Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230332e302f32342d3234203d3e20323732393834.roa
File:                     3137372e3132382e3230332e302f32342d3234203d3e20323732393834.roa (raw, json)
Hash identifier:          a7AztnjuoTWT3nPKOlypIEP6FkPyfALhnv+WXOMQAww=
Subject key identifier:   03:2E:B5:FA:0C:E3:EF:14:85:95:55:99:BE:DC:96:10:3B:57:F0:58
Certificate issuer:       /CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
Certificate serial:       28A17C7BFD70B5C928F63E1A9238AAF4F9299B44
Authority key identifier: 10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230332e302f32342d3234203d3e20323732393834.roa
Signing time:             Sat 18 Jan 2025 15:35:00 +0000
ROA not before:           Sat 18 Jan 2025 15:30:00 +0000
ROA not after:            Sat 17 Jan 2026 15:35:00 +0000
asID:                     272984
IP address blocks:        177.128.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a1:7c:7b:fd:70:b5:c9:28:f6:3e:1a:92:38:aa:f4:f9:29:9b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC
        Validity
            Not Before: Jan 18 15:30:00 2025 GMT
            Not After : Jan 17 15:35:00 2026 GMT
        Subject: CN=032EB5FA0CE3EF1485955599BEDC96103B57F058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:05:14:80:71:12:d6:0d:68:be:37:10:20:28:
                    9e:94:f0:e6:8f:23:28:2f:cd:87:44:68:a7:4e:93:
                    67:b7:60:db:ec:61:d9:41:85:4e:d2:ac:5c:b2:85:
                    28:b8:b4:67:21:16:bb:ec:d7:5d:2f:a6:b9:08:c7:
                    71:e3:f8:20:bb:d8:3d:90:26:82:bd:ef:fc:74:06:
                    56:d9:8e:f6:83:bd:ba:be:ef:11:75:7d:20:6e:78:
                    98:30:1d:cf:89:e8:12:fc:a9:ea:0a:54:8b:ed:b5:
                    58:32:52:b3:5c:49:99:e3:91:6c:50:4d:ea:96:16:
                    8c:bc:55:db:46:96:b9:c7:91:65:df:3d:96:43:22:
                    db:e6:93:47:97:d5:15:89:05:60:2b:2a:e9:ef:4f:
                    58:1c:6a:1c:1c:96:5b:25:2d:6c:b8:0c:06:21:49:
                    aa:b3:78:09:95:48:78:1b:d9:e3:63:29:ad:b8:f2:
                    19:69:eb:12:db:4e:e9:09:24:01:8c:44:7b:9b:e7:
                    40:1c:0c:3b:35:bf:f0:ff:66:f0:f7:c5:da:3d:b9:
                    f0:96:ce:63:8a:f3:51:14:96:e9:ba:04:2a:92:1f:
                    8b:9e:f9:47:59:e0:89:81:73:0f:8f:34:b0:f6:f6:
                    ce:92:66:43:f3:01:13:4b:37:be:e2:42:6f:0e:7c:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:B5:FA:0C:E3:EF:14:85:95:55:99:BE:DC:96:10:3B:57:F0:58
            X509v3 Authority Key Identifier:
                keyid:10:7E:18:F1:4C:8F:32:AF:09:76:4B:99:DB:E7:A6:F0:B3:9D:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/107E18F14C8F32AF09764B99DBE7A6F0B39DB6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70B388EE5D2733DB331DEE1C412F33B9FF13193D63DA673F426FBB776368D1DF/0/3137372e3132382e3230332e302f32342d3234203d3e20323732393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:83:c1:ab:d9:1e:29:a6:fa:48:bd:fd:ea:c5:1b:93:4e:89:
         e1:1d:fc:f0:9b:7b:d7:13:b4:2f:39:16:8c:52:11:a3:ae:59:
         60:7d:85:99:f5:60:3b:ad:43:b1:2e:8d:ff:82:82:9b:7f:ad:
         e4:bd:f5:a4:0f:08:a8:5f:89:5f:93:dd:40:da:ad:0e:cb:11:
         59:34:2b:13:52:16:45:43:d5:60:ab:7d:59:1c:85:32:1a:e0:
         39:21:4a:c9:a5:46:19:14:09:47:4b:ad:e8:f6:71:db:07:9c:
         24:4a:43:b8:39:73:6e:2f:20:dc:4f:f7:81:6b:96:6d:16:3c:
         e5:1d:f1:ce:05:80:eb:db:75:e6:eb:63:05:b4:2e:85:82:cc:
         ad:43:d6:be:21:58:38:d1:33:22:7c:40:ce:80:74:0e:2a:ad:
         af:0f:9d:bd:1b:3f:00:d8:16:59:99:8a:7f:59:fd:2c:87:73:
         cb:e0:6d:c9:50:e8:57:a4:f4:8f:c6:31:26:2e:76:fc:1e:4e:
         90:60:15:2c:f4:3c:c7:49:0c:ba:70:17:e7:31:dc:98:c2:5d:
         69:7d:33:2e:0e:e5:06:f7:79:6b:5c:e0:d8:58:55:fe:18:8a:
         a4:43:8f:16:b9:3b:48:e9:af:af:88:fc:45:17:9d:1c:1e:f0:
         ec:d8:89:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----