Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137302e3234342e3134342e302f32322d3232203d3e20323633383231.roa
File:                     3137302e3234342e3134342e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier:          ekLv+vpR4oubX8wM7x/LV745b8rrPse0hI44a/Rq5EI=
Subject key identifier:   76:95:6B:86:3F:E0:AB:2D:C4:B1:29:B5:FB:79:50:35:4C:9F:F6:5D
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       147C855F8224278C04E512BABA30684E2D51E691
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137302e3234342e3134342e302f32322d3232203d3e20323633383231.roa
Signing time:             Tue 04 Feb 2025 18:39:17 +0000
ROA not before:           Tue 04 Feb 2025 18:34:17 +0000
ROA not after:            Tue 03 Feb 2026 18:39:17 +0000
asID:                     263821
IP address blocks:        170.244.144.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7c:85:5f:82:24:27:8c:04:e5:12:ba:ba:30:68:4e:2d:51:e6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Feb  4 18:34:17 2025 GMT
            Not After : Feb  3 18:39:17 2026 GMT
        Subject: CN=76956B863FE0AB2DC4B129B5FB7950354C9FF65D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:5d:3c:9b:ee:2a:57:82:39:a6:62:5e:7a:
                    a7:3b:19:98:e9:07:1f:c3:8c:90:a1:f4:72:43:85:
                    32:c4:8f:16:82:04:e3:ea:0e:66:3e:52:46:da:ce:
                    a5:ce:2c:2c:e9:86:82:ac:fc:32:4d:cb:7f:08:b8:
                    51:db:00:77:5a:6f:6d:5a:d7:06:e2:8f:d6:01:b4:
                    d5:98:80:0c:12:a1:18:5f:4f:d2:2c:53:3e:83:37:
                    e3:2e:24:c1:85:93:a2:c6:da:41:e6:69:28:ed:05:
                    92:93:c4:31:8b:58:82:0c:f3:b5:e3:b1:a0:93:bb:
                    dd:34:eb:1e:13:73:2d:c9:ce:3d:f4:94:1f:a3:7c:
                    0d:99:d8:18:52:e6:9e:3b:67:2d:b7:df:58:15:76:
                    91:15:37:90:04:00:22:71:7a:32:5d:93:70:8f:88:
                    70:be:d2:b1:0e:82:5a:20:77:58:cd:56:94:95:5e:
                    8b:d4:6a:e0:8d:02:74:ae:8c:da:96:65:76:4f:6e:
                    8e:2b:24:6a:65:87:8d:d5:12:f2:68:f0:34:5f:f9:
                    51:ae:4c:4f:73:a8:4c:d3:6c:75:4e:1a:5c:bb:0b:
                    d3:e1:4f:42:81:7a:51:5b:51:ad:ef:c9:86:89:fe:
                    b3:90:2a:14:37:83:2a:e5:67:84:01:30:a9:9a:57:
                    9a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:95:6B:86:3F:E0:AB:2D:C4:B1:29:B5:FB:79:50:35:4C:9F:F6:5D
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3137302e3234342e3134342e302f32322d3232203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:1d:55:55:5c:c8:3c:1b:67:2e:a2:ea:25:ee:97:92:2c:
         90:49:82:26:08:c6:c0:5e:87:f1:70:47:fb:f6:6a:70:e9:f6:
         cc:d8:de:d3:e4:7f:b4:a9:e9:8a:a8:47:2c:da:21:11:c4:93:
         f7:bf:0b:09:77:3e:62:0c:18:f3:c9:4f:19:b0:61:f1:48:6a:
         2a:2d:7e:a2:8f:a6:67:f8:53:15:ec:1f:81:69:ba:b1:38:39:
         81:05:ea:d0:75:c8:90:8e:38:b6:8a:af:98:8c:3f:1d:75:4a:
         58:4f:c9:dd:aa:3d:d4:2c:04:15:7e:61:c5:bb:d2:01:86:c7:
         f3:3d:03:ad:0d:f7:12:05:7d:70:4b:33:d9:51:5b:a6:3b:ac:
         f2:bc:25:b1:ba:04:a4:24:d9:5b:24:9b:ef:0f:aa:53:be:3b:
         65:f1:b2:21:12:15:84:25:62:a4:f7:6c:9c:aa:15:69:4e:de:
         74:92:a7:50:35:3a:10:77:35:35:18:62:a4:6a:62:96:c8:17:
         dc:0d:a9:90:04:ef:dc:f8:cd:38:90:9b:03:7b:5b:c8:df:86:
         58:8d:70:4f:32:42:8a:76:74:22:6c:99:b4:34:2f:c6:9f:c5:
         13:ab:23:57:1e:30:43:44:fe:65:c4:3e:ac:3b:9a:02:51:eb:
         40:71:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:15 2025 by rpki-client