Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/3137392e302e3134362e302f32342d3234203d3e203134303830.roa
File:                     3137392e302e3134362e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier:          R9mxu7bZuGKF+3Q+A4fm871xiub6SQDMSz5H7c6Zvfk=
Subject key identifier:   E6:97:69:76:C9:D7:E5:3C:3B:6B:23:2B:25:C8:9E:9E:FA:9E:E9:D4
Certificate issuer:       /CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Certificate serial:       4527E2081B043591846247E9C580BB089AB01338
Authority key identifier: 2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/3137392e302e3134362e302f32342d3234203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 19:58:08 +0000
ROA not before:           Tue 04 Feb 2025 19:53:08 +0000
ROA not after:            Tue 03 Feb 2026 19:58:08 +0000
asID:                     14080
IP address blocks:        179.0.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:27:e2:08:1b:04:35:91:84:62:47:e9:c5:80:bb:08:9a:b0:13:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7C9588134926F30E67EDE409C53B875B5CF047
        Validity
            Not Before: Feb  4 19:53:08 2025 GMT
            Not After : Feb  3 19:58:08 2026 GMT
        Subject: CN=E6976976C9D7E53C3B6B232B25C89E9EFA9EE9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:59:15:e7:c1:22:5f:59:a3:17:99:34:53:
                    5a:87:49:96:2e:4a:15:24:9e:c0:d6:c3:0c:38:3e:
                    90:c4:87:bc:c4:2e:5f:da:5d:1c:f9:92:66:fd:b2:
                    cd:68:31:86:76:86:e2:fb:0a:97:35:bb:ac:33:04:
                    36:ad:e9:97:88:29:9d:65:2e:03:2d:7b:a9:5f:04:
                    a7:8b:b3:ce:99:01:08:9b:6f:f5:55:96:c8:09:51:
                    31:e7:01:b3:79:28:26:ae:df:a5:c7:0f:eb:56:2a:
                    70:77:03:30:15:3b:95:75:89:a1:f8:1a:05:7a:10:
                    72:61:b3:d9:6a:d7:52:21:77:fb:f2:ce:34:7f:4e:
                    4c:dd:9c:8a:b3:46:02:a0:f4:00:62:2c:fc:89:57:
                    11:be:f3:68:9f:00:a1:14:60:20:c2:cb:05:b3:e8:
                    44:6e:14:c9:7f:30:3a:ef:ab:71:05:4c:b3:dd:a2:
                    ee:2a:9c:4b:e9:04:4f:d7:6b:a8:95:32:04:c3:4e:
                    67:f1:33:9f:9f:d8:c0:c7:53:ad:5a:33:87:3d:9f:
                    8c:cb:19:77:74:80:d9:9a:48:fa:87:51:50:ab:4f:
                    fe:67:94:cb:9a:d4:f9:6b:ed:8f:d5:7d:c4:0e:8b:
                    4e:3e:60:96:3e:42:91:5c:48:b4:66:c2:db:4b:4b:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:69:76:C9:D7:E5:3C:3B:6B:23:2B:25:C8:9E:9E:FA:9E:E9:D4
            X509v3 Authority Key Identifier:
                keyid:2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/3137392e302e3134362e302f32342d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:68:ad:ae:a4:52:c5:5e:49:e7:39:9b:20:ba:1d:ba:3b:ae:
         3e:0b:d0:f7:12:c2:a9:f5:95:83:08:5e:23:13:a6:e1:76:b4:
         41:27:30:0d:60:a4:d9:4e:cb:ab:4e:dd:a4:1e:19:b9:05:9e:
         4d:a7:81:f6:44:b5:79:c7:d7:d2:b8:88:e4:e7:ce:9d:5e:72:
         d6:07:86:02:71:2c:5a:6a:e0:cb:6b:a6:cc:8f:d0:54:38:a3:
         e7:e1:6e:6d:78:c0:ec:56:51:8b:06:96:82:91:fd:9c:96:eb:
         0e:82:a0:84:d7:e4:5c:c6:ed:46:0b:2e:a2:8e:4e:81:7d:02:
         34:c2:42:1e:74:68:27:ce:83:00:71:52:06:80:30:c7:34:c5:
         a1:50:5d:46:f7:b3:77:f0:aa:51:d1:e3:19:af:77:7b:c7:65:
         40:a1:07:67:62:d3:ba:62:2a:a5:1d:27:e6:48:c4:52:21:27:
         fb:c8:89:e2:2e:e3:83:8c:c0:fd:fd:46:7c:05:50:08:0b:3d:
         87:ee:ed:ed:ff:11:53:3e:01:e9:ef:40:44:64:7f:ac:90:09:
         4c:44:ba:c4:6a:84:bd:18:1b:40:cd:a8:e0:b8:4f:9b:5a:f8:
         aa:ef:05:b0:9e:27:68:ca:15:c7:27:3d:26:a9:3f:d4:45:91:
         99:99:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:16:02 2025 by rpki-client