Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/3137302e3233312e3235302e302f32342d3234203d3e2033323537.roa
File:                     3137302e3233312e3235302e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier:          nV2J4A73Oj63AvRMOm0LvMEHrI1kzR931qGAHn498xI=
Subject key identifier:   BE:0D:EA:66:57:D0:9E:35:31:A9:74:07:07:D1:E8:43:5A:1D:DA:15
Certificate issuer:       /CN=139F22949A3A148A31827A973EA0FF67A3A095E8
Certificate serial:       7BC70AB8E514E4F5FCE76E0C9EAC8488AC06F26B
Authority key identifier: 13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/3137302e3233312e3235302e302f32342d3234203d3e2033323537.roa
Signing time:             Tue 04 Feb 2025 19:58:19 +0000
ROA not before:           Tue 04 Feb 2025 19:53:19 +0000
ROA not after:            Tue 03 Feb 2026 19:58:19 +0000
asID:                     3257
IP address blocks:        170.231.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c7:0a:b8:e5:14:e4:f5:fc:e7:6e:0c:9e:ac:84:88:ac:06:f2:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139F22949A3A148A31827A973EA0FF67A3A095E8
        Validity
            Not Before: Feb  4 19:53:19 2025 GMT
            Not After : Feb  3 19:58:19 2026 GMT
        Subject: CN=BE0DEA6657D09E3531A9740707D1E8435A1DDA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:86:8e:96:23:24:15:47:ab:c4:00:f4:89:
                    8f:8c:2f:c8:f1:bb:49:54:74:6d:a1:16:c0:fc:2c:
                    7e:c9:62:2d:d4:12:b6:83:16:eb:a7:ea:72:1e:34:
                    da:af:45:89:51:1a:0b:d5:dc:a1:83:4a:dc:41:b1:
                    10:2c:66:29:38:bd:58:78:4e:3b:bb:45:f7:b4:3e:
                    37:14:f2:33:19:03:f9:6e:3f:23:9c:83:59:36:16:
                    1a:ee:3b:a8:24:db:b9:c4:b9:78:36:7a:b5:2f:12:
                    78:83:47:c4:68:e6:83:12:de:28:9c:2c:2e:cb:21:
                    da:e9:f0:d7:27:42:26:b8:a0:96:3b:0f:15:97:f0:
                    94:a8:97:79:df:bd:9f:48:b7:e4:d2:fa:b4:c4:bd:
                    42:8c:2d:70:ae:f2:b1:df:f5:8a:a0:61:ad:67:37:
                    2f:d2:6d:12:f3:5f:96:f4:ee:11:76:62:55:9a:ff:
                    44:42:57:5b:43:04:e9:9c:1f:a7:0f:8e:8d:8a:8d:
                    0e:e5:a0:1b:94:56:7b:65:23:4a:ff:7d:47:2b:18:
                    a4:d5:7e:41:b8:fc:cf:49:ee:4b:60:45:39:c3:83:
                    84:64:88:39:39:29:14:27:f8:da:d7:37:96:15:60:
                    4a:6d:c1:00:5b:84:fc:a3:dd:b5:ca:f3:63:b5:a0:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0D:EA:66:57:D0:9E:35:31:A9:74:07:07:D1:E8:43:5A:1D:DA:15
            X509v3 Authority Key Identifier:
                keyid:13:9F:22:94:9A:3A:14:8A:31:82:7A:97:3E:A0:FF:67:A3:A0:95:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/139F22949A3A148A31827A973EA0FF67A3A095E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/139F22949A3A148A31827A973EA0FF67A3A095E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/07E69AF9A14E5B9738D2479D7B88732F71E255B77D7BD2CBD927126EB9322FA9/0/3137302e3233312e3235302e302f32342d3234203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:f0:e1:ff:2e:08:a4:e9:0b:df:76:8a:5e:ae:21:71:9a:
         7a:d9:14:1d:2e:1f:89:a6:10:d8:81:7c:2f:d9:18:a1:8e:67:
         13:a8:7b:d6:18:9f:11:71:60:72:b6:5d:e1:c4:cd:e6:71:c3:
         49:6d:10:4d:e2:c3:26:a6:86:b9:b8:a1:cb:06:6b:ed:58:17:
         6e:71:80:67:5f:c7:c9:18:1f:e6:8b:3a:75:7a:5f:dd:35:9d:
         ab:72:9e:f6:15:89:29:4f:7d:11:69:ff:95:20:a2:07:43:98:
         cd:6e:1b:98:24:86:8e:a5:e6:ad:43:49:95:c6:7f:d0:f6:48:
         1d:f1:4b:c1:57:47:50:63:4e:b4:a7:e8:79:21:7d:3a:67:d5:
         58:8a:73:fa:57:92:3f:94:55:26:7a:7d:70:1d:b0:ab:55:8e:
         08:70:ee:a1:4f:ea:f0:32:d3:23:4e:30:da:00:e5:70:78:b0:
         22:b1:6e:59:96:95:28:4f:a3:4e:5c:ee:b4:d2:3e:af:1e:53:
         2b:3f:5a:90:f5:02:c9:c1:ea:b2:dd:29:09:94:1b:40:c1:bd:
         4e:a2:69:86:c6:38:d7:9b:8c:b4:60:ac:8e:e6:65:8b:c0:c5:
         f1:03:01:63:f1:f0:6f:9a:c0:92:7a:ce:1b:ed:e0:77:88:c8:
         6a:3e:9c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:06 2025 by rpki-client