Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa
File:                     3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa (raw, json)
Hash identifier:          LEOqbnXILy3DQhr27+S92XV7kQbVQTKVjxUnz99tKiI=
Subject key identifier:   2B:91:64:81:20:46:BB:B7:03:5D:0B:DA:ED:5B:4B:54:AE:11:2D:D0
Certificate issuer:       /CN=598C02ED068F0513C4248D10DD3D494B92EEE8F6
Certificate serial:       3B491DE497C56BCE02B4185A7E04F98DBC393CC2
Authority key identifier: 59:8C:02:ED:06:8F:05:13:C4:24:8D:10:DD:3D:49:4B:92:EE:E8:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa
Signing time:             Tue 04 Feb 2025 18:01:52 +0000
ROA not before:           Tue 04 Feb 2025 17:56:52 +0000
ROA not after:            Tue 03 Feb 2026 18:01:52 +0000
asID:                     264810
IP address blocks:        170.238.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:49:1d:e4:97:c5:6b:ce:02:b4:18:5a:7e:04:f9:8d:bc:39:3c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598C02ED068F0513C4248D10DD3D494B92EEE8F6
        Validity
            Not Before: Feb  4 17:56:52 2025 GMT
            Not After : Feb  3 18:01:52 2026 GMT
        Subject: CN=2B9164812046BBB7035D0BDAED5B4B54AE112DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:5d:0f:3c:17:fc:e3:e8:00:0b:13:03:55:
                    0c:f5:cc:6c:c5:37:d5:e6:d8:ba:e4:b0:29:e1:01:
                    13:e2:50:d6:6f:00:ea:1a:73:6e:57:35:4e:21:c4:
                    45:b1:10:c9:74:8a:f7:15:ac:35:1b:fc:76:e9:c3:
                    08:15:29:e0:36:fd:17:df:6f:1f:4a:7a:9c:89:7b:
                    50:ed:22:48:12:3e:1b:6b:59:58:e1:a8:7c:16:d2:
                    a8:10:1b:d0:97:7a:89:3f:31:a1:4d:a3:97:b7:d7:
                    b1:8d:da:9d:0d:99:a4:4d:b6:e4:5f:13:0c:49:31:
                    53:34:7f:4e:73:19:bd:bf:a4:a9:48:0c:ca:c1:66:
                    41:57:d6:19:e2:39:0b:a0:06:c1:6e:51:70:05:3d:
                    ce:01:30:13:fe:69:7c:6a:13:8f:e9:7c:e7:2a:ec:
                    f6:21:71:e4:89:88:42:0b:42:e2:88:40:da:bd:52:
                    f9:60:dc:3e:39:c3:9d:2c:2e:f6:be:ab:f4:ca:a9:
                    f3:8d:42:a0:dd:c5:59:98:6c:59:84:c2:9d:84:4c:
                    41:58:b5:7d:6f:28:a3:a8:37:2b:a2:bf:69:b1:8a:
                    2e:4e:ad:69:54:c6:1a:eb:f3:59:dc:7f:5e:47:5e:
                    6e:0a:69:ff:92:2a:60:be:a1:ea:8f:ee:f1:25:47:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:91:64:81:20:46:BB:B7:03:5D:0B:DA:ED:5B:4B:54:AE:11:2D:D0
            X509v3 Authority Key Identifier:
                keyid:59:8C:02:ED:06:8F:05:13:C4:24:8D:10:DD:3D:49:4B:92:EE:E8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:3b:f9:94:5e:84:0c:97:f6:35:26:d9:eb:bd:74:14:2c:3c:
         34:e9:dc:26:9f:54:f5:dd:c4:a2:a8:48:f2:ea:8a:c2:07:f2:
         0f:36:2f:b1:5d:88:2c:2b:5a:54:03:90:a4:5a:6f:e9:2f:9d:
         bb:6d:e9:4b:eb:3a:fe:a8:1c:5c:8d:4b:c7:86:15:75:65:45:
         23:42:11:d4:62:d2:06:20:1c:dd:5f:24:de:b1:10:35:11:85:
         cd:1f:6d:13:4a:8b:59:38:d6:5b:13:53:9e:f3:c6:c3:c7:ec:
         f2:0d:64:ea:16:c6:4d:f3:4a:a8:e9:3b:18:0c:80:5c:8c:cb:
         8e:3a:86:a4:1a:39:bb:1b:e5:a1:93:d5:b1:3f:aa:25:20:f6:
         ed:db:89:e2:9e:6a:be:dc:74:b7:2f:7c:88:45:e8:d9:e7:f5:
         55:45:7c:f5:56:27:50:4e:57:80:90:da:c9:25:f8:55:dd:06:
         21:c9:9e:a6:96:75:a7:93:39:64:e8:29:d3:bb:1c:54:36:7c:
         69:ca:05:9d:14:de:85:5b:03:34:af:6f:b7:a4:a3:63:67:52:
         d4:76:23:2c:d4:1c:0d:92:4c:e2:f9:73:eb:e0:78:f4:24:86:
         4c:65:29:6a:b8:29:d4:76:01:67:75:31:29:25:0b:30:08:b4:
         e4:4d:b0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:55 2025 by rpki-client