Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31392e302e302f31362d3234203d3e20323731373733.roa
File:                     3137392e31392e302e302f31362d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          tZItrZbQmDCBTlWRkGJmVLG0qSliMiAjcs5E7SOE1Fw=
Subject key identifier:   DB:84:07:B2:FC:A5:E0:3C:A1:78:8D:04:E1:82:55:E8:F0:E6:6E:4A
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       45890E1A2783BB63FE041CB6E20F1C11F945D704
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31392e302e302f31362d3234203d3e20323731373733.roa
Signing time:             Tue 04 Feb 2025 18:46:42 +0000
ROA not before:           Tue 04 Feb 2025 18:41:42 +0000
ROA not after:            Tue 03 Feb 2026 18:46:42 +0000
asID:                     271773
IP address blocks:        179.19.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:89:0e:1a:27:83:bb:63:fe:04:1c:b6:e2:0f:1c:11:f9:45:d7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Feb  4 18:41:42 2025 GMT
            Not After : Feb  3 18:46:42 2026 GMT
        Subject: CN=DB8407B2FCA5E03CA1788D04E18255E8F0E66E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:db:31:2a:96:21:21:d5:dc:ef:37:9b:f3:
                    ca:33:a9:83:ed:c8:21:a0:30:52:fd:11:5e:a0:5a:
                    17:c5:dc:dc:a2:39:3a:fe:d7:9e:23:bf:53:7b:80:
                    e0:ae:12:39:f3:37:f7:13:1c:47:b8:2d:72:d1:93:
                    15:a2:78:57:31:fa:b8:44:83:06:1e:f4:c5:49:d0:
                    9c:f4:7c:3b:75:cc:d2:9a:44:67:49:cd:98:5c:9f:
                    1d:d6:b4:ba:d0:5d:8c:b4:bc:2c:d4:7a:0f:95:9f:
                    dd:f3:bf:0d:ac:d3:d2:fa:4d:25:c1:c4:7f:3f:66:
                    1c:aa:bb:b5:74:19:67:c9:72:2f:37:e6:19:ae:6c:
                    d9:16:e4:b9:97:dc:eb:df:dc:68:bf:42:80:d3:12:
                    16:25:16:7b:31:32:b0:52:e8:18:37:66:12:73:92:
                    a6:57:37:ca:1d:2d:94:ff:96:a8:b5:90:c4:29:78:
                    09:39:63:77:8d:7f:8b:05:ad:fc:32:ed:ea:e2:df:
                    e7:ed:cb:83:91:82:d3:a5:d4:4a:d2:4b:3a:d4:97:
                    a1:50:a0:bc:51:ba:ad:5d:e7:78:90:34:8d:dc:2f:
                    9f:43:98:fd:8d:fc:9e:67:4a:2f:a3:62:d4:7f:14:
                    ae:b2:ad:d1:0d:78:e1:52:92:ef:a4:36:85:c8:0d:
                    13:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:84:07:B2:FC:A5:E0:3C:A1:78:8D:04:E1:82:55:E8:F0:E6:6E:4A
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31392e302e302f31362d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.19.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:a6:4c:37:a5:2b:40:f6:23:01:51:e9:5a:55:9f:e0:2d:
         db:7b:3c:a1:5f:e1:94:eb:bd:e6:30:34:b0:0a:47:cb:0a:0c:
         69:9c:9c:fc:eb:e1:ea:d9:f3:50:8e:dc:37:12:6b:5d:84:11:
         88:93:50:b6:2a:5a:4b:7f:9c:92:3d:5d:74:51:64:bf:5d:7d:
         b9:27:44:42:4a:bd:85:0c:9b:0b:90:68:fb:31:31:02:74:29:
         41:38:7d:97:f4:2c:28:a3:e1:0f:33:e6:5f:67:79:e7:cc:fd:
         1d:f0:11:c6:f0:d5:22:79:c6:94:9a:76:bb:8c:e5:bb:97:88:
         ba:af:83:2c:18:f5:24:64:6a:57:60:ba:32:b8:a8:f4:93:fc:
         69:e4:a4:4a:1d:84:6d:86:ed:ee:a3:fd:7b:7c:c3:9a:e7:b8:
         d5:78:1e:f9:cf:bd:c1:09:63:8d:f7:11:f8:b0:cd:e2:bd:d7:
         09:f2:87:c4:0b:3f:d3:ab:0a:70:09:91:27:0a:99:52:92:8f:
         91:16:4a:53:b8:7f:5a:94:ea:3e:3d:73:83:8a:63:8b:68:45:
         21:7e:91:c7:a1:13:8b:12:e9:4f:41:54:2e:22:e8:b2:65:42:
         32:44:97:14:3e:d1:03:36:26:78:87:5f:fb:39:f5:f6:87:73:
         06:6c:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:28 2025 by rpki-client