Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3137302e3234342e35362e302f32322d3234203d3e20323633363834.roa
File:                     3137302e3234342e35362e302f32322d3234203d3e20323633363834.roa (raw, json)
Hash identifier:          x5F+lR2FYJexuH03v+t8xEBaxybEKOGMufj+qLE1ugE=
Subject key identifier:   79:20:33:92:4A:80:92:9C:28:95:AF:4B:6E:D0:AC:4B:C2:29:73:F5
Certificate issuer:       /CN=B610C094D1EAED0BBD5D9529079557E5356CB598
Certificate serial:       4938E578A0C639DC818597E73F79089E8DAB8754
Authority key identifier: B6:10:C0:94:D1:EA:ED:0B:BD:5D:95:29:07:95:57:E5:35:6C:B5:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3137302e3234342e35362e302f32322d3234203d3e20323633363834.roa
Signing time:             Tue 04 Feb 2025 18:16:00 +0000
ROA not before:           Tue 04 Feb 2025 18:11:00 +0000
ROA not after:            Tue 03 Feb 2026 18:16:00 +0000
asID:                     263684
IP address blocks:        170.244.56.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:38:e5:78:a0:c6:39:dc:81:85:97:e7:3f:79:08:9e:8d:ab:87:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B610C094D1EAED0BBD5D9529079557E5356CB598
        Validity
            Not Before: Feb  4 18:11:00 2025 GMT
            Not After : Feb  3 18:16:00 2026 GMT
        Subject: CN=792033924A80929C2895AF4B6ED0AC4BC22973F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:ef:5b:7e:7c:cc:5b:30:2c:ac:fb:00:d7:
                    db:48:d3:9b:90:98:bb:0b:88:e4:7e:b5:67:46:15:
                    82:ec:62:58:06:17:27:27:49:9c:20:05:43:a0:51:
                    a3:86:98:86:76:e8:c9:4b:76:cf:a1:d9:ba:c9:fb:
                    ab:eb:75:62:c2:77:db:44:68:cb:df:71:0a:eb:91:
                    d8:4c:66:3d:9e:6b:46:92:54:2a:61:b9:7c:51:6c:
                    01:47:3f:78:2c:f9:06:3b:10:ff:10:12:23:78:c7:
                    3a:da:f3:58:f7:9a:27:76:cc:b7:8b:ae:c4:eb:4d:
                    63:d6:28:80:07:7a:f0:14:66:cb:7f:55:e6:0f:cd:
                    90:80:8f:a5:1a:b4:d8:31:68:af:3c:d0:5a:d1:70:
                    8a:5c:89:d9:c1:84:c6:80:8d:f5:82:ee:df:0f:18:
                    f0:68:9c:7e:bb:dd:ad:56:c2:f8:7d:cc:36:1b:01:
                    94:9b:d1:a7:81:35:41:84:18:f2:64:7e:6d:6e:aa:
                    6f:6e:29:e3:3c:98:d5:b1:fb:4b:02:9d:5d:22:00:
                    5f:6a:b0:c3:05:fc:8c:bb:55:ed:f2:35:e1:e3:f5:
                    48:85:3b:0c:65:db:67:9f:a1:72:a1:f7:e2:22:47:
                    85:21:e9:f4:40:4c:75:8a:a8:5c:6b:b2:da:7e:4a:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:20:33:92:4A:80:92:9C:28:95:AF:4B:6E:D0:AC:4B:C2:29:73:F5
            X509v3 Authority Key Identifier:
                keyid:B6:10:C0:94:D1:EA:ED:0B:BD:5D:95:29:07:95:57:E5:35:6C:B5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/B610C094D1EAED0BBD5D9529079557E5356CB598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B610C094D1EAED0BBD5D9529079557E5356CB598.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08F01151BB349ED1C42CF9EBBF5D1EA21868D296EDCFEB82E1526149DD792237/0/3137302e3234342e35362e302f32322d3234203d3e20323633363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:1a:bb:e6:d2:14:b5:c9:c4:bf:9c:86:4d:3c:78:71:2a:
         30:67:53:04:f6:77:e2:9d:ca:7f:8d:dc:5b:8a:9b:69:5c:74:
         da:56:7c:78:9f:6f:f9:e6:14:34:6b:1a:45:6a:2d:56:a7:b6:
         8a:ce:e9:32:2e:11:4e:cf:94:a3:1a:fe:7f:62:3a:66:76:3f:
         2c:3d:d9:83:c0:74:ed:8a:0a:51:94:09:44:5a:d1:e5:fd:ff:
         a4:de:4e:93:62:cc:ce:79:89:f5:fa:10:41:65:65:07:f6:55:
         69:d8:a9:6f:a4:a8:88:df:35:45:44:82:e6:05:f9:67:e4:0c:
         55:82:a2:e9:7a:a0:64:50:3d:de:10:57:b8:c7:58:67:a0:41:
         27:ab:eb:8b:fc:b4:26:79:26:fb:b6:0b:ef:37:7d:51:d6:cf:
         86:9b:4c:98:90:7b:87:b2:60:9a:ef:66:bc:f7:a6:d5:ce:3e:
         a6:ac:b4:c5:48:be:dd:d3:9b:fa:4d:16:57:68:31:ba:f5:e8:
         ba:2e:72:32:41:aa:1d:e0:98:2a:c1:ac:bd:10:27:77:d1:10:
         eb:03:87:84:fb:1e:60:69:9b:17:bf:cf:a9:23:9e:b8:1c:05:
         13:42:f6:91:f7:bd:50:5c:60:da:60:96:de:d8:40:c7:b0:6b:
         4f:05:9c:34
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUSTjleKDGOdyBhZfnP3kIno2rh1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxMEMwOTREMUVBRUQwQkJENUQ5NTI5MDc5NTU3RTUz
NTZDQjU5ODAeFw0yNTAyMDQxODExMDBaFw0yNjAyMDMxODE2MDBaMDMxMTAvBgNV
BAMTKDc5MjAzMzkyNEE4MDkyOUMyODk1QUY0QjZFRDBBQzRCQzIyOTczRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpeu9bfnzMWzAsrPsA19tI05uQ
mLsLiOR+tWdGFYLsYlgGFycnSZwgBUOgUaOGmIZ26MlLds+h2brJ+6vrdWLCd9tE
aMvfcQrrkdhMZj2ea0aSVCphuXxRbAFHP3gs+QY7EP8QEiN4xzra81j3mid2zLeL
rsTrTWPWKIAHevAUZst/VeYPzZCAj6UatNgxaK880FrRcIpcidnBhMaAjfWC7t8P
GPBonH673a1Wwvh9zDYbAZSb0aeBNUGEGPJkfm1uqm9uKeM8mNWx+0sCnV0iAF9q
sMMF/Iy7Ve3yNeHj9UiFOwxl22efoXKh9+IiR4Uh6fRATHWKqFxrstp+SqbvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUeSAzkkqAkpwola9LbtCsS8Ipc/UwHwYDVR0j
BBgwFoAUthDAlNHq7Qu9XZUpB5VX5TVstZgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEYwMTE1MUJCMzQ5RUQxQzQyQ0Y5RUJCRjVEMUVBMjE4
NjhEMjk2RURDRkVCODJFMTUyNjE0OURENzkyMjM3LzAvQjYxMEMwOTREMUVBRUQw
QkJENUQ5NTI5MDc5NTU3RTUzNTZDQjU5OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjEwQzA5NEQxRUFFRDBCQkQ1
RDk1MjkwNzk1NTdFNTM1NkNCNTk4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhGMDExNTFCQjM0OUVEMUM0MkNGOUVCQkY1RDFFQTIxODY4RDI5NkVE
Q0ZFQjgyRTE1MjYxNDlERDc5MjIzNy8wLzMxMzczMDJlMzIzNDM0MmUzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqvQ4
MA0GCSqGSIb3DQEBCwUAA4IBAQBitBq75tIUtcnEv5yGTTx4cSowZ1ME9nfincp/
jdxbiptpXHTaVnx4n2/55hQ0axpFai1Wp7aKzukyLhFOz5SjGv5/Yjpmdj8sPdmD
wHTtigpRlAlEWtHl/f+k3k6TYszOeYn1+hBBZWUH9lVp2KlvpKiI3zVFRILmBfln
5AxVgqLpeqBkUD3eEFe4x1hnoEEnq+uL/LQmeSb7tgvvN31R1s+Gm0yYkHuHsmCa
72a896bVzj6mrLTFSL7d05v6TRZXaDG69ei6LnIyQaod4Jgqway9ECd30RDrA4eE
+x5gaZsXv8+pI564HAUTQvaR971QXGDaYJbe2EDHsGtPBZw0
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:26 2025 by rpki-client