Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa
File:                     3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          3cc3+DEEI0y31khPHYLfE1aHWQWyckDeBMJnS+ieFiU=
Subject key identifier:   77:C9:41:86:DA:BD:5C:B0:61:BA:C7:12:67:09:DB:E4:9E:3E:33:E7
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       3B4D9CF4471783EB2DA709D9803121408F89960F
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa
Signing time:             Tue 04 Feb 2025 19:58:33 +0000
ROA not before:           Tue 04 Feb 2025 19:53:33 +0000
ROA not after:            Tue 03 Feb 2026 19:58:33 +0000
asID:                     264830
IP address blocks:        170.80.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:4d:9c:f4:47:17:83:eb:2d:a7:09:d9:80:31:21:40:8f:89:96:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Feb  4 19:53:33 2025 GMT
            Not After : Feb  3 19:58:33 2026 GMT
        Subject: CN=77C94186DABD5CB061BAC7126709DBE49E3E33E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c0:33:2f:ef:0c:d0:85:49:55:15:11:d4:46:
                    fc:3b:c3:38:9b:7a:2b:cd:76:3d:aa:e8:f5:61:fd:
                    3e:c8:70:dd:86:df:21:68:1e:88:d2:98:45:1c:d1:
                    1c:1b:e8:5f:e0:bf:f3:16:5e:f4:b3:5f:9c:6a:8d:
                    54:55:2e:65:b4:20:2c:b4:7d:f0:ba:99:b7:85:c5:
                    05:88:64:49:95:49:2c:6b:85:d4:77:49:ac:10:b7:
                    db:ef:08:2c:13:7f:c5:f1:48:38:46:5e:01:cb:f4:
                    c6:c1:ec:ac:bf:44:fb:24:0d:31:34:5a:0d:29:10:
                    86:fa:ab:ef:02:25:61:8b:0e:36:3d:6d:2e:df:37:
                    82:a1:66:6b:88:ac:fc:6d:2c:91:ee:72:59:9d:86:
                    db:1e:2b:28:3d:fc:e0:d8:73:5a:67:cf:22:94:54:
                    59:91:53:e8:5b:cc:c6:73:00:88:52:ce:cd:9b:a3:
                    4c:6b:d4:27:e3:5c:cd:ff:03:e3:50:ee:ad:40:ea:
                    f0:6e:7d:cd:56:b1:b8:05:8c:37:3b:4d:fe:7e:f2:
                    86:8c:9b:1a:27:6a:af:d1:ba:9b:df:4c:db:b3:f7:
                    73:2c:09:c8:39:d9:d2:b2:dc:66:63:20:d1:65:24:
                    9e:60:a4:6d:bd:75:a3:df:3f:b4:1e:28:6b:83:93:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:41:86:DA:BD:5C:B0:61:BA:C7:12:67:09:DB:E4:9E:3E:33:E7
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:c6:36:e9:44:3c:7e:1a:8e:90:35:e5:aa:0b:69:56:e1:
         55:98:77:49:7d:fe:6e:58:e4:96:01:eb:b5:2a:6a:ca:c0:dc:
         08:87:38:dd:4c:50:ed:31:53:e6:11:50:de:97:ad:5e:9b:af:
         bb:1b:ba:2d:e0:6e:66:56:fe:f8:bc:8c:f5:33:2f:a2:f9:f0:
         41:ac:f5:ea:2b:97:45:6b:65:1c:ed:16:66:58:42:a6:16:cb:
         55:70:42:a3:40:79:6e:32:80:46:18:1d:66:be:2a:f4:1e:7b:
         1d:bd:81:bf:b5:da:c1:ed:bf:55:21:9d:8b:4c:7c:70:d8:fb:
         18:06:f8:dd:c3:2c:62:f8:71:d9:e7:95:0c:d4:10:fd:ea:54:
         70:c8:ba:d8:98:61:91:12:09:d5:61:a7:e2:47:ad:ef:82:77:
         ad:ab:af:d6:90:af:d8:c5:65:19:a2:2d:a0:f6:73:8f:86:b2:
         b7:9c:59:70:bb:af:31:56:da:3e:6e:f5:58:8f:52:7f:b8:ce:
         5c:7f:ee:f2:47:ad:f2:4e:19:cf:1b:26:2e:5f:b3:40:5e:9b:
         fe:98:0b:2f:bc:2d:09:5b:60:55:9d:ad:91:e1:79:e9:82:27:
         7a:20:27:a8:7e:2d:3b:f3:65:7f:c8:66:3c:3c:48:de:db:5a:
         ca:cc:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:04 2025 by rpki-client