Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa
File:                     3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa (raw, json)
Hash identifier:          G/dt4e5YPSao8tXWldjv2N0OJ/zNYRATF/eP4K1smaE=
Subject key identifier:   9F:4B:0B:BD:26:21:84:64:5D:24:88:84:76:0C:25:74:58:CB:BF:C4
Certificate issuer:       /CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
Certificate serial:       09CE3A5E7B0BB1C62DB9C18E298C0E6B6428CB59
Authority key identifier: DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa
Signing time:             Tue 04 Feb 2025 18:21:12 +0000
ROA not before:           Tue 04 Feb 2025 18:16:12 +0000
ROA not after:            Tue 03 Feb 2026 18:21:12 +0000
asID:                     271862
IP address blocks:        177.126.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ce:3a:5e:7b:0b:b1:c6:2d:b9:c1:8e:29:8c:0e:6b:64:28:cb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDA04F0CBDD74C0B90014116FCD138125A6F0B9
        Validity
            Not Before: Feb  4 18:16:12 2025 GMT
            Not After : Feb  3 18:21:12 2026 GMT
        Subject: CN=9F4B0BBD262184645D248884760C257458CBBFC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:d2:ce:70:92:b1:a8:5d:00:ca:08:79:2e:
                    75:f1:5b:66:22:7a:61:2a:f2:7e:c2:30:a9:6a:c5:
                    b7:d3:be:e9:69:3b:06:b2:54:81:4a:1d:2a:20:98:
                    17:d2:b3:e1:20:66:40:bd:b6:d2:ac:bb:83:8c:ef:
                    57:83:da:75:77:6b:d7:83:9c:36:38:16:0f:11:c2:
                    f0:dd:84:c6:85:82:e1:f6:c8:b6:25:e9:4b:5b:a6:
                    1a:c0:a5:50:8e:06:5b:3e:38:dd:35:a7:9a:46:1d:
                    51:e7:64:3c:02:88:93:0d:1f:c2:14:3a:29:dd:13:
                    45:af:3a:02:00:7a:11:68:6b:70:f7:2e:bf:8e:eb:
                    b0:1f:8e:c4:3d:f1:87:74:41:e8:27:d7:2f:41:5a:
                    ac:b6:65:79:6e:e6:73:3e:39:0b:b3:b3:25:02:75:
                    93:87:49:c0:88:b2:e5:36:a3:58:a6:ec:8e:1a:97:
                    1a:76:f7:47:eb:35:da:cc:ef:7a:2a:9a:79:b3:41:
                    fa:03:f8:68:73:af:e6:de:18:a4:3c:d7:92:26:82:
                    45:d3:5d:cf:bc:fd:01:57:9a:3d:03:d3:d3:06:04:
                    b0:85:9b:75:4e:58:6e:e6:01:f2:62:8a:76:f4:70:
                    03:4d:aa:ca:2b:a3:d2:93:2b:14:b6:c7:34:3b:ac:
                    1a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4B:0B:BD:26:21:84:64:5D:24:88:84:76:0C:25:74:58:CB:BF:C4
            X509v3 Authority Key Identifier:
                keyid:DC:DA:04:F0:CB:DD:74:C0:B9:00:14:11:6F:CD:13:81:25:A6:F0:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDA04F0CBDD74C0B90014116FCD138125A6F0B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B145B6D0FD3CA90448F4302F3851DA4E85F7B5C644E280464C7578318BB67A0/0/3137372e3132362e34382e302f32322d3234203d3e20323731383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:b7:e1:80:3b:55:71:17:69:32:f9:08:20:04:9f:93:45:2e:
         b2:07:0f:c7:9b:7e:ff:7a:a1:ac:e9:b0:a6:b6:87:48:e5:70:
         84:fc:9b:97:77:ad:6b:a2:a5:ba:c2:b7:07:e3:59:de:cf:d2:
         26:dc:d9:e3:f1:fa:6c:fc:e0:d4:01:23:fd:0a:7c:6f:44:86:
         b0:a5:5a:7c:d7:92:2e:6b:9b:2c:a0:b6:d7:31:eb:7c:33:74:
         67:57:99:41:2a:27:3d:48:e1:74:56:6f:7b:9c:bd:ae:b1:ad:
         b6:eb:a9:86:20:f4:52:4c:76:76:db:ae:79:42:87:3a:3f:ad:
         b9:c3:8d:0b:32:f3:af:0e:67:44:89:fd:1c:fb:a1:ae:84:71:
         11:99:5d:5f:45:96:36:e6:ae:bb:51:00:1b:1d:77:38:19:a0:
         5a:a0:93:c2:8f:c9:85:24:58:68:7f:16:02:54:c2:10:e0:61:
         1f:b0:ca:52:e4:6f:ea:1d:60:29:1b:bb:ae:a1:16:60:67:df:
         4d:b9:4a:4b:f8:e7:0c:95:41:4e:64:0b:1c:e4:e4:77:c9:35:
         72:7e:1e:0c:26:21:fa:1f:9a:e6:11:79:c6:26:f9:2e:8e:a9:
         6a:71:d1:5a:c4:2f:9a:96:14:8f:fb:ff:50:fd:94:41:73:5f:
         56:fd:90:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:48 2025 by rpki-client