Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/3137302e37392e3138302e302f32322d3234203d3e20323634383030.roa
File:                     3137302e37392e3138302e302f32322d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          tRO8alSO9zPXkFuv4hV/HBmBMJBzdtYKD1XuHEMhB4s=
Subject key identifier:   54:58:2D:6D:CC:A3:0B:A2:E6:96:B2:B2:EC:C9:E3:A9:2B:D2:1A:A6
Certificate issuer:       /CN=73105CE27FB18C38E17C61063229FF66A2F65190
Certificate serial:       27421E867ECE9BD8C763EEDDAEE5F18C23F3D40E
Authority key identifier: 73:10:5C:E2:7F:B1:8C:38:E1:7C:61:06:32:29:FF:66:A2:F6:51:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73105CE27FB18C38E17C61063229FF66A2F65190.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/3137302e37392e3138302e302f32322d3234203d3e20323634383030.roa
Signing time:             Tue 04 Feb 2025 18:09:14 +0000
ROA not before:           Tue 04 Feb 2025 18:04:14 +0000
ROA not after:            Tue 03 Feb 2026 18:09:14 +0000
asID:                     264800
IP address blocks:        170.79.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:42:1e:86:7e:ce:9b:d8:c7:63:ee:dd:ae:e5:f1:8c:23:f3:d4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73105CE27FB18C38E17C61063229FF66A2F65190
        Validity
            Not Before: Feb  4 18:04:14 2025 GMT
            Not After : Feb  3 18:09:14 2026 GMT
        Subject: CN=54582D6DCCA30BA2E696B2B2ECC9E3A92BD21AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:9e:dd:5a:3a:00:78:83:a3:3c:12:f1:cd:
                    4b:7e:7b:9d:0c:57:f6:3f:b8:70:b8:c7:0b:dc:fe:
                    cc:8f:fd:8c:38:6f:8b:cd:69:e3:b3:e7:85:03:00:
                    05:63:be:cc:25:31:58:18:12:a9:1e:70:5d:3d:3e:
                    1b:5a:81:f9:ea:19:bf:b0:2a:78:8a:53:d8:bb:91:
                    0b:91:23:27:44:6c:cb:4f:30:8d:2d:6f:7b:10:ec:
                    e2:83:05:0b:74:0d:6a:9d:1c:7f:a4:94:56:1b:d5:
                    ef:81:f9:3f:27:3d:57:00:36:28:b6:45:35:2a:65:
                    a1:b4:a5:44:f3:b1:3f:71:81:18:d1:ff:b3:7a:cc:
                    e1:21:f2:a9:a7:fc:b3:85:27:63:91:9d:f3:24:77:
                    5d:0b:3b:2c:30:ad:36:c5:cf:f1:6f:aa:1f:9d:4b:
                    6d:40:46:08:8b:60:0c:06:20:ad:66:66:97:40:3a:
                    c4:9b:86:9b:c1:88:66:9f:48:92:71:c2:57:0c:ce:
                    8a:77:03:14:1e:bc:f7:a3:9b:46:fe:cd:d3:77:df:
                    b9:19:43:59:39:a9:94:da:3b:19:88:94:c8:c7:6b:
                    7c:2e:eb:e7:07:80:00:33:09:6a:7d:99:eb:a3:c9:
                    41:8d:61:52:96:10:02:1c:15:e4:d4:5c:9b:67:61:
                    76:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:2D:6D:CC:A3:0B:A2:E6:96:B2:B2:EC:C9:E3:A9:2B:D2:1A:A6
            X509v3 Authority Key Identifier:
                keyid:73:10:5C:E2:7F:B1:8C:38:E1:7C:61:06:32:29:FF:66:A2:F6:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/73105CE27FB18C38E17C61063229FF66A2F65190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73105CE27FB18C38E17C61063229FF66A2F65190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/3137302e37392e3138302e302f32322d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:ee:14:ae:14:5d:e4:77:fe:c4:20:6e:ff:4a:c0:48:25:
         62:9d:88:f3:11:83:7d:83:97:98:76:6e:e7:99:eb:fa:b9:ea:
         17:13:68:d8:c3:d6:92:e4:04:15:1d:f6:b7:98:34:9b:af:03:
         5d:b4:1e:15:7b:d2:50:25:5d:be:3b:b0:f8:e8:cd:54:c7:ee:
         00:34:1f:dc:2a:c6:95:51:ab:9a:0b:95:c0:ac:8a:c5:21:de:
         8e:ff:70:fb:e9:21:7d:7c:23:61:a4:cb:d9:1c:f4:f8:c1:48:
         8c:73:03:c3:b9:3b:6d:b8:21:56:10:fe:27:95:d9:ad:49:63:
         66:75:a1:0f:08:e1:80:e1:c0:2c:7b:ec:64:f0:d3:07:0a:a9:
         e0:43:40:48:49:21:24:50:4f:22:4a:78:95:f0:61:cb:e5:60:
         18:ba:7d:2a:1c:66:1d:56:b1:8f:ea:6d:4b:4f:ef:47:67:d6:
         b0:35:42:38:e6:2a:c4:74:00:be:36:42:5f:dc:81:a8:92:ad:
         3d:fe:37:a0:fb:4f:0b:31:d3:d2:a0:25:51:b1:b7:80:fc:bf:
         41:22:dd:87:80:e5:c1:8a:3b:8e:e4:14:bf:3d:21:6c:a6:98:
         0b:3b:0b:a6:19:76:5e:72:f3:e7:af:54:68:be:0c:3b:8f:c1:
         77:54:27:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:27:08 2025 by rpki-client