Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
File:                     3137302e38312e3139382e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          09+RcvsCEUY3H1ml1APMuKAlwMDn5Y/X6AUHqSpnCik=
Subject key identifier:   9D:1E:E2:26:93:4A:7A:92:3B:96:9F:79:B5:9F:7D:CC:B8:94:13:9F
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       050A48FBE117ADD0D82FEC787DD06856EC49242D
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
Signing time:             Tue 04 Feb 2025 18:13:53 +0000
ROA not before:           Tue 04 Feb 2025 18:08:53 +0000
ROA not after:            Tue 03 Feb 2026 18:13:53 +0000
asID:                     6461
IP address blocks:        170.81.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0a:48:fb:e1:17:ad:d0:d8:2f:ec:78:7d:d0:68:56:ec:49:24:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Feb  4 18:08:53 2025 GMT
            Not After : Feb  3 18:13:53 2026 GMT
        Subject: CN=9D1EE226934A7A923B969F79B59F7DCCB894139F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:55:6d:b2:77:19:fd:ee:b4:d7:84:22:20:
                    b4:41:f6:9b:be:2f:b5:9e:5c:70:82:59:88:17:71:
                    22:14:c1:af:f9:d9:ea:e0:3e:b9:df:ee:ac:03:35:
                    c2:66:9f:1e:8a:a2:23:4c:b9:7d:8f:88:82:e5:74:
                    37:b4:e3:3a:82:aa:a1:38:8b:d4:7d:0a:80:0d:82:
                    f9:f8:d4:ce:3d:72:f5:0f:46:2c:c5:18:05:e0:de:
                    8f:f2:38:d9:d3:6d:26:26:a5:eb:6f:4e:82:4a:7d:
                    04:29:60:8d:32:5c:8e:b4:d7:b4:93:b0:b5:6b:8e:
                    9d:8a:f2:b9:2b:01:e4:81:de:86:d9:c4:26:73:00:
                    3b:60:40:d8:5f:f4:81:7b:10:4c:20:13:de:6a:1e:
                    4d:ed:21:60:9f:2e:cc:b2:11:80:c5:4c:65:6c:33:
                    02:0e:b2:d2:aa:17:17:79:81:0a:7b:dc:14:a2:df:
                    65:b0:99:59:ce:41:d4:a0:62:09:ea:b6:e4:c8:a7:
                    27:1d:f7:d3:20:72:18:97:9a:ca:be:94:81:86:26:
                    d8:b9:93:f2:a1:cd:23:de:25:13:cf:51:ce:17:9e:
                    83:00:8a:de:38:09:fa:bd:4d:39:d6:de:b8:7e:de:
                    ce:d0:41:26:ae:ff:38:7d:ca:3d:11:62:0b:90:42:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1E:E2:26:93:4A:7A:92:3B:96:9F:79:B5:9F:7D:CC:B8:94:13:9F
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:77:dd:2b:95:7f:67:15:38:45:c9:82:37:65:f7:52:e1:ef:
         fe:dc:d5:94:e7:83:22:09:33:08:fb:d5:3c:dd:df:19:a5:e9:
         50:77:e7:b4:5b:ce:a9:b4:87:a8:9b:5b:02:e5:2d:8e:ee:3a:
         ac:e2:62:24:5b:7d:b9:58:69:35:94:3a:92:71:57:f6:2c:94:
         b6:43:d1:23:e4:86:aa:0b:2a:dc:b5:32:c9:cd:9a:84:e7:2c:
         34:85:fc:f3:d1:48:89:71:77:4a:2a:f9:dc:37:54:49:81:14:
         dc:7b:3c:22:0f:58:bd:81:22:ef:fb:94:f9:b3:ae:f5:b2:67:
         57:ae:8a:78:4c:3e:1f:db:d1:f6:c5:e1:d2:72:a6:5a:5e:b8:
         47:5a:2d:34:45:da:ee:11:fd:41:8c:bd:95:11:64:7b:c6:96:
         3d:dd:f3:ba:35:32:46:8e:bc:99:fc:a2:67:52:04:5e:63:37:
         d4:7e:1d:1e:20:cc:15:35:2e:70:5d:9c:1c:a8:fc:70:39:c0:
         db:db:df:f2:4d:06:40:50:4c:25:be:a7:f4:0b:9f:8f:96:3e:
         57:25:5e:e2:b9:3a:a6:8f:03:d9:f0:30:7e:c9:88:8d:47:96:
         95:a3:b1:af:08:83:6e:8f:b2:6a:6d:cb:2e:63:b6:57:54:48:
         ad:f8:00:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:09:55 2025 by rpki-client