Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3137302e3234342e34382e302f32322d3234203d3e203631343837.roa
File:                     3137302e3234342e34382e302f32322d3234203d3e203631343837.roa (raw, json)
Hash identifier:          x/QZ42IlqfvcJI05kY7Gt3ZqbN12EwFBoZ5CtaBztvI=
Subject key identifier:   EC:51:D2:D4:F7:6F:D6:08:E3:07:E9:4E:F3:E8:88:BE:41:88:7E:FE
Certificate issuer:       /CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
Certificate serial:       2521DD5E4DEEE75A273D3B1CD64F8CD173C9BB1F
Authority key identifier: 1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3137302e3234342e34382e302f32322d3234203d3e203631343837.roa
Signing time:             Tue 04 Feb 2025 18:22:44 +0000
ROA not before:           Tue 04 Feb 2025 18:17:44 +0000
ROA not after:            Tue 03 Feb 2026 18:22:44 +0000
asID:                     61487
IP address blocks:        170.244.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:21:dd:5e:4d:ee:e7:5a:27:3d:3b:1c:d6:4f:8c:d1:73:c9:bb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE
        Validity
            Not Before: Feb  4 18:17:44 2025 GMT
            Not After : Feb  3 18:22:44 2026 GMT
        Subject: CN=EC51D2D4F76FD608E307E94EF3E888BE41887EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:3d:df:a6:0b:fc:e3:02:0b:c3:7e:7c:a0:
                    dc:f4:e4:0e:cd:a7:cd:75:02:44:4e:f9:61:ea:55:
                    39:d6:b3:56:25:d5:ba:9d:b3:31:98:61:d6:d0:68:
                    39:4e:c6:8a:a8:a5:0d:22:44:78:95:b2:88:ee:86:
                    8d:a6:f3:c5:e0:26:2b:f4:40:a7:b8:30:bc:49:ca:
                    24:f2:0e:82:e8:88:2c:8e:ae:1b:38:58:92:48:45:
                    6e:f6:2c:ed:f7:0a:00:9d:3d:70:78:26:d8:44:61:
                    04:c2:97:27:17:a1:f9:9d:c9:93:bb:72:8b:b9:a3:
                    f4:ff:4b:a7:72:66:66:f8:84:e3:cd:76:76:db:14:
                    78:50:d1:73:70:b2:28:b2:46:0f:f1:d1:ae:60:7a:
                    37:51:c9:01:e4:f6:24:f2:23:0c:e0:cd:68:d4:5f:
                    c1:db:3a:1f:14:6a:ef:b4:80:b4:cd:70:cc:08:98:
                    22:e0:6f:b8:c3:e1:d9:f5:25:ff:f9:3a:d4:9e:9c:
                    72:ff:af:90:64:45:af:34:f6:39:6c:d6:f3:74:5d:
                    91:b6:c2:cd:10:cf:af:a6:65:42:24:f8:b2:73:ce:
                    e8:de:65:c1:18:c4:a6:95:d0:dd:26:58:dc:cc:b5:
                    17:0a:29:6c:60:20:3d:b8:61:2b:58:57:9c:9d:3a:
                    c1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:51:D2:D4:F7:6F:D6:08:E3:07:E9:4E:F3:E8:88:BE:41:88:7E:FE
            X509v3 Authority Key Identifier:
                keyid:1F:23:04:7C:7E:B6:E1:CE:F1:8D:DE:AF:82:09:86:08:FD:96:EF:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F23047C7EB6E1CEF18DDEAF82098608FD96EFFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58893C1AF6E023B814794DC5AE5DED369F28C8E363846F88C2F86DB3A699A659/0/3137302e3234342e34382e302f32322d3234203d3e203631343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:d7:e1:f5:06:0a:2b:31:46:88:7a:ad:87:6f:7c:2b:dd:1f:
         74:20:2e:db:b3:74:a4:a0:9b:55:94:38:e8:b6:f0:1f:c7:e7:
         3b:76:0d:a0:85:49:ef:ea:75:ae:ae:b3:ad:cc:ae:66:99:20:
         12:75:21:a5:4c:48:a6:6a:a1:be:54:c5:8a:97:1f:a3:28:be:
         12:6a:ef:ad:5c:fa:a1:0a:9a:cb:af:95:8b:dc:26:8f:ae:3b:
         cd:22:ce:54:08:62:97:c3:1f:b0:ea:13:67:9f:6a:f4:2d:f5:
         23:a7:46:b5:0f:d4:fc:c4:bc:41:6b:ed:3b:85:74:22:5e:8c:
         ce:3b:bd:70:25:37:1d:88:b4:60:97:11:4a:14:4d:c3:98:08:
         0f:5e:b7:bc:b1:2b:b8:3e:75:1f:42:5a:5f:38:56:93:75:3e:
         e2:59:86:8c:45:ca:0a:05:28:2d:18:4f:28:36:26:5d:f5:b8:
         6f:4a:61:ae:81:95:f8:76:62:61:27:65:13:03:09:9e:09:54:
         60:ef:3c:89:04:ac:b5:2c:66:10:fc:0a:22:71:25:3c:52:53:
         03:2e:41:33:74:95:38:90:3c:18:1d:aa:5b:48:ff:e4:c5:ce:
         66:89:84:02:f6:a9:e6:3e:0c:52:6d:af:b5:20:df:54:ca:9f:
         56:48:20:18
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJSHdXk3u51onPTsc1k+M0XPJux8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUYyMzA0N0M3RUI2RTFDRUYxOERERUFGODIwOTg2MDhG
RDk2RUZGRTAeFw0yNTAyMDQxODE3NDRaFw0yNjAyMDMxODIyNDRaMDMxMTAvBgNV
BAMTKEVDNTFEMkQ0Rjc2RkQ2MDhFMzA3RTk0RUYzRTg4OEJFNDE4ODdFRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Hz3fpgv84wILw358oNz05A7N
p811AkRO+WHqVTnWs1Yl1bqdszGYYdbQaDlOxoqopQ0iRHiVsojuho2m88XgJiv0
QKe4MLxJyiTyDoLoiCyOrhs4WJJIRW72LO33CgCdPXB4JthEYQTClycXofmdyZO7
cou5o/T/S6dyZmb4hOPNdnbbFHhQ0XNwsiiyRg/x0a5gejdRyQHk9iTyIwzgzWjU
X8HbOh8Uau+0gLTNcMwImCLgb7jD4dn1Jf/5OtSenHL/r5BkRa809jls1vN0XZG2
ws0Qz6+mZUIk+LJzzujeZcEYxKaV0N0mWNzMtRcKKWxgID24YStYV5ydOsHHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU7FHS1Pdv1gjjB+lO8+iIvkGIfv4wHwYDVR0j
BBgwFoAUHyMEfH624c7xjd6vggmGCP2W7/4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODg5M0MxQUY2RTAyM0I4MTQ3OTREQzVBRTVERUQzNjlG
MjhDOEUzNjM4NDZGODhDMkY4NkRCM0E2OTlBNjU5LzAvMUYyMzA0N0M3RUI2RTFD
RUYxOERERUFGODIwOTg2MDhGRDk2RUZGRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjIzMDQ3QzdFQjZFMUNFRjE4
RERFQUY4MjA5ODYwOEZEOTZFRkZFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg4OTNDMUFGNkUwMjNCODE0Nzk0REM1QUU1REVEMzY5RjI4QzhFMzYz
ODQ2Rjg4QzJGODZEQjNBNjk5QTY1OS8wLzMxMzczMDJlMzIzNDM0MmUzNDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM0MzgzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr0MDAN
BgkqhkiG9w0BAQsFAAOCAQEAzdfh9QYKKzFGiHqth298K90fdCAu27N0pKCbVZQ4
6LbwH8fnO3YNoIVJ7+p1rq6zrcyuZpkgEnUhpUxIpmqhvlTFipcfoyi+EmrvrVz6
oQqay6+Vi9wmj647zSLOVAhil8MfsOoTZ59q9C31I6dGtQ/U/MS8QWvtO4V0Il6M
zju9cCU3HYi0YJcRShRNw5gID163vLEruD51H0JaXzhWk3U+4lmGjEXKCgUoLRhP
KDYmXfW4b0phroGV+HZiYSdlEwMJnglUYO88iQSstSxmEPwKInElPFJTAy5BM3SV
OJA8GB2qW0j/5MXOZomEAvap5j4MUm2vtSDfVMqfVkggGA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:38 2025 by rpki-client