Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203237393437.roa
File:                     3137302e38332e3231362e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          K3Bmn3u4iMFezN9w6C1SnmZB71U6qZxo+pXxmNRLH8A=
Subject key identifier:   47:93:B4:CA:79:F8:DA:C0:00:AF:DF:7F:51:D7:00:A3:8D:DD:6A:A8
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       0BF18FDA31A40E4477126A2FE36DB57D2EDC1DCD
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 18:16:45 +0000
ROA not before:           Tue 04 Feb 2025 18:11:45 +0000
ROA not after:            Tue 03 Feb 2026 18:16:45 +0000
asID:                     27947
IP address blocks:        170.83.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f1:8f:da:31:a4:0e:44:77:12:6a:2f:e3:6d:b5:7d:2e:dc:1d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:45 2025 GMT
            Not After : Feb  3 18:16:45 2026 GMT
        Subject: CN=4793B4CA79F8DAC000AFDF7F51D700A38DDD6AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a5:20:f4:60:99:6e:2f:ad:5b:a5:19:a1:83:
                    63:68:1c:da:67:8f:84:e6:25:89:09:5a:d4:df:84:
                    10:7b:95:2d:35:52:0a:de:1c:52:b1:f4:8c:03:ad:
                    6f:f7:b8:a7:47:72:8b:cf:36:70:18:66:7d:b7:33:
                    6e:75:60:93:4f:5a:cd:7f:2c:e2:64:08:61:38:6e:
                    cf:4b:57:dd:82:09:da:f8:59:f5:40:c0:7b:8e:58:
                    1d:50:7a:a1:4c:a9:b6:61:a6:87:29:ff:cd:0d:fe:
                    ae:a9:0d:c5:8e:9e:c2:22:2e:17:b1:b7:4b:51:9f:
                    1f:a1:42:41:db:ba:59:1a:ee:cc:44:a2:d7:6a:fc:
                    29:a7:07:12:85:ba:91:a2:ae:61:cd:3f:9c:ac:f9:
                    fc:17:e6:d6:dc:eb:36:56:31:bc:bc:28:06:4c:09:
                    63:ae:a4:8f:28:04:74:45:41:be:12:83:81:23:f0:
                    eb:0b:46:5c:0d:94:e9:0b:db:62:2d:a6:47:24:da:
                    b3:40:04:72:96:9d:f1:de:21:76:8e:d8:e7:cb:b3:
                    89:d9:03:d6:40:a8:1a:d7:2e:a2:5d:d8:17:00:e0:
                    1d:56:61:f7:3f:12:6a:8b:85:8f:03:93:67:21:66:
                    2a:b8:37:69:d8:ec:b4:19:47:40:f8:8d:f7:bc:3f:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:93:B4:CA:79:F8:DA:C0:00:AF:DF:7F:51:D7:00:A3:8D:DD:6A:A8
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:86:bc:86:01:f8:54:e0:70:76:f2:9a:f3:64:04:16:eb:7f:
         6c:34:3f:c7:c2:02:ae:e2:67:1c:30:44:50:20:dc:e1:6a:58:
         ae:7a:27:8e:9c:5b:fb:97:6c:a1:d4:67:d4:b5:10:21:ae:d2:
         85:cc:e8:57:aa:67:c6:e2:cc:10:44:ff:74:5d:39:e5:c7:b5:
         e6:c8:26:48:bb:e9:fd:ee:b9:d3:f1:d5:08:af:f3:c7:45:29:
         3b:bc:71:0e:de:7d:dd:c8:7c:3f:e4:43:d5:4e:9e:c1:c7:e1:
         fa:ac:e7:fb:2c:f8:60:c8:e3:32:f6:b6:69:a8:96:09:a9:db:
         36:82:fc:e3:39:14:55:6a:94:9d:94:3a:06:ef:e7:25:c6:28:
         d3:51:ce:dc:55:c6:56:a9:5c:78:c2:a2:90:f8:36:51:97:a5:
         44:aa:5e:a9:5c:02:01:d3:01:63:5f:ab:20:44:11:e5:61:ba:
         db:10:a8:e8:eb:78:52:c4:ce:bf:f9:3d:a3:6e:09:7f:14:76:
         ef:46:1e:50:e4:03:f2:4d:a3:d8:6b:ef:7a:86:12:29:41:75:
         00:f8:3d:be:6a:47:12:be:dc:62:4b:6b:c1:c4:73:d9:b9:0e:
         ce:d1:80:d4:1d:9a:a6:d7:e8:db:0d:11:5b:a9:30:2b:02:4b:
         6e:48:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client