNVf9I4u+svegyTZ7/ILHYa+YtH50WMqJRhxs=
Subject key identifier:   28:8A:A9:4A:49:C7:30:A3:B5:3E:F2:5A:68:2E:6D:B7:09:4F:96:CC
Certificate issuer:       /CN=A7462244657DD26E0140804900F206B05BB243E9
Certificate serial:       441DB2E7AD33A29F201B19CF00EACBF0919B99BD
Authority key identifier: A7:46:22:44:65:7D:D2:6E:01:40:80:49:00:F2:06:B0:5B:B2:43:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7462244657DD26E0140804900F206B05BB243E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/3137392e302e33312e302f32342d3234203d3e20323633313933.roa
Signing time:             Tue 04 Feb 2025 18:42:57 +0000
ROA not before:           Tue 04 Feb 2025 18:37:57 +0000
ROA not after:            Tue 03 Feb 2026 18:42:57 +0000
asID:                     263193
IP address blocks:        179.0.31.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1d:b2:e7:ad:33:a2:9f:20:1b:19:cf:00:ea:cb:f0:91:9b:99:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7462244657DD26E0140804900F206B05BB243E9
        Validity
            Not Before: Feb  4 18:37:57 2025 GMT
            Not After : Feb  3 18:42:57 2026 GMT
        Subject: CN=288AA94A49C730A3B53EF25A682E6DB7094F96CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:64:ee:61:7c:cd:f6:d3:db:7f:b6:a1:3d:bc:
                    84:08:52:85:c9:b1:22:37:7e:f4:39:46:25:f6:5d:
                    e3:46:3c:03:ec:12:90:4e:cd:a4:13:34:55:1f:a7:
                    69:2d:df:18:c0:0f:66:92:8c:6b:9b:57:1a:61:f8:
                    1c:99:11:69:9d:90:42:72:a6:19:93:ff:20:56:91:
                    87:66:71:ce:15:72:d3:55:53:4a:cd:18:07:6c:3b:
                    91:3b:ce:45:9f:8d:32:35:dc:84:2f:7c:e9:a3:75:
                    83:0d:ec:92:16:2d:e1:54:d7:54:2f:02:ea:74:bb:
                    b3:b1:30:82:a5:f6:1d:7a:1f:f6:55:1a:c5:e5:2a:
                    99:03:f3:f9:a1:fb:eb:83:a1:88:de:94:33:a4:b3:
                    a3:a7:6d:6e:3e:6b:b2:dc:53:0e:51:45:0f:23:28:
                    02:2d:10:54:ee:a7:81:3f:34:8d:7d:be:50:55:a5:
                    cd:03:62:bf:3a:54:e8:5b:92:8e:50:25:9c:9f:78:
                    6d:a6:b6:ef:c9:60:97:7f:dd:38:83:3a:3c:52:a6:
                    94:b6:50:63:74:14:eb:22:35:15:78:e0:a9:c3:f8:
                    c7:9a:b0:9a:6a:30:9d:3a:1e:7b:db:a4:8d:9d:24:
                    e1:a6:75:02:d9:8c:94:4c:c9:44:6d:56:b0:c8:5d:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8A:A9:4A:49:C7:30:A3:B5:3E:F2:5A:68:2E:6D:B7:09:4F:96:CC
            X509v3 Authority Key Identifier:
                keyid:A7:46:22:44:65:7D:D2:6E:01:40:80:49:00:F2:06:B0:5B:B2:43:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/A7462244657DD26E0140804900F206B05BB243E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7462244657DD26E0140804900F206B05BB243E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/3137392e302e33312e302f32342d3234203d3e20323633313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:fb:db:2a:73:c9:0e:3f:ca:39:e5:f7:52:9e:26:3d:be:0d:
         44:42:dd:4c:06:0c:6d:af:b7:9c:5f:b1:4f:9b:4c:b6:40:4a:
         dc:84:a2:ee:64:e6:87:47:d1:71:95:82:60:b6:4c:bf:27:1c:
         51:77:f5:9a:99:23:4c:77:4c:65:bd:39:d1:7c:4a:c4:d2:97:
         1c:66:1c:62:b0:a6:a9:af:9c:fe:e0:bc:d1:c1:24:b1:ac:bb:
         fc:45:99:57:c8:73:3c:d2:b0:ed:f3:83:56:a4:54:24:75:4e:
         f3:c3:a5:7a:d3:a7:d6:d3:1f:d8:87:56:d2:9b:f2:da:98:57:
         55:88:fd:54:74:0d:38:0a:8f:ea:ca:ef:aa:a9:e2:1e:78:c0:
         51:37:3f:7b:a8:c0:0a:f4:c4:9b:f1:f7:d2:b1:a2:69:c2:37:
         8e:d1:70:82:63:2e:f2:df:4c:36:f3:e6:ef:f5:01:f9:20:96:
         45:44:f7:39:1e:8e:05:51:7a:5a:f1:70:90:fe:74:d4:80:7b:
         d9:f9:57:42:7f:c2:5e:d9:f2:22:5f:2a:db:45:9b:8f:de:81:
         1e:d0:ea:12:b4:89:63:ff:ca:71:1b:9b:c1:48:7e:6a:0f:c2:
         0b:0d:6a:57:a5:b6:da:88:82:86:32:70:94:77:47:25:86:09:
         ab:dc:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:02:53 2025 by rpki-client