Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa
File:                     3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa (raw, json)
Hash identifier:          Hotcl9YwBYuxe6I+Iy3war5UwujjnrEai1bHtpYuX8g=
Subject key identifier:   93:C0:05:EC:CE:B9:01:B4:BA:E5:B4:F9:AA:85:B1:6E:11:39:22:E8
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       0BF1649CFFCE04335FF46A5FEC1F0E3A8D113953
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa
Signing time:             Mon 12 Aug 2024 13:15:00 +0000
ROA not before:           Mon 12 Aug 2024 13:10:00 +0000
ROA not after:            Mon 11 Aug 2025 13:15:00 +0000
asID:                     28103
IP address blocks:        179.189.218.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f1:64:9c:ff:ce:04:33:5f:f4:6a:5f:ec:1f:0e:3a:8d:11:39:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Aug 12 13:10:00 2024 GMT
            Not After : Aug 11 13:15:00 2025 GMT
        Subject: CN=93C005ECCEB901B4BAE5B4F9AA85B16E113922E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:00:5c:36:77:30:cc:9c:8b:1f:ec:49:67:
                    8c:69:f6:70:aa:8e:69:fb:2f:9c:1d:b9:ac:1b:d7:
                    3a:92:0f:91:19:53:0c:d7:f7:22:08:e8:6a:2b:2f:
                    83:bd:28:b9:63:a9:e2:c1:95:c3:58:f7:bb:53:dc:
                    1e:b6:a8:81:80:e3:55:a7:e0:0f:f5:e1:50:15:b2:
                    3c:fd:f4:a6:84:f0:a4:0c:bf:6c:d8:13:95:c2:78:
                    ac:24:6d:bc:ca:d8:a9:55:7c:03:34:b2:d4:7d:1b:
                    d3:04:fd:6b:ef:3c:15:0a:1c:4b:1d:6b:25:c7:6d:
                    f1:c7:36:58:db:22:04:ac:eb:80:b8:d2:3b:58:75:
                    13:0f:a3:1a:d2:79:f0:0a:96:64:ea:29:11:1f:8a:
                    f4:ec:12:b7:35:11:f6:80:de:e7:84:4b:2a:09:71:
                    32:96:27:75:45:f5:56:77:87:56:40:b5:86:96:c9:
                    a4:c5:d4:09:ce:40:3c:32:48:aa:26:b8:33:2d:8c:
                    6c:18:db:c9:49:32:6b:be:67:a3:4b:9b:75:b3:c1:
                    8c:c2:20:3b:5d:91:98:07:e1:ef:ee:94:63:b2:b4:
                    7f:69:7c:81:69:8b:ac:3a:d0:2a:09:f0:19:06:66:
                    19:15:6b:05:8f:3f:6a:0c:ed:03:d2:b5:91:0c:b4:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:05:EC:CE:B9:01:B4:BA:E5:B4:F9:AA:85:B1:6E:11:39:22:E8
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3137392e3138392e3231382e302f32332d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:47:a8:a9:ef:b7:56:a1:c6:59:8c:e4:00:92:2b:1d:27:36:
         76:c0:bb:78:5e:bf:ba:49:72:0e:de:b2:20:75:14:c9:1d:13:
         a3:ee:30:32:42:a5:0c:a3:ba:2c:c0:cf:98:f3:c3:c6:74:c1:
         d3:f2:78:ec:10:d7:2c:7a:eb:5a:39:2b:a8:e4:d4:ce:08:aa:
         da:db:d8:4e:83:a7:6a:e1:65:aa:fb:c2:e1:03:a2:1e:64:0f:
         10:7d:63:ac:dd:cb:83:35:88:f9:8a:fc:d4:cf:28:0d:7a:e2:
         9d:24:84:2f:c0:ff:d0:8e:cf:66:ed:b0:e7:b6:2c:c0:8d:87:
         33:07:30:3b:dd:49:e9:15:0d:65:90:21:83:1c:1c:d8:cc:55:
         c5:25:76:a4:e5:df:b8:40:02:f2:35:64:9f:c7:5b:20:e7:9e:
         5b:7e:d3:06:ca:a6:e8:0d:5c:cf:c5:6f:e5:1d:88:38:19:f3:
         e0:ea:b4:81:10:a5:29:c7:df:28:78:6d:34:e1:b1:f7:23:1e:
         66:3d:15:de:9f:eb:2d:f0:57:0d:0b:bc:c0:8c:56:da:1c:ca:
         b5:a1:24:8b:19:e1:52:6c:f7:f3:8f:01:c5:dd:e0:28:a2:2c:
         f3:cf:08:bf:9b:f2:5f:b1:6b:15:cd:e4:30:98:34:3b:1b:19:
         73:7c:71:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----