Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa
File:                     3137302e38332e342e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          GlTe4/IdeSeFyirg0luM8ul4X/IS7mIj5WzV/uyH/9M=
Subject key identifier:   AF:E8:6D:EF:29:EE:6A:84:7F:F5:3A:CD:EA:2E:D9:F6:A4:08:CC:64
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       4EFF61B28D7DD61D8F198CCDAE34915EF95CFAEE
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:25:01 +0000
ROA not before:           Tue 04 Feb 2025 18:20:01 +0000
ROA not after:            Tue 03 Feb 2026 18:25:01 +0000
asID:                     11014
IP address blocks:        170.83.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ff:61:b2:8d:7d:d6:1d:8f:19:8c:cd:ae:34:91:5e:f9:5c:fa:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:20:01 2025 GMT
            Not After : Feb  3 18:25:01 2026 GMT
        Subject: CN=AFE86DEF29EE6A847FF53ACDEA2ED9F6A408CC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:2c:e2:9c:31:4e:8a:1d:70:91:54:a9:c1:
                    d8:60:02:78:51:73:78:bb:b0:ab:e5:51:85:49:f4:
                    dc:49:24:5e:be:fc:6a:0d:aa:46:aa:8a:5a:02:e8:
                    12:79:01:7a:37:d8:df:a0:2b:31:b1:57:3f:cd:b6:
                    5d:84:e3:5a:50:d4:6c:32:58:f8:38:7f:f0:19:80:
                    dd:90:91:6d:c4:a9:3a:9e:37:a5:62:85:64:de:fa:
                    76:8c:f5:6f:1f:2f:f9:8b:2d:2e:f3:ff:77:c7:89:
                    61:2f:4e:a6:5f:9f:bf:8b:2b:35:76:3b:55:eb:b6:
                    41:ef:ae:4c:28:27:9a:3f:3e:90:84:25:fb:73:f7:
                    bf:35:51:ec:e1:a2:6f:db:71:d7:70:e5:56:a5:ac:
                    f8:6f:be:b0:27:7c:3e:92:a6:98:a0:6f:38:08:cc:
                    70:a8:df:44:52:0c:87:ff:5f:35:69:a7:a2:73:71:
                    8c:3b:70:a3:e3:42:f7:eb:59:dc:06:86:e6:5e:b4:
                    40:ab:de:a5:29:fc:9b:f3:aa:5a:df:2d:63:44:f5:
                    aa:c6:ca:06:1f:c0:89:9c:1c:f9:9a:23:33:68:5c:
                    01:49:cb:d8:b4:80:28:ab:cd:0c:e5:3b:6d:9d:13:
                    20:e1:1a:e8:30:55:6b:26:f3:fa:6b:88:52:a9:e6:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E8:6D:EF:29:EE:6A:84:7F:F5:3A:CD:EA:2E:D9:F6:A4:08:CC:64
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:f4:58:0d:4f:e1:4e:f9:f6:5b:a4:c9:56:a2:64:2a:e0:d0:
         82:4e:d1:f0:fa:98:2a:48:a0:0d:15:a2:ae:97:25:10:b8:d9:
         0d:c3:ef:3f:55:00:f6:91:7e:48:3a:46:28:6e:7f:55:aa:f7:
         2f:49:5f:73:28:64:0a:f3:25:ec:23:bb:8f:77:52:96:ff:93:
         ff:28:d0:78:5c:ec:f1:56:9b:96:c8:48:91:db:f7:d9:a2:99:
         73:73:03:b4:fe:d6:e5:ab:06:98:df:4d:3b:b7:61:57:0e:70:
         ce:ce:04:18:81:51:7f:6b:08:fe:c4:78:9a:7f:80:95:b6:76:
         fb:23:af:b1:a7:ba:fb:ac:33:d7:a3:cc:b8:ba:76:db:6d:cd:
         36:65:c1:f3:9f:87:cd:8a:16:a9:c0:9d:a9:a8:9e:b0:3b:66:
         a1:fc:cb:8c:15:37:9a:fd:53:52:67:f5:c3:6d:8c:ef:ec:a7:
         29:f5:73:f9:47:3f:6c:0e:a4:30:6e:de:93:ee:0f:2a:ea:34:
         85:45:94:ca:e4:93:74:ec:4f:de:df:cc:78:5d:41:67:37:3b:
         8f:c6:f2:ed:8e:fc:fd:8f:a1:cc:26:2f:f7:de:83:d5:d9:f2:
         ea:10:9f:a1:ab:8f:a5:f7:75:2e:9b:9c:2f:a1:60:47:94:d2:
         f6:0d:84:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:37 2025 by rpki-client