Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/3136302e32302e38302e302f32322d3234203d3e20323635373230.roa
File:                     3136302e32302e38302e302f32322d3234203d3e20323635373230.roa (raw, json)
Hash identifier:          sGxaunIeSn7CilSeJ+8Vg7rod+PMdjoUg4dOuK9/t4Y=
Subject key identifier:   99:C4:A2:C8:C7:04:33:B8:CF:14:3A:DE:73:60:B4:18:CE:F6:EE:B1
Certificate issuer:       /CN=9070FF06BDE4B545864C04320928D147E137E683
Certificate serial:       6FB98B11569C164A77207B9DA73B45767E4E4AFB
Authority key identifier: 90:70:FF:06:BD:E4:B5:45:86:4C:04:32:09:28:D1:47:E1:37:E6:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9070FF06BDE4B545864C04320928D147E137E683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/3136302e32302e38302e302f32322d3234203d3e20323635373230.roa
Signing time:             Tue 04 Feb 2025 18:43:53 +0000
ROA not before:           Tue 04 Feb 2025 18:38:53 +0000
ROA not after:            Tue 03 Feb 2026 18:43:53 +0000
asID:                     265720
IP address blocks:        160.20.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b9:8b:11:56:9c:16:4a:77:20:7b:9d:a7:3b:45:76:7e:4e:4a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9070FF06BDE4B545864C04320928D147E137E683
        Validity
            Not Before: Feb  4 18:38:53 2025 GMT
            Not After : Feb  3 18:43:53 2026 GMT
        Subject: CN=99C4A2C8C70433B8CF143ADE7360B418CEF6EEB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:52:17:13:8e:82:74:bb:5a:cc:cf:62:c5:
                    4f:61:dc:ee:18:71:57:0c:b1:2c:7f:60:55:4c:77:
                    87:c3:1f:98:d6:9b:d7:8b:e2:6a:c6:2f:84:82:24:
                    bf:51:f6:5b:c2:80:25:53:20:32:0c:91:d1:f2:02:
                    c8:58:03:da:6d:eb:47:e0:88:99:26:ff:a0:b8:7f:
                    b1:67:17:42:76:8d:ff:04:2b:b8:30:65:02:21:44:
                    04:b9:49:87:dc:89:ae:b2:b7:28:cc:dc:b6:ab:30:
                    65:20:d0:d7:5d:d6:7c:39:63:9c:65:3b:a8:9f:f6:
                    3b:e1:b4:63:d3:0a:4a:73:64:85:2b:bd:f6:c7:ad:
                    80:6d:c9:0c:76:dd:d9:18:33:47:d9:d6:1c:bf:92:
                    6c:02:f5:57:69:de:0a:2a:aa:ca:66:0e:ae:ea:24:
                    b0:17:02:aa:88:7c:48:70:4f:19:6b:18:af:23:81:
                    1a:f4:38:03:d1:16:c4:aa:7c:c4:cf:9c:ac:32:10:
                    26:0f:b3:24:a3:68:21:a0:28:31:83:1a:c1:25:5f:
                    62:ff:33:2e:31:5b:d9:94:ff:d8:7a:a8:a1:1b:62:
                    04:e7:dc:0b:b1:aa:87:d6:a3:4b:ef:f2:c3:ff:a5:
                    38:55:61:e3:78:80:d1:48:30:bc:e2:7a:bf:de:6d:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:A2:C8:C7:04:33:B8:CF:14:3A:DE:73:60:B4:18:CE:F6:EE:B1
            X509v3 Authority Key Identifier:
                keyid:90:70:FF:06:BD:E4:B5:45:86:4C:04:32:09:28:D1:47:E1:37:E6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/9070FF06BDE4B545864C04320928D147E137E683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9070FF06BDE4B545864C04320928D147E137E683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7076B79DFC3EF85909DBD6FB58149EA378F2635589A09BF93673791CD076EED0/0/3136302e32302e38302e302f32322d3234203d3e20323635373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:2e:06:04:54:0e:0f:db:e0:34:4d:b7:a0:9c:59:0e:35:
         ea:ff:b4:ea:4d:bf:58:cf:39:74:60:de:31:5a:86:c0:3c:eb:
         b2:67:09:72:21:b2:8a:60:a8:b8:c8:c8:2b:cf:e8:60:5f:64:
         4f:5c:be:01:ca:21:c4:68:9b:a7:fc:7b:84:c3:9f:71:5f:b9:
         20:b0:2e:7b:8d:ac:90:ef:6b:f1:ee:49:72:b4:09:de:0b:b6:
         21:20:06:cf:56:13:b9:da:de:f6:47:f6:6e:65:90:f3:bf:bb:
         2b:e1:63:9c:e7:17:b7:02:0e:aa:0a:57:4e:ed:65:bb:59:52:
         c4:dc:49:2e:af:b2:17:d8:6d:8c:c6:76:f7:9c:09:99:1d:3b:
         fc:51:96:a8:5c:60:d7:35:46:6b:eb:16:d8:cf:50:33:6e:e9:
         de:10:c5:f4:bb:d1:e1:7f:13:c1:d8:10:2d:9e:20:db:22:7d:
         c7:ee:46:0c:63:60:5a:fe:ad:2a:92:30:79:99:e9:38:0e:f2:
         f9:91:e6:3a:96:b1:19:91:41:39:ac:99:09:9f:87:52:d6:24:
         ff:39:80:74:cb:aa:c5:44:49:6c:38:f3:0c:ce:df:a1:d0:11:
         85:0e:74:95:a9:8a:8d:7c:fb:2e:5e:b8:c5:25:22:46:6e:5c:
         91:ee:14:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:04:35 2025 by rpki-client