Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa
File:                     3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa (raw, json)
Hash identifier:          g6VKUs7UI40XuwHv3IN42i74qReP43XIh0iAPdEnY3g=
Subject key identifier:   88:4D:67:E7:F9:EE:73:5A:FB:66:0D:16:03:49:F7:9D:1C:78:2A:92
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       598AC1ED151FF574B182EF3D07C6D01760DDAD73
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa
Signing time:             Tue 04 Feb 2025 18:44:49 +0000
ROA not before:           Tue 04 Feb 2025 18:39:49 +0000
ROA not after:            Tue 03 Feb 2026 18:44:49 +0000
asID:                     264740
IP address blocks:        170.239.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:c1:ed:15:1f:f5:74:b1:82:ef:3d:07:c6:d0:17:60:dd:ad:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Feb  4 18:39:49 2025 GMT
            Not After : Feb  3 18:44:49 2026 GMT
        Subject: CN=884D67E7F9EE735AFB660D160349F79D1C782A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:79:2f:46:57:3f:79:56:57:ac:60:a0:e5:
                    e1:9f:72:c0:e1:8c:78:65:e7:c4:4b:82:bc:90:3b:
                    17:ac:27:53:79:35:5c:60:f3:f2:3c:aa:b4:9f:33:
                    9d:6a:3a:2f:48:7e:91:cb:fc:f2:6d:a9:07:1c:48:
                    ee:6a:b4:e7:50:7f:72:18:14:9a:c0:37:5b:51:a8:
                    34:10:02:2b:17:9c:46:e0:3d:1a:18:ba:5d:6b:0e:
                    de:6b:a7:03:f4:a9:da:62:9b:3c:9a:dd:1e:fa:4f:
                    c6:d0:3d:3f:ba:55:e9:83:36:44:28:66:28:c5:e2:
                    3d:e3:3c:90:68:27:e8:21:3d:c0:3b:8f:2a:1f:5d:
                    2b:df:b1:d2:ee:9b:f3:8f:38:25:ae:dd:65:fc:13:
                    ed:2d:2a:78:1a:6e:84:75:01:76:49:8e:5a:6e:76:
                    6b:0d:34:cf:4d:28:6f:f1:d1:22:33:87:16:f1:d5:
                    23:77:e5:db:2a:c2:3a:c4:40:48:03:f6:17:4d:10:
                    55:ed:f1:8c:72:7d:25:ab:51:86:7d:14:95:cc:b2:
                    be:e4:12:7a:51:08:cf:01:f3:43:9d:fa:aa:41:17:
                    e7:e3:5b:bf:16:89:70:00:a6:26:b6:32:7a:5b:e5:
                    ab:3f:ab:de:86:07:9f:a9:7d:e6:e8:8a:07:29:de:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:67:E7:F9:EE:73:5A:FB:66:0D:16:03:49:F7:9D:1C:78:2A:92
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:4f:a6:77:f5:4a:6d:5d:48:74:6e:e9:a7:b4:c0:d7:43:
         d2:2f:c2:f2:42:94:53:84:fc:96:22:54:2e:80:19:0d:03:5a:
         28:b4:81:98:05:74:ff:e0:87:26:bb:e3:56:0e:a0:ba:21:0a:
         63:9b:ea:28:74:e0:79:c6:c8:42:55:9f:8b:ca:34:02:28:07:
         57:30:18:91:bc:6b:e0:a8:09:d9:c0:1e:8c:9d:18:94:a6:da:
         57:92:f7:57:97:82:03:1c:dc:b8:98:88:77:43:47:0b:dc:9d:
         0a:15:94:74:55:89:49:a6:69:2e:35:44:04:af:6c:0c:7d:c5:
         03:bf:51:b2:c6:e4:58:7b:58:46:af:49:ec:e5:97:ca:59:30:
         c2:ee:1f:9e:8f:5f:41:c3:9f:25:54:1c:2f:ac:25:77:eb:e1:
         96:e6:3d:46:9e:51:02:36:4c:88:69:21:9f:98:56:37:8f:82:
         75:e9:f2:d5:b4:02:84:1b:cc:b9:ab:94:6e:81:29:68:4c:3a:
         c6:03:06:c0:d7:e5:78:56:ba:d8:37:38:7d:49:3b:25:14:1f:
         3f:c9:5d:89:59:dc:54:3d:37:60:d7:8b:ce:73:b0:05:8e:03:
         9e:d8:2c:8c:7b:8c:30:a7:e7:19:84:d7:fc:67:e0:39:0b:03:
         a8:30:d8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:28 2025 by rpki-client