Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3137302e38342e3132342e302f32322d3234203d3e203532333132.roa
File:                     3137302e38342e3132342e302f32322d3234203d3e203532333132.roa (raw, json)
Hash identifier:          T3y848ECBs10pttCPuLdUo7eZoe+y49wzOi8HDQNKUg=
Subject key identifier:   F5:75:EC:A0:F8:06:4E:7B:89:81:F4:84:81:53:A0:87:B7:A5:AA:A2
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       36E2B351C8D832DAAA8A9AD8DF6FF60A790105A0
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3137302e38342e3132342e302f32322d3234203d3e203532333132.roa
Signing time:             Tue 04 Feb 2025 18:15:02 +0000
ROA not before:           Tue 04 Feb 2025 18:10:02 +0000
ROA not after:            Tue 03 Feb 2026 18:15:02 +0000
asID:                     52312
IP address blocks:        170.84.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e2:b3:51:c8:d8:32:da:aa:8a:9a:d8:df:6f:f6:0a:79:01:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Feb  4 18:10:02 2025 GMT
            Not After : Feb  3 18:15:02 2026 GMT
        Subject: CN=F575ECA0F8064E7B8981F4848153A087B7A5AAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:da:98:3a:cb:28:f4:e3:f3:fe:85:43:af:9e:
                    6b:d1:9b:ec:bf:a4:7b:ea:40:1b:d1:f3:5b:02:d9:
                    8c:e9:b4:42:c7:bf:ff:cd:32:78:d5:51:f1:47:b9:
                    37:cf:89:91:00:aa:ca:93:63:5a:69:f9:f3:bb:f7:
                    1d:08:93:2d:a1:57:b4:5a:15:7e:00:3e:75:e6:1e:
                    e8:54:20:22:c1:ca:57:9f:14:74:43:e1:e6:bc:7d:
                    b8:11:e3:3f:bc:8b:1b:74:00:d8:b9:11:7e:54:e0:
                    74:fc:da:dd:9f:80:c6:31:39:12:4d:47:a2:ff:d9:
                    d3:c9:0a:13:90:94:bc:91:cb:73:e5:2e:ab:38:49:
                    ea:50:35:54:96:fc:80:71:f5:97:fc:22:4a:0c:12:
                    50:df:70:7d:f1:aa:60:98:f9:71:8c:6a:b2:53:e1:
                    2f:95:e5:0f:5a:95:ae:f9:48:34:b2:c4:7e:63:fa:
                    b1:4b:07:a9:6b:5e:db:65:1f:c5:bb:d9:84:f2:d9:
                    14:dd:51:ae:5e:10:b7:e2:5c:61:7f:0e:7e:71:e2:
                    7a:72:58:fd:e2:77:f5:d2:a5:10:95:ed:ee:ff:d3:
                    84:b4:5b:c0:e7:4a:7b:5b:28:68:f4:28:4d:d8:ba:
                    89:da:3b:79:fc:b9:ee:6e:7e:ba:40:c3:4c:22:73:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:75:EC:A0:F8:06:4E:7B:89:81:F4:84:81:53:A0:87:B7:A5:AA:A2
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3137302e38342e3132342e302f32322d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:45:8d:23:e2:c0:61:4f:0d:62:b3:7f:06:b1:7d:70:c2:9a:
         d8:ae:4c:a7:01:2d:b7:5d:0b:e4:01:ea:40:49:66:8c:83:f3:
         d5:3d:da:f1:33:d9:d5:2b:b4:d4:5a:5b:11:bf:51:58:96:50:
         6a:54:c6:5a:9d:af:4a:e5:c4:c4:8f:70:3c:5f:30:22:4a:0f:
         3b:1d:bf:3d:33:2a:5a:15:ef:0b:bb:f6:1c:40:e3:b1:f0:22:
         d1:61:0a:2a:24:95:a0:9e:d8:cd:74:4d:c2:d0:40:26:52:83:
         29:7f:34:cb:86:0f:9e:50:d0:16:03:c5:e4:3f:13:e3:71:b1:
         7d:f8:6a:b1:86:63:70:c7:72:1a:f6:56:af:9e:4a:ee:46:55:
         1e:a9:6f:0f:f6:5e:f7:4a:51:2c:08:99:6e:a4:4f:c3:19:48:
         38:76:f3:4f:1b:00:57:a9:62:ae:82:eb:ae:4a:fd:b1:54:ea:
         93:a8:84:63:6d:a3:fc:c4:8c:a2:b2:98:e9:f6:75:eb:e4:cc:
         78:d9:61:8b:b3:3a:09:9f:cd:01:12:be:19:84:76:84:19:1e:
         5b:24:b5:a1:77:79:70:e8:c8:05:f9:b0:40:69:2a:5a:46:91:
         8c:8d:30:ff:99:90:ec:a3:b1:d5:96:97:e7:ed:44:d4:24:02:
         73:f4:70:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:53 2025 by rpki-client