Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e203136363239.roa
File:                     3137392e382e302e302f31352d3234203d3e203136363239.roa (raw, json)
Hash identifier:          mM3TdNt9oOMYG3Vo0m/aCJ5ObPkjLNJ/qtMLBotyeUw=
Subject key identifier:   3C:7D:7F:7A:22:AE:88:59:2E:91:77:68:1E:91:1B:D0:E6:11:5A:76
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       53C8E542641FAFF97B375A1A9EEC28E2FAC82D94
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:17 +0000
ROA not before:           Tue 05 Mar 2024 17:47:17 +0000
ROA not after:            Tue 04 Mar 2025 17:52:17 +0000
asID:                     16629
IP address blocks:        179.8.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c8:e5:42:64:1f:af:f9:7b:37:5a:1a:9e:ec:28:e2:fa:c8:2d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:17 2024 GMT
            Not After : Mar  4 17:52:17 2025 GMT
        Subject: CN=3C7D7F7A22AE88592E9177681E911BD0E6115A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:42:eb:31:dd:d1:94:a8:71:ef:7e:13:fe:
                    5a:ee:2b:02:32:ba:86:93:a8:ba:1d:5f:73:53:2b:
                    e6:2a:b7:be:ea:fc:3d:2e:a8:f4:7c:2e:dc:91:cd:
                    af:06:69:38:f9:9b:98:41:98:46:88:a2:8a:c5:2e:
                    59:6d:f3:89:61:91:d5:db:f9:90:df:05:eb:ed:55:
                    4a:89:bb:16:a7:de:7e:a9:ee:ef:83:ef:0d:00:2e:
                    4d:1e:f9:07:43:b1:4d:c3:90:77:1c:ed:c8:c0:27:
                    5b:b7:97:e1:32:9a:6c:3e:07:ec:dc:fb:25:7a:48:
                    fa:55:a9:9d:14:89:62:74:00:e3:0a:80:8c:df:a6:
                    80:2a:78:d4:b9:07:2b:f7:b4:7f:5b:f9:71:fd:48:
                    bd:06:aa:94:bd:cb:b8:04:16:c0:75:89:02:9c:93:
                    e9:19:fa:e4:a2:21:f9:c4:24:d2:8a:57:df:ea:a1:
                    8c:9f:10:2b:b7:76:8c:4d:72:47:ec:5e:43:09:7f:
                    5d:16:b5:dc:24:09:47:5f:e0:6c:81:54:fa:cb:4a:
                    31:d9:d7:95:a0:45:16:78:0b:47:8d:63:0a:bd:1a:
                    0a:0b:c6:89:3d:95:20:44:b2:7b:f5:b6:17:0c:5b:
                    4f:55:3d:46:fa:69:c5:09:e6:21:8f:9b:bb:21:96:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:7F:7A:22:AE:88:59:2E:91:77:68:1E:91:1B:D0:E6:11:5A:76
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3137392e382e302e302f31352d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         90:6d:fc:fc:bc:4c:fc:45:a8:8c:15:74:f0:ec:70:61:0c:22:
         66:9f:9c:cf:57:41:12:3c:4d:69:24:47:b1:5f:3f:78:18:a6:
         70:d9:62:7f:b5:11:53:7d:e2:bb:d5:b8:94:77:4c:be:6b:59:
         e9:e3:22:47:1c:38:ec:3d:1f:85:f5:91:cf:fd:f0:25:a8:17:
         18:1e:df:95:f4:94:9e:cd:37:9e:bd:29:8a:8a:e8:1f:0b:8b:
         5b:c2:5d:7d:27:94:24:60:26:64:a4:fb:bf:0e:d1:57:da:43:
         15:88:91:e3:d7:2a:64:f2:20:0b:95:e1:76:57:5f:42:0b:aa:
         7f:e4:80:69:19:56:27:df:af:7a:a2:78:98:9b:94:0a:a2:bf:
         83:fa:e7:a0:05:95:48:09:4e:2b:a7:8d:f2:41:62:2c:24:b2:
         7b:b5:73:59:3a:2c:33:5b:76:1d:2b:38:28:74:8e:c8:75:2b:
         f4:65:01:90:20:5f:37:13:ca:e4:df:ea:7f:6e:b8:80:55:e9:
         2a:ff:3d:93:fb:da:cf:da:24:0d:b6:4b:6b:58:5f:3a:57:fa:
         65:50:8c:e1:f1:b6:cc:de:60:be:be:1f:d3:2d:77:e7:8a:08:
         06:d8:07:17:05:d9:b4:35:13:ca:c9:73:c7:04:66:61:a4:9a:
         c1:ec:17:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----