Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/c87f524c9a7dfd7330879d5d517d168af565787f.roa
File:                     c87f524c9a7dfd7330879d5d517d168af565787f.roa (raw, json)
Hash identifier:          RB3hCHhzJB7xwncCK5SlqXm1wBWJLNzP4el2f7vyJ1c=
Subject key identifier:   FC:3A:98:B3:9B:3D:01:1D:AE:23:DE:C8:FE:E0:5F:00:8E:D1:BC:4C
Certificate issuer:       /CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Certificate serial:       201E67
Authority key identifier: 53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/c87f524c9a7dfd7330879d5d517d168af565787f.roa
Signing time:             Wed 12 Apr 2023 15:44:48 +0000
ROA not before:           Mon 22 Mar 2021 03:00:00 +0000
ROA not after:            Sun 24 Mar 2030 03:00:00 +0000
asID:                     27960
IP address blocks:        179.60.96.0/20 maxlen: 23
                          190.122.32.0/20 maxlen: 23
                          190.122.48.0/20 maxlen: 23
                          200.49.120.0/21 maxlen: 23
                          2803:d080::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104935 (0x201e67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
        Validity
            Not Before: Mar 22 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2030 GMT
        Subject: CN=c87f524c9a7dfd7330879d5d517d168af565787f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:90:1d:9c:99:68:c2:c4:56:70:2c:87:21:
                    5b:0c:81:d7:48:ae:29:6a:c6:7b:7f:03:bf:f3:63:
                    1e:50:4f:88:b9:34:c8:59:bd:93:3d:8a:42:af:11:
                    b3:6c:f8:a3:21:13:f1:db:ec:92:63:09:52:97:68:
                    1c:9b:1e:35:e0:00:a3:1e:7d:7f:30:1c:ef:63:ae:
                    4a:1d:f3:e2:bb:c8:ed:28:79:13:26:a6:ac:15:30:
                    37:51:fe:12:8a:61:11:94:18:39:ce:5a:67:96:32:
                    73:89:3e:de:1b:ef:cf:00:c2:0b:71:0f:a7:08:89:
                    e1:b0:88:73:23:9e:66:4d:41:e9:9c:c5:e3:05:64:
                    6f:a6:1c:e4:bf:73:89:47:c8:fb:38:7a:bd:0d:72:
                    60:25:c1:86:e6:95:67:06:a8:81:05:0c:ab:fb:5f:
                    b3:21:2c:26:05:9e:8c:4b:3c:09:17:22:82:45:c1:
                    15:6d:b4:ae:9d:07:0c:92:f0:43:61:f8:22:c8:56:
                    ae:96:69:95:e1:e1:7b:cf:17:c7:5a:31:9a:9e:a3:
                    2a:b8:d4:ba:7e:dd:cf:c7:49:95:41:42:ae:02:98:
                    58:75:68:89:30:4e:90:67:09:bf:f7:a4:05:f3:45:
                    14:9e:08:dd:7c:80:ae:ce:5c:aa:1e:16:e1:93:03:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3A:98:B3:9B:3D:01:1D:AE:23:DE:C8:FE:E0:5F:00:8E:D1:BC:4C
            X509v3 Authority Key Identifier:
                keyid:53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/c87f524c9a7dfd7330879d5d517d168af565787f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3fd7e91493678e5c49e72c20d07d4a277e63f224.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.96.0/20
                  190.122.32.0/19
                  200.49.120.0/21
                IPv6:
                  2803:d080::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:ee:39:7e:44:6f:91:5b:58:96:9c:a3:a6:0a:b0:91:75:
         d5:a5:2b:9b:25:06:52:96:27:16:04:1a:39:4e:57:82:0d:dc:
         2f:e3:76:0d:0b:d1:9f:dd:9c:62:2e:37:8b:ec:39:98:e5:f9:
         75:29:74:41:ef:d8:bb:d6:4d:2e:33:05:e3:f8:94:97:b1:e6:
         c6:90:30:53:a2:ba:88:9a:13:fb:54:45:f5:b3:c4:27:ff:ae:
         1c:84:1a:cf:dc:b7:4e:d8:15:88:fa:27:45:a1:cf:ec:94:6a:
         54:e2:31:76:0b:c9:92:9f:95:77:c2:56:7f:b7:04:46:5b:a2:
         ba:e3:b5:52:42:5b:f3:ca:dc:ff:29:36:73:9e:6b:d0:b9:fc:
         0d:a0:8e:38:3a:64:82:48:b5:8a:7b:23:28:31:e4:54:77:8a:
         23:e6:bd:56:06:82:3d:6d:77:69:d9:dc:85:7a:8d:86:8d:89:
         a0:d9:e1:9f:87:7e:6a:4d:2d:bd:83:5c:4c:6e:6b:d7:ac:0a:
         e7:64:41:de:dc:ff:0a:1c:6c:60:84:e0:f1:79:42:a3:61:82:
         0b:dc:af:e3:69:6b:5a:73:9d:6b:9d:99:20:0f:b7:9b:b5:19:
         b4:61:c5:58:c6:6c:c6:0a:cc:0c:f8:87:41:3b:d1:17:d3:45:
         a8:e3:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:30:44 2025 by rpki-client