Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa
File:                     3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa (raw, json)
Hash identifier:          IgEboCuQdfdm4mA05JHF8mWrGKLO8YhZOsqniiN1uEU=
Subject key identifier:   70:0F:98:98:A1:70:C4:D1:2C:53:15:38:42:BC:4E:A1:3E:9B:FB:D1
Certificate issuer:       /CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
Certificate serial:       10AE0D63D6F0924263A7AA70A5668261FCAC16A2
Authority key identifier: 1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa
Signing time:             Tue 04 Feb 2025 18:37:01 +0000
ROA not before:           Tue 04 Feb 2025 18:32:01 +0000
ROA not after:            Tue 03 Feb 2026 18:37:01 +0000
asID:                     264827
IP address blocks:        170.247.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ae:0d:63:d6:f0:92:42:63:a7:aa:70:a5:66:82:61:fc:ac:16:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
        Validity
            Not Before: Feb  4 18:32:01 2025 GMT
            Not After : Feb  3 18:37:01 2026 GMT
        Subject: CN=700F9898A170C4D12C53153842BC4EA13E9BFBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:8b:ce:63:a9:9b:ca:cc:24:74:bb:d7:37:
                    2e:28:19:25:d5:7b:ba:d7:21:ec:50:0d:71:30:a3:
                    90:a4:3d:b9:84:1a:31:bf:e7:db:2f:40:6a:17:d8:
                    fe:32:71:d3:8d:03:5e:cf:5e:50:5d:9a:9c:a7:70:
                    02:78:01:29:f4:dd:aa:13:08:85:4b:f7:1b:5c:d5:
                    e3:b9:a9:87:7b:6c:b0:31:02:79:97:79:f6:a3:71:
                    4d:aa:47:4f:25:91:f1:ab:49:6b:a9:a4:48:fa:c9:
                    99:4c:4b:14:5f:e9:69:18:99:45:55:e0:9f:c1:0e:
                    94:71:fa:18:e0:9e:fd:ef:77:12:25:11:e3:6f:81:
                    21:e5:e9:3f:63:fa:7a:cc:d1:d8:fd:fb:8b:a7:b7:
                    b6:9e:92:b0:07:33:72:55:56:08:b0:12:38:08:aa:
                    a7:75:0c:66:f9:ce:a4:ce:c8:5f:00:ce:cd:df:ec:
                    d3:10:b6:42:f1:70:29:63:4b:8d:39:a3:13:2e:d1:
                    5c:48:10:34:d8:7c:c8:b4:ea:db:78:c6:25:37:b7:
                    6a:c7:f7:d6:66:25:22:ad:cc:bc:a9:7f:a2:d8:55:
                    8e:9d:63:54:a7:e6:fb:64:c3:0b:d8:b5:d8:c0:60:
                    d4:a8:4d:46:ba:ad:26:10:61:16:db:fc:4d:43:c1:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:98:98:A1:70:C4:D1:2C:53:15:38:42:BC:4E:A1:3E:9B:FB:D1
            X509v3 Authority Key Identifier:
                keyid:1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:88:f9:83:2b:4b:84:f2:c4:1c:2d:98:7a:26:e1:de:c2:b7:
         04:9c:3a:8a:a0:f4:a4:42:c4:b2:97:12:8b:33:58:2d:df:82:
         50:ee:b9:05:d0:04:62:36:f3:1a:f5:cd:bd:0c:95:bb:e9:74:
         46:98:ab:a2:63:34:5b:3b:ba:18:68:4e:bb:7c:b3:1f:9d:f7:
         03:b8:7d:3c:78:82:7f:cc:4f:87:bb:cb:ba:d3:1a:37:8c:94:
         b1:78:0c:e3:3b:85:61:4f:3a:1b:ba:2b:bd:a2:ee:c5:19:ee:
         a0:ed:d3:ce:a3:ed:bc:4b:f6:79:93:27:ca:35:d0:f4:1b:63:
         46:42:1e:64:80:41:d8:87:bf:d2:98:9d:51:9e:21:56:07:ab:
         91:e7:ec:a2:10:1b:22:12:76:70:0b:07:36:d9:38:ce:75:2b:
         4d:3b:2d:62:f6:f7:ec:63:72:09:4d:67:98:77:ab:5b:28:68:
         ae:6e:57:18:d4:0a:8e:43:f3:77:c1:b4:fe:87:2a:91:0e:61:
         6e:78:91:f0:c0:b1:db:12:4e:31:c8:ba:98:0e:a1:00:43:36:
         14:63:2e:22:b7:21:3a:8c:5b:97:0e:64:db:8f:bf:b9:be:72:
         b0:71:8b:44:a9:f5:26:40:c8:89:c0:95:51:74:7f:8a:fd:4e:
         69:d1:17:d1
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEK4NY9bwkkJjp6pwpWaCYfysFqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGMjc3OTQwMEUwQTg1Nzg5QTZENjBCMTBDQzFCOERF
QzBFN0VDQTAeFw0yNTAyMDQxODMyMDFaFw0yNjAyMDMxODM3MDFaMDMxMTAvBgNV
BAMTKDcwMEY5ODk4QTE3MEM0RDEyQzUzMTUzODQyQkM0RUExM0U5QkZCRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2D4vOY6mbyswkdLvXNy4oGSXV
e7rXIexQDXEwo5CkPbmEGjG/59svQGoX2P4ycdONA17PXlBdmpyncAJ4ASn03aoT
CIVL9xtc1eO5qYd7bLAxAnmXefajcU2qR08lkfGrSWuppEj6yZlMSxRf6WkYmUVV
4J/BDpRx+hjgnv3vdxIlEeNvgSHl6T9j+nrM0dj9+4unt7aekrAHM3JVVgiwEjgI
qqd1DGb5zqTOyF8Azs3f7NMQtkLxcCljS405oxMu0VxIEDTYfMi06tt4xiU3t2rH
99ZmJSKtzLypf6LYVY6dY1Sn5vtkwwvYtdjAYNSoTUa6rSYQYRbb/E1DwaQJAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcA+YmKFwxNEsUxU4QrxOoT6b+9EwHwYDVR0j
BBgwFoAUG/J3lADgqFeJptYLEMwbjewOfsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MTA5MzM2MDNCMkYzREM3ODE2NkI5OEIwQUY3RjNDNDdB
RTk4OENFRDU2MUMzRjJBMEFBNjQzMDY1MjU1M0I1LzAvMUJGMjc3OTQwMEUwQTg1
Nzg5QTZENjBCMTBDQzFCOERFQzBFN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkYyNzc5NDAwRTBBODU3ODlB
NkQ2MEIxMENDMUI4REVDMEU3RUNBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDEwOTMzNjAzQjJGM0RDNzgxNjZCOThCMEFGN0YzQzQ3QUU5ODhDRUQ1
NjFDM0YyQTBBQTY0MzA2NTI1NTNCNS8wLzMxMzczMDJlMzIzNDM3MmUzMjMwMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzODMyMzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
984wDQYJKoZIhvcNAQELBQADggEBABGI+YMrS4TyxBwtmHom4d7CtwScOoqg9KRC
xLKXEoszWC3fglDuuQXQBGI28xr1zb0MlbvpdEaYq6JjNFs7uhhoTrt8sx+d9wO4
fTx4gn/MT4e7y7rTGjeMlLF4DOM7hWFPOhu6K72i7sUZ7qDt086j7bxL9nmTJ8o1
0PQbY0ZCHmSAQdiHv9KYnVGeIVYHq5Hn7KIQGyISdnALBzbZOM51K007LWL29+xj
cglNZ5h3q1soaK5uVxjUCo5D83fBtP6HKpEOYW54kfDAsdsSTjHIupgOoQBDNhRj
LiK3ITqMW5cOZNuPv7m+crBxi0Sp9SZAyInAlVF0f4r9TmnRF9E=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:30 2025 by rpki-client