Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3137302e38332e31302e302f32332d3234203d3e20323632323432.roa
File:                     3137302e38332e31302e302f32332d3234203d3e20323632323432.roa (raw, json)
Hash identifier:          ANjhN/ReNRs0hHhStJxYmN/kgTlqYhRoOLhUCicyv8w=
Subject key identifier:   50:3C:E0:3B:11:E7:7A:AC:CB:11:A2:22:17:C4:D2:8D:B1:76:EF:F9
Certificate issuer:       /CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
Certificate serial:       38ED8C53C51B5CD5177DD6DAF5A89A701DC0DFA1
Authority key identifier: CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3137302e38332e31302e302f32332d3234203d3e20323632323432.roa
Signing time:             Tue 04 Feb 2025 18:35:41 +0000
ROA not before:           Tue 04 Feb 2025 18:30:41 +0000
ROA not after:            Tue 03 Feb 2026 18:35:41 +0000
asID:                     262242
IP address blocks:        170.83.10.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ed:8c:53:c5:1b:5c:d5:17:7d:d6:da:f5:a8:9a:70:1d:c0:df:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
        Validity
            Not Before: Feb  4 18:30:41 2025 GMT
            Not After : Feb  3 18:35:41 2026 GMT
        Subject: CN=503CE03B11E77AACCB11A22217C4D28DB176EFF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:e6:3a:82:35:e6:f1:f0:4a:90:cd:73:e3:
                    8d:3d:68:4e:c6:05:7f:6a:cc:a3:c4:31:d0:79:75:
                    36:02:06:cd:ae:ec:d8:de:54:e3:b8:ad:93:bd:e8:
                    8c:0a:d2:8d:10:27:7c:15:8b:13:00:24:ae:a6:be:
                    f6:ff:f4:d2:de:0b:25:11:87:21:9c:7f:a9:f3:d3:
                    8f:66:57:d4:ae:a8:a4:c6:b3:63:b8:09:ae:75:17:
                    6b:d2:91:1f:d5:dd:7b:25:70:bf:cb:98:5d:4e:1c:
                    ae:46:20:78:e1:67:f4:fe:2d:eb:e6:55:8f:71:f1:
                    7f:32:43:10:e2:92:46:30:94:0f:94:f2:2f:f4:4f:
                    b4:03:fb:47:0f:82:ae:c9:97:56:ae:c5:8b:b2:51:
                    ab:50:c0:0b:b2:13:7d:e5:91:33:a5:80:da:e1:6d:
                    9f:87:dc:86:b8:f3:80:46:0a:45:71:f4:19:ce:3c:
                    b8:dd:56:cb:40:c8:d8:54:a6:d6:4d:42:74:22:64:
                    4a:b7:cd:e8:8a:ca:74:37:f1:93:c9:bc:53:e7:4c:
                    d2:b6:e8:2e:29:c9:2c:da:16:fc:bd:9a:6a:fa:89:
                    89:2c:9f:e6:81:47:04:01:1e:de:0c:62:bd:61:84:
                    b9:b6:14:1a:55:18:a6:9d:e4:78:09:ad:7d:be:d9:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3C:E0:3B:11:E7:7A:AC:CB:11:A2:22:17:C4:D2:8D:B1:76:EF:F9
            X509v3 Authority Key Identifier:
                keyid:CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3137302e38332e31302e302f32332d3234203d3e20323632323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:f5:1b:30:09:74:4c:2c:3e:11:05:a6:ba:e6:a1:0e:ca:0f:
         6f:32:1d:72:43:24:c8:33:8c:ac:44:8d:6a:d0:12:b8:c7:76:
         26:28:f2:ab:b4:57:d7:ae:fc:f7:72:d6:50:09:05:de:b2:56:
         4c:6e:63:34:ad:52:25:29:69:83:c3:90:a6:4e:6a:2c:e5:d2:
         6e:9a:b8:c3:e0:f6:41:e5:9c:3b:6c:fe:a9:19:6a:ab:35:d6:
         5e:1f:72:4a:d4:ea:1e:c7:68:1c:72:6a:99:ce:e1:a2:6c:42:
         e6:c9:37:1f:bf:e5:02:d8:95:0b:c4:7a:79:b3:d0:1c:77:e1:
         b2:53:27:d4:6a:33:8f:f2:c4:2f:d3:7f:a1:1d:c4:86:d7:9d:
         a5:b0:8d:a9:d0:38:95:83:12:f3:5f:78:e7:e9:42:28:cf:25:
         ff:9d:ab:f1:d1:67:7e:6e:61:b7:54:08:6c:c6:36:ec:81:00:
         be:6b:d8:1f:6f:65:69:7a:7a:16:d3:ad:e9:37:5f:20:d3:09:
         86:04:ac:c5:5b:30:8c:e7:15:a0:d2:a9:8d:c7:8a:93:ad:3f:
         13:b4:2f:98:6c:32:e2:77:92:70:0a:30:cc:cd:33:db:31:f6:
         47:30:ec:ba:d9:2d:78:f8:70:8b:6d:06:a2:76:fb:61:81:12:
         13:67:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:44 2025 by rpki-client