Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
File:                     3137392e32302e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          qmODVrew18m7S7uR+HsaTGfpsAooI4FKI3xxWKAN2/g=
Subject key identifier:   15:BE:E6:41:58:5C:2E:7F:4F:E8:36:B4:B8:BE:22:40:64:EC:B2:EF
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       27C44867A82E161BFC79C9C405688EB75ACD2D9A
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:41:56 +0000
ROA not before:           Tue 05 Mar 2024 17:36:56 +0000
ROA not after:            Tue 04 Mar 2025 17:41:56 +0000
asID:                     6306
IP address blocks:        179.20.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c4:48:67:a8:2e:16:1b:fc:79:c9:c4:05:68:8e:b7:5a:cd:2d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:36:56 2024 GMT
            Not After : Mar  4 17:41:56 2025 GMT
        Subject: CN=15BEE641585C2E7F4FE836B4B8BE224064ECB2EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:44:70:c7:e8:f0:fc:26:4f:c8:17:cc:9c:
                    a9:e1:2c:86:0d:ba:40:7b:7d:d8:a1:07:33:6d:7c:
                    4b:11:54:c5:df:f5:f8:03:c4:73:4f:fe:81:cd:10:
                    53:2e:3c:6b:03:88:ed:3b:99:ee:ae:d9:1e:b5:6d:
                    1f:c6:64:7a:ee:e4:97:c8:0a:d7:bd:41:34:36:b3:
                    5f:ab:b8:6d:f7:99:78:81:7d:4a:ee:25:c3:de:6c:
                    d4:6f:50:5a:96:1f:a4:2f:b0:58:dc:71:5c:20:14:
                    fd:ef:b4:0e:b5:5c:9f:4f:aa:ec:9a:ee:1e:a1:11:
                    94:2f:e7:5d:e6:4c:22:7e:f1:4e:17:15:44:f3:b0:
                    fe:ef:74:d7:ff:50:29:6c:74:c2:26:52:78:91:5a:
                    44:70:b1:0c:87:dc:15:a6:9c:9a:de:2b:24:10:d1:
                    be:c9:f1:01:2c:86:89:62:35:f5:18:74:45:3c:bf:
                    a1:a7:67:51:b7:03:50:7e:49:4b:01:3d:17:5d:cd:
                    34:d5:65:1e:ce:6e:d5:c0:17:dc:ed:4b:88:ae:1b:
                    b0:a7:92:a5:2d:77:5a:a6:a9:14:c0:84:bc:52:0c:
                    0e:08:b9:d9:a2:13:3f:ca:7a:f7:c0:22:17:d5:0a:
                    7a:fb:dd:b4:d9:4b:bb:94:5c:d3:c7:9e:4c:38:83:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BE:E6:41:58:5C:2E:7F:4F:E8:36:B4:B8:BE:22:40:64:EC:B2:EF
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3137392e32302e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.20.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:3b:a8:c9:90:29:cb:68:3e:a2:98:59:79:0c:c4:a8:0d:
         53:a8:e7:3d:27:26:74:70:be:e6:35:df:d1:df:07:88:67:ed:
         62:24:d4:47:f0:4e:59:60:09:6a:44:d7:fd:58:54:85:d5:f9:
         96:fe:68:91:b9:8a:b9:17:ea:73:8a:54:67:be:65:32:32:03:
         ea:a1:2d:a4:1d:63:db:ff:a1:00:ee:19:4e:dc:e5:d6:ca:48:
         95:7d:f0:88:58:e2:10:a3:59:33:c4:6f:f7:e2:ec:f2:ba:b9:
         13:63:b2:c5:e0:46:0d:f2:07:9c:84:fe:fb:5b:8e:32:7a:47:
         ec:2f:7f:7a:a9:ee:a5:37:33:5a:49:53:e1:c1:3d:13:3a:80:
         b1:19:b5:19:39:1d:f6:bd:a6:d8:ad:4d:02:09:49:7e:4b:37:
         ce:2f:fd:c1:28:08:c4:7b:94:07:2c:c4:25:b6:53:d0:b3:d5:
         47:9e:a1:50:a4:21:8d:3f:67:ca:90:4b:d0:03:a1:57:17:ba:
         05:81:0d:a1:d3:c7:f8:9c:33:dc:4d:4b:30:47:85:f2:3d:61:
         b4:1e:6f:35:1f:0e:41:e6:52:e6:a1:75:40:55:05:18:93:c8:
         88:80:6b:69:a7:a9:bd:be:dd:9c:ca:ca:19:98:23:7e:ab:bf:
         87:ce:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----