Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e34342e302e302f31342d3134203d3e2036333036.roa
File:                     3137392e34342e302e302f31342d3134203d3e2036333036.roa (raw, json)
Hash identifier:          5s6r9+QfDIHGb2eU7A0+XgdBBWB7PdHYdZ+8q5vDRXg=
Subject key identifier:   F0:F1:D7:D1:F9:F9:22:71:04:22:67:78:8B:F4:EC:1E:51:0D:2C:71
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       5AC66C9A213C4A0EA70139EFFA420EEA4C716106
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e34342e302e302f31342d3134203d3e2036333036.roa
Signing time:             Tue 04 Feb 2025 18:32:56 +0000
ROA not before:           Tue 04 Feb 2025 18:27:56 +0000
ROA not after:            Tue 03 Feb 2026 18:32:56 +0000
asID:                     6306
IP address blocks:        179.44.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c6:6c:9a:21:3c:4a:0e:a7:01:39:ef:fa:42:0e:ea:4c:71:61:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Feb  4 18:27:56 2025 GMT
            Not After : Feb  3 18:32:56 2026 GMT
        Subject: CN=F0F1D7D1F9F92271042267788BF4EC1E510D2C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:c3:17:d9:01:ea:a3:4b:03:1d:96:d9:3c:
                    3a:9c:c9:51:18:b8:d4:5e:4f:60:f1:37:a7:32:bb:
                    8b:bf:29:fa:1c:77:24:24:83:01:3b:03:46:65:9f:
                    98:d6:cd:c5:92:e9:1b:3c:65:e8:ef:41:4d:6e:38:
                    58:5e:3d:ad:c0:27:22:39:56:d1:16:be:d7:df:0d:
                    bb:85:a3:ec:e9:bf:22:72:f0:27:b0:99:e6:fe:1b:
                    a7:59:0e:0b:52:ab:23:b6:50:53:9c:39:3e:8b:98:
                    98:ef:e8:3b:52:fa:2e:68:24:b8:68:3c:78:e0:c6:
                    7e:61:1f:f9:db:e6:b9:2c:38:0f:8b:14:dd:1b:1f:
                    a0:9c:db:f5:f6:fa:86:3b:86:5b:08:4c:a0:1b:b6:
                    0f:6a:8a:e1:23:b8:b4:35:1d:e8:9c:e2:88:a0:8d:
                    47:f0:f8:24:78:25:1a:3c:7c:bc:5b:93:7d:2d:72:
                    bb:70:91:f6:d7:e5:87:32:c1:05:50:2b:a1:ca:f1:
                    de:6d:94:37:45:f9:2e:7e:5d:72:7b:3a:ff:77:3c:
                    8f:92:e2:46:66:88:5c:50:b6:ba:d9:c6:a6:42:a5:
                    21:00:05:59:92:b2:00:7a:b2:53:47:00:48:de:dc:
                    44:9a:8d:27:42:85:4f:a7:15:b7:f2:de:94:f0:ce:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:D7:D1:F9:F9:22:71:04:22:67:78:8B:F4:EC:1E:51:0D:2C:71
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e34342e302e302f31342d3134203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.44.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         95:49:1c:44:af:d6:3b:01:82:c2:e2:9b:a7:de:ad:35:11:90:
         8a:da:fe:bd:c0:8e:11:36:59:93:58:52:a9:27:40:db:48:d7:
         8c:2a:e6:36:ad:81:d7:82:c6:95:4f:7c:1f:01:9e:ea:a3:3c:
         e2:db:76:e2:04:6a:2d:1b:9b:01:f5:24:bc:66:c4:d9:c7:a9:
         06:50:d3:68:1a:72:cc:d1:74:9b:44:53:53:6d:2d:b2:42:c5:
         80:f1:13:33:27:a0:f3:13:9d:5f:9c:7b:36:60:b0:8f:c9:3e:
         75:d8:94:2b:5b:6a:0b:5e:35:5a:1f:de:ca:87:58:b0:37:04:
         fa:21:84:54:42:1e:a3:6f:ea:0f:27:09:6f:4a:0a:ab:b9:72:
         51:10:2f:c9:c0:75:e6:d7:ba:3c:dd:0a:7a:d4:84:2a:aa:7b:
         c6:f6:52:8e:18:71:05:50:c5:9d:d3:ce:12:d6:02:55:75:9d:
         fc:e0:2a:b5:d3:3a:96:12:b4:47:89:68:1f:61:ef:bd:03:30:
         34:35:d2:06:75:c4:d9:de:91:75:bc:8c:ba:7b:28:b1:fe:a2:
         11:0d:b4:91:56:50:22:6d:bc:c8:0b:80:95:9d:d1:c4:a0:c3:
         b3:fe:6d:00:a6:18:b8:42:e6:85:ca:2c:d5:a0:0e:68:b1:e6:
         aa:d3:68:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----