Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA3CD9574DF509F2B20DA77B467D1B812E9FCFE2AAF671A45FDEC010203ED0ED/0/3137392e36302e3233322e302f32322d3234203d3e20323633363933.roa
File:                     3137392e36302e3233322e302f32322d3234203d3e20323633363933.roa (raw, json)
Hash identifier:          AKh2yurQ4DFNi4zQRM9Mk1Q09YkPd8FiudibWGYiZPw=
Subject key identifier:   B2:42:F4:81:9E:84:66:E5:B8:14:8C:66:32:47:53:D6:BB:AB:7D:82
Certificate issuer:       /CN=048C9E6AA0036CD155EF68C41E06F9A2FA3646D5
Certificate serial:       7870D60B8A3138A97C97E3C60EEFD2F6DC38D035
Authority key identifier: 04:8C:9E:6A:A0:03:6C:D1:55:EF:68:C4:1E:06:F9:A2:FA:36:46:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/048C9E6AA0036CD155EF68C41E06F9A2FA3646D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA3CD9574DF509F2B20DA77B467D1B812E9FCFE2AAF671A45FDEC010203ED0ED/0/3137392e36302e3233322e302f32322d3234203d3e20323633363933.roa
Signing time:             Tue 04 Feb 2025 18:16:16 +0000
ROA not before:           Tue 04 Feb 2025 18:11:16 +0000
ROA not after:            Tue 03 Feb 2026 18:16:16 +0000
asID:                     263693
IP address blocks:        179.60.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:70:d6:0b:8a:31:38:a9:7c:97:e3:c6:0e:ef:d2:f6:dc:38:d0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048C9E6AA0036CD155EF68C41E06F9A2FA3646D5
        Validity
            Not Before: Feb  4 18:11:16 2025 GMT
            Not After : Feb  3 18:16:16 2026 GMT
        Subject: CN=B242F4819E8466E5B8148C66324753D6BBAB7D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:a5:99:f5:0f:98:f1:36:91:33:a1:40:85:
                    0e:43:f8:ca:24:aa:34:8b:23:d2:7b:f7:ac:f0:a7:
                    b0:fa:bf:72:c5:32:ed:7b:9c:0e:e5:14:99:48:27:
                    63:f6:c0:b7:78:8d:1b:b4:b5:d3:05:39:b5:f0:f7:
                    d4:21:5e:a0:95:04:c6:86:db:0b:53:e6:ed:3a:16:
                    f1:c9:75:2b:26:5f:d8:f4:82:b8:58:4a:45:67:b0:
                    2e:7d:7e:15:58:e2:76:8f:d0:c4:75:e6:12:9e:df:
                    cc:f7:ab:f5:55:85:9d:c6:4c:5d:d4:e1:0a:6a:c6:
                    19:8e:95:ef:bd:2a:61:2f:c1:cb:29:b9:d8:48:6a:
                    50:bf:96:ce:b3:dc:c4:f5:b0:3e:94:7c:a3:46:b0:
                    d6:c5:2c:5f:d9:65:34:38:e3:ab:0d:2e:82:51:fb:
                    cb:f1:24:9d:fb:79:0c:c6:a1:c8:08:cf:66:46:56:
                    a3:d2:73:9a:27:5f:df:7a:ac:e8:8d:8a:8d:31:f6:
                    aa:1f:85:be:a1:d5:db:94:c1:04:c7:4e:c4:ba:53:
                    ec:7f:f3:e2:c0:bd:bd:09:9f:ea:41:7f:ba:54:08:
                    4c:3c:fd:ef:09:d6:8b:2b:15:4b:a9:29:f9:2d:35:
                    78:29:7a:58:30:0a:09:f3:09:73:6f:2d:16:3c:dd:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:F4:81:9E:84:66:E5:B8:14:8C:66:32:47:53:D6:BB:AB:7D:82
            X509v3 Authority Key Identifier:
                keyid:04:8C:9E:6A:A0:03:6C:D1:55:EF:68:C4:1E:06:F9:A2:FA:36:46:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA3CD9574DF509F2B20DA77B467D1B812E9FCFE2AAF671A45FDEC010203ED0ED/0/048C9E6AA0036CD155EF68C41E06F9A2FA3646D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/048C9E6AA0036CD155EF68C41E06F9A2FA3646D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA3CD9574DF509F2B20DA77B467D1B812E9FCFE2AAF671A45FDEC010203ED0ED/0/3137392e36302e3233322e302f32322d3234203d3e20323633363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:f0:44:7f:81:48:cf:ec:38:58:ae:cb:3a:62:30:14:f8:75:
         22:42:6f:c8:9c:4a:e5:cd:06:78:41:29:c7:47:40:a3:a8:e9:
         95:7b:7a:9f:bf:cd:10:d0:8b:06:b3:72:cd:a1:c9:f8:17:93:
         16:ef:63:10:bd:fd:e7:6d:bd:45:b5:a7:cf:38:36:0c:56:18:
         be:3e:5f:47:7c:a5:f2:e6:6a:64:9f:84:a0:da:ca:34:27:44:
         b8:1a:20:36:c5:10:a3:61:af:70:1e:34:db:46:cf:4b:72:95:
         ba:32:ef:f4:ae:47:b1:a3:7d:49:cd:77:86:7d:b5:48:c0:c3:
         15:33:2a:b0:6e:b1:9e:3d:51:e9:05:8c:bf:17:28:4e:0b:4d:
         d6:88:0c:97:47:be:22:52:1d:af:71:09:99:2b:0c:a3:95:12:
         54:e1:c3:90:a5:2c:19:1e:d8:4b:4d:a7:11:30:69:f4:5d:ac:
         82:74:d7:08:bf:3a:13:bc:cc:4a:1e:09:f8:0f:37:fb:c2:d8:
         cd:db:89:01:24:21:af:50:0f:3a:5a:57:96:bd:0d:df:02:20:
         bc:47:7d:08:d2:c5:9c:16:83:1a:be:85:59:13:3f:79:22:8c:
         7f:32:0b:29:48:07:95:c9:90:77:63:30:b3:79:35:13:4c:7e:
         f3:c5:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:02 2025 by rpki-client