Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32352e302f32342d3234203d3e20323635363832.roa
File:                     3137392e35302e32352e302f32342d3234203d3e20323635363832.roa (raw, json)
Hash identifier:          nLRdwPnRz1kyumi0DBqmOepdgoil7IdHxxorpS/8L1k=
Subject key identifier:   42:D5:38:50:E3:6E:D1:C9:77:10:4E:ED:D6:A2:8B:32:B0:09:3C:C5
Certificate issuer:       /CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9
Certificate serial:       59CE0CEBC1DE4AAD1DF0E0447B96F98443777A31
Authority key identifier: AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32352e302f32342d3234203d3e20323635363832.roa
Signing time:             Mon 09 Dec 2024 20:00:00 +0000
ROA not before:           Mon 09 Dec 2024 19:55:00 +0000
ROA not after:            Mon 08 Dec 2025 20:00:00 +0000
asID:                     265682
IP address blocks:        179.50.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ce:0c:eb:c1:de:4a:ad:1d:f0:e0:44:7b:96:f9:84:43:77:7a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9
        Validity
            Not Before: Dec  9 19:55:00 2024 GMT
            Not After : Dec  8 20:00:00 2025 GMT
        Subject: CN=42D53850E36ED1C977104EEDD6A28B32B0093CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:c4:a3:6e:6c:4a:a9:bd:92:4a:f6:ef:2f:
                    70:3d:b4:58:1f:e5:f1:fc:65:f6:3c:43:9f:c4:4d:
                    f7:16:d3:39:1a:5d:aa:e8:b8:0a:74:1a:d3:6b:32:
                    d0:24:a2:d5:d6:f5:1c:76:55:46:e6:f7:a3:56:af:
                    7b:f4:e5:7e:24:72:95:97:88:a0:81:59:00:c9:1e:
                    d0:26:60:0f:ae:4c:c9:bf:16:4a:13:b4:7d:24:2f:
                    a2:3b:df:e0:69:07:84:a9:60:02:f0:3b:9f:09:70:
                    3e:90:c7:50:0b:b5:54:c4:91:6e:33:d3:92:00:e0:
                    54:22:8c:d7:95:62:35:72:0e:c2:03:f7:c9:72:ff:
                    95:0d:4e:d8:05:68:54:4f:67:72:89:e7:14:50:a4:
                    05:30:4a:c8:4f:33:d7:08:73:a9:9a:d5:a4:5c:25:
                    bb:68:25:47:06:83:89:f0:7d:4e:a5:d2:21:12:26:
                    a8:3a:45:bc:8e:ec:a3:12:df:16:8b:1b:35:12:60:
                    c9:f7:f0:9f:3f:9b:bb:88:cc:36:9a:0a:cf:6e:ac:
                    41:28:68:8a:f0:10:47:5c:1c:15:be:a0:e8:1b:a4:
                    64:8f:aa:00:b1:6e:7f:e7:86:0f:ee:1f:aa:62:6c:
                    a9:03:62:4c:53:dd:9c:81:07:9f:9b:01:dc:6d:bd:
                    a4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D5:38:50:E3:6E:D1:C9:77:10:4E:ED:D6:A2:8B:32:B0:09:3C:C5
            X509v3 Authority Key Identifier:
                keyid:AD:66:E9:F5:C3:C1:1A:5F:71:AC:10:0B:C0:5A:99:58:EF:21:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AD66E9F5C3C11A5F71AC100BC05A9958EF2148C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32352e302f32342d3234203d3e20323635363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:92:95:d1:98:24:e2:99:18:e8:e0:62:bf:db:69:97:b6:
         c8:78:74:d2:ce:27:5a:1f:6d:3f:21:79:19:1c:d2:ec:4c:08:
         47:69:d3:22:30:2b:fc:84:41:75:47:bf:7f:54:ec:4b:61:d6:
         cd:f2:3e:54:85:b0:4f:41:e9:94:26:04:94:89:4d:49:35:d6:
         8f:30:70:13:be:1b:04:69:5c:94:06:33:0f:8f:3b:f8:50:80:
         aa:80:5c:86:f1:f6:68:7f:2c:14:96:ee:e6:32:10:f6:31:0b:
         3a:38:6e:26:58:a1:52:b2:b1:0d:7b:83:e3:d9:dc:37:44:f6:
         f6:a8:6e:45:a9:9e:1c:b9:75:17:5b:69:95:f9:71:25:f6:5f:
         4d:d0:07:75:e9:19:66:07:50:64:30:8c:de:24:f3:6a:30:99:
         10:67:4a:da:6f:b9:39:44:78:3e:cc:05:a7:34:0c:88:ec:3c:
         02:4d:32:32:a9:ba:83:16:5d:cd:4c:22:d4:be:46:d4:eb:05:
         2a:97:87:b2:24:d9:5f:e7:11:9b:c9:c0:39:f2:52:59:11:b1:
         ac:d8:59:2c:59:92:fb:f4:83:90:7a:f6:7b:02:ec:3c:d7:4e:
         d8:85:14:91:60:cd:6b:b5:b6:d4:80:f6:13:b3:a7:c5:00:d9:
         dc:07:14:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:47 2025 by rpki-client