Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa
File:                     3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          LsnT68GLx7zzpbrqElQB9FtsxweG6yujNwFxXSHo2B8=
Subject key identifier:   B8:FA:E2:C8:30:0E:2F:BF:0D:46:B4:26:17:14:0C:4F:1F:66:EB:46
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       07D96D62CF4A8177C3EDD0791A44E8A1B3972B45
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa
Signing time:             Tue 04 Feb 2025 18:19:37 +0000
ROA not before:           Tue 04 Feb 2025 18:14:37 +0000
ROA not after:            Tue 03 Feb 2026 18:19:37 +0000
asID:                     396982
IP address blocks:        170.247.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d9:6d:62:cf:4a:81:77:c3:ed:d0:79:1a:44:e8:a1:b3:97:2b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:37 2025 GMT
            Not After : Feb  3 18:19:37 2026 GMT
        Subject: CN=B8FAE2C8300E2FBF0D46B42617140C4F1F66EB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:5c:a9:c4:1d:6a:5f:9b:f2:b8:7e:2a:79:
                    16:20:29:3b:92:a5:d2:cc:eb:71:a5:75:d3:e0:f0:
                    9b:96:bb:05:86:7f:d3:5d:18:8b:65:04:38:48:f9:
                    9d:0d:97:7c:02:ed:0e:cd:dd:5f:f5:aa:63:4f:dd:
                    2d:9c:ce:37:58:e6:38:d2:c9:62:ca:07:cb:d3:5a:
                    a4:a8:12:13:ca:f9:70:4e:02:8b:70:f1:41:9c:55:
                    bb:f6:a4:c3:37:1c:79:c6:44:0f:30:6f:a3:3e:b6:
                    7d:80:70:a5:d9:5f:f6:29:58:67:41:e1:3c:fc:2c:
                    36:f8:9b:6c:46:a5:0b:a3:81:d1:b1:5f:cd:46:00:
                    4a:bd:ef:8e:b6:b0:13:43:20:af:5f:e4:85:ee:d8:
                    31:c7:6b:8b:a4:15:b3:8d:dd:b5:89:45:db:ca:e6:
                    19:ca:ad:54:41:d3:9c:91:df:56:5d:11:50:42:18:
                    a5:e4:de:c5:d9:4f:e9:9c:b9:06:c7:27:82:5c:26:
                    68:28:46:99:e5:c0:d8:bf:75:72:f5:18:37:2d:3b:
                    bf:85:b5:0c:c5:fa:13:d4:d0:8a:a5:59:97:91:5b:
                    a5:d5:6e:6d:93:71:40:11:64:01:d3:dd:32:73:ac:
                    ff:ed:72:10:ad:1c:17:10:10:6f:9a:58:e4:1d:60:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FA:E2:C8:30:0E:2F:BF:0D:46:B4:26:17:14:0C:4F:1F:66:EB:46
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:87:d9:e3:95:38:95:79:1f:0f:a4:b0:12:fa:be:27:00:ad:
         67:a8:1d:dd:11:47:73:d9:e4:5e:5a:de:d2:cc:bb:e1:45:05:
         dc:cc:4d:92:6f:53:76:e9:d1:a8:c1:82:b6:db:34:a4:5d:07:
         1e:18:e1:53:34:4a:03:2e:38:86:ec:e8:ca:ef:c4:0f:b7:71:
         68:79:be:b0:61:e7:b0:c9:ed:0b:d1:58:3f:ec:a6:f9:71:c5:
         77:eb:1a:13:2b:93:17:bf:02:16:b8:c7:a2:32:cd:63:7a:81:
         8d:e9:e6:6b:89:e9:bc:79:cc:d3:f6:eb:60:9d:95:05:fb:38:
         71:ca:bf:05:90:ff:7f:40:58:27:3b:7e:6d:66:aa:14:0d:dd:
         f1:87:44:f0:6e:f0:da:3b:20:0f:14:66:11:3f:7b:ad:01:94:
         bd:95:63:b8:eb:e4:25:74:c0:bf:f5:d5:02:d3:15:47:f4:84:
         45:be:19:cb:b7:28:5e:ef:3d:40:5d:c3:2a:88:52:24:8f:13:
         9c:fe:56:d2:c5:61:55:dd:17:21:37:01:66:1d:d6:94:79:2c:
         2f:54:1c:02:53:56:fc:6c:ed:75:f7:c0:0d:13:da:2e:b3:6a:
         41:78:92:ee:5c:78:45:2b:68:78:85:64:a5:6c:59:42:31:4f:
         d9:9c:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:12 2025 by rpki-client