Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e3233392e3136342e302f32322d3232203d3e20323634373530.roa
File:                     3137302e3233392e3136342e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          ec6CXmi/wXZeHtE4D5dZY/ObEPD/Z1sWEsreUan7ZxA=
Subject key identifier:   32:73:45:03:CB:79:05:BC:65:37:50:0A:1E:EB:41:2C:46:64:F9:7F
Certificate issuer:       /CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
Certificate serial:       04FC0087C1B8F2325D357A4D6802626E63450E49
Authority key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e3233392e3136342e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 04 Feb 2025 18:09:24 +0000
ROA not before:           Tue 04 Feb 2025 18:04:24 +0000
ROA not after:            Tue 03 Feb 2026 18:09:24 +0000
asID:                     264750
IP address blocks:        170.239.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:fc:00:87:c1:b8:f2:32:5d:35:7a:4d:68:02:62:6e:63:45:0e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463
        Validity
            Not Before: Feb  4 18:04:24 2025 GMT
            Not After : Feb  3 18:09:24 2026 GMT
        Subject: CN=32734503CB7905BC6537500A1EEB412C4664F97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a7:0c:34:0a:e4:df:87:20:23:41:0e:f8:c6:
                    40:79:85:dc:37:50:a8:a0:7c:48:c8:58:3f:85:41:
                    fd:df:8c:2f:8a:53:16:1b:8d:81:26:7e:0e:3d:25:
                    a6:2e:b8:c1:b7:e1:c7:85:b9:44:e4:2f:9f:07:5f:
                    25:9a:c0:b4:d5:39:da:5e:92:71:6e:9a:d6:0b:ea:
                    2e:4f:46:5b:3d:9f:1f:3a:1c:0e:7e:51:1d:2d:7f:
                    fa:9e:6f:97:e2:23:f4:f4:af:f1:f4:7a:13:40:be:
                    7a:dd:8e:5c:23:19:6d:8b:3a:dd:31:11:ec:47:d3:
                    f9:3a:0c:ea:cf:5d:af:9b:3a:fa:f8:b4:f1:61:57:
                    39:e9:95:1b:b2:90:07:93:c9:9d:a7:4f:20:e6:01:
                    3c:7b:b8:e9:47:1c:a5:9e:c2:70:0e:ab:e2:64:a1:
                    cb:0c:60:46:97:d7:34:ae:34:28:55:c1:53:24:5c:
                    1a:f2:b8:02:20:2b:53:88:a5:b8:c7:58:64:71:8b:
                    94:ee:75:41:1e:90:0c:c1:fa:2e:25:ba:90:7e:3d:
                    20:3a:e0:d6:1e:c2:be:01:60:ab:c5:bf:bf:25:43:
                    46:84:f9:6f:20:1c:5f:8d:1a:3b:e4:d3:b2:86:aa:
                    e7:65:47:78:f6:a5:43:22:ce:da:04:52:c8:b5:2f:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:73:45:03:CB:79:05:BC:65:37:50:0A:1E:EB:41:2C:46:64:F9:7F
            X509v3 Authority Key Identifier:
                keyid:0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/3137302e3233392e3136342e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:fe:89:69:45:4f:c8:01:77:b3:ed:a6:73:12:38:41:05:
         bf:6a:fe:4f:90:ec:b9:b9:a5:2a:a4:89:a0:c4:fc:6b:de:aa:
         09:c8:ae:a5:84:39:15:14:2c:88:aa:23:f6:3b:01:02:6d:d2:
         c5:77:f4:76:02:02:29:b7:b2:d7:55:fb:93:8d:21:6e:8e:16:
         cd:25:ca:d3:31:20:6a:02:8b:a8:af:5f:47:70:9a:67:83:4d:
         d0:ec:8f:4f:5c:70:6a:87:da:f9:0e:ec:61:f5:33:46:3b:dc:
         93:88:90:e6:df:5f:c0:e2:78:39:76:4e:38:38:d1:b1:33:63:
         34:62:6f:cb:2f:7d:bf:85:f3:a8:5f:6c:08:1c:e4:d5:c6:9c:
         eb:85:f1:c3:67:1a:e6:9f:ba:40:c6:2f:3e:d0:31:04:31:f1:
         90:c4:3b:cd:af:ee:02:72:a1:ad:56:43:b5:34:ed:64:66:5e:
         7d:8a:1b:5c:bf:25:81:37:60:42:cb:0a:43:af:32:43:e4:ac:
         04:fe:a4:61:39:33:e2:79:dc:73:f9:e6:1e:35:66:78:ec:91:
         95:12:c0:d8:60:1f:88:0d:20:19:b9:ee:69:c1:f4:48:ec:1f:
         df:26:19:05:6e:c4:6a:e5:5d:f8:33:ce:19:34:00:85:80:e9:
         92:21:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:28 2025 by rpki-client