Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32322d3234203d3e20323634373032.roa
File:                     3137302e302e38342e302f32322d3234203d3e20323634373032.roa (raw, json)
Hash identifier:          v6IfzHMrSvPbOREtSXnSbC/cRX4pQqSnptxd7/f/tSw=
Subject key identifier:   D0:9F:BF:C0:8B:B4:7E:B3:AF:68:BD:29:05:54:1B:B3:34:B2:A3:D8
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       3C9BF56895EF7BB412B1373FE638E6E90FB20467
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32322d3234203d3e20323634373032.roa
Signing time:             Tue 04 Feb 2025 18:12:35 +0000
ROA not before:           Tue 04 Feb 2025 18:07:35 +0000
ROA not after:            Tue 03 Feb 2026 18:12:35 +0000
asID:                     264702
IP address blocks:        170.0.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9b:f5:68:95:ef:7b:b4:12:b1:37:3f:e6:38:e6:e9:0f:b2:04:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Feb  4 18:07:35 2025 GMT
            Not After : Feb  3 18:12:35 2026 GMT
        Subject: CN=D09FBFC08BB47EB3AF68BD2905541BB334B2A3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:14:c8:56:23:b3:6d:1c:99:cd:b1:80:64:
                    dd:bf:2f:f0:ac:2c:17:b0:eb:3a:aa:20:a6:96:2b:
                    06:df:be:4a:34:39:62:f9:82:ab:d5:ff:1e:1f:99:
                    d6:79:9e:b2:28:13:40:9e:68:8c:4d:86:8e:90:31:
                    b0:a6:21:6c:4c:20:4a:39:71:8f:2e:f9:9e:3f:15:
                    63:36:76:e8:5d:ef:32:da:e9:8a:75:75:97:86:0a:
                    58:d4:e9:b9:be:94:6b:fa:53:b2:0f:86:6c:9d:92:
                    42:38:92:31:24:23:d4:9f:fe:2c:5b:41:dc:5d:09:
                    3d:2b:e9:3d:21:e3:18:62:a4:d1:fc:f6:a4:05:6c:
                    c5:3a:e7:38:0c:96:14:ab:69:3c:f3:4c:09:c0:14:
                    45:c6:7a:b0:8a:21:14:ab:4f:45:4e:5e:2f:f2:bc:
                    b9:c7:5b:3f:cb:8f:87:2d:25:2d:fa:f8:7a:16:4a:
                    cc:74:2b:cf:c6:64:f1:0f:d1:dc:ac:ec:6b:60:81:
                    7a:2b:d6:c0:09:da:04:9f:45:0e:a1:5e:5b:01:50:
                    ae:b9:55:5f:c4:86:75:b8:95:75:d5:09:d1:21:e0:
                    a3:e4:c6:f6:64:d4:8b:54:58:ed:a9:75:da:65:e5:
                    de:88:47:ae:2b:29:ad:5a:73:42:66:ed:2c:51:bd:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:BF:C0:8B:B4:7E:B3:AF:68:BD:29:05:54:1B:B3:34:B2:A3:D8
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32322d3234203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:4c:e6:14:45:31:2d:7b:13:c3:0f:88:19:53:75:35:1b:
         00:5d:1c:4b:cf:75:21:16:07:45:51:a9:e1:77:26:56:5b:32:
         20:56:58:22:d4:4e:ed:c6:d3:a9:b9:b1:7d:9e:ed:6c:88:a8:
         f0:75:a5:f6:b5:9e:8b:ae:ed:37:81:de:6b:bb:0d:3e:bd:c6:
         3b:84:a3:04:7d:1d:21:81:c6:f3:77:f9:ee:1e:c7:fd:3d:74:
         3e:2f:a8:57:14:8a:8e:5c:d8:42:c1:0f:f2:91:da:d5:ab:9e:
         b2:84:ca:f0:f9:90:a4:49:ec:58:b7:28:e7:14:62:77:3d:d0:
         28:87:8b:ec:08:ce:14:0a:c5:14:7f:f7:5c:34:ae:97:59:00:
         6a:59:55:71:59:9a:9b:6d:3c:f5:04:52:a7:e2:69:3e:0f:7e:
         13:63:72:47:f1:41:cf:71:85:34:8a:85:27:9a:f3:83:f7:c7:
         de:9f:bf:dd:d9:cf:63:fe:b3:9d:f9:c3:3c:b1:0a:ce:14:f6:
         1e:ad:8a:30:25:e5:83:7b:b5:8e:65:1b:a2:01:5a:df:04:5b:
         a6:32:87:7a:5c:d0:56:6c:73:ba:be:aa:49:4b:d1:c9:48:42:
         29:f7:6e:ee:dc:1b:ff:a4:13:d3:c5:23:02:5d:63:05:7b:9f:
         61:23:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:01 2025 by rpki-client