Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa
File:                     3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa (raw, json)
Hash identifier:          F/mJ4sYP4fShKArz75bo0fumPTaax7RC8AQJDTrHFm0=
Subject key identifier:   47:5F:29:47:B9:01:8C:46:E6:D6:9E:4A:43:22:EE:F6:B1:F2:F6:13
Certificate issuer:       /CN=4F85099AE59F61C2363111166B9BC2E8D5203C8F
Certificate serial:       7AE115D1737C8C5CA29BBD0CE10DAF80A9951D13
Authority key identifier: 4F:85:09:9A:E5:9F:61:C2:36:31:11:16:6B:9B:C2:E8:D5:20:3C:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa
Signing time:             Tue 04 Feb 2025 19:58:11 +0000
ROA not before:           Tue 04 Feb 2025 19:53:11 +0000
ROA not after:            Tue 03 Feb 2026 19:58:11 +0000
asID:                     271971
IP address blocks:        170.83.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:15:d1:73:7c:8c:5c:a2:9b:bd:0c:e1:0d:af:80:a9:95:1d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F85099AE59F61C2363111166B9BC2E8D5203C8F
        Validity
            Not Before: Feb  4 19:53:11 2025 GMT
            Not After : Feb  3 19:58:11 2026 GMT
        Subject: CN=475F2947B9018C46E6D69E4A4322EEF6B1F2F613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:94:00:54:89:12:08:62:2a:c2:16:89:2d:
                    6d:84:f6:af:a7:f6:50:55:17:41:e2:2c:99:8a:46:
                    1d:92:ea:e6:94:d5:48:c8:f0:85:8f:ba:48:07:c8:
                    b4:e3:66:5e:cf:38:de:f9:8c:92:ed:44:17:40:21:
                    55:b9:29:bf:46:12:ed:75:8f:4f:13:98:e1:82:77:
                    e6:8f:87:37:7f:e1:a3:6c:52:c0:d2:58:3c:64:ec:
                    ce:44:02:25:8f:10:85:9d:6f:a5:9a:35:1f:b1:db:
                    12:7d:21:15:84:59:f0:e5:a9:4b:9e:43:2a:d0:04:
                    a9:9a:64:f0:81:bb:ab:9f:71:33:f8:66:b3:6e:a2:
                    68:61:ac:19:28:f5:15:e1:81:b2:7f:72:14:02:3b:
                    b2:97:46:d4:be:6d:ce:92:b8:ce:b7:93:91:4b:e0:
                    9d:1c:d4:52:87:5f:d2:fa:67:a0:51:5b:9b:01:6d:
                    0a:71:0a:5f:d9:72:6b:45:90:e8:3b:f2:5a:f5:46:
                    d9:fa:e0:b5:6b:b2:ca:d0:62:71:09:8f:37:c9:c2:
                    fc:13:75:03:89:ec:b1:f0:33:ea:22:5d:ef:38:02:
                    ed:e5:e1:c9:a6:72:b6:d9:49:4e:a5:67:4f:c3:9b:
                    cb:8e:a5:62:f9:d8:d3:24:34:f4:85:25:58:7c:41:
                    a6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5F:29:47:B9:01:8C:46:E6:D6:9E:4A:43:22:EE:F6:B1:F2:F6:13
            X509v3 Authority Key Identifier:
                keyid:4F:85:09:9A:E5:9F:61:C2:36:31:11:16:6B:9B:C2:E8:D5:20:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:3e:1a:dc:dd:39:cd:6c:d1:c3:33:56:70:24:e3:ce:07:
         d2:5e:3b:47:b3:35:98:b2:8b:4f:54:d1:58:dc:7d:ee:1f:47:
         a3:6e:91:7b:0a:cc:85:ca:5c:3b:ec:fc:a6:62:46:db:56:6e:
         a5:5b:80:64:1c:e0:12:38:d3:50:69:c5:c2:82:7c:e9:6b:8f:
         fa:d6:68:3d:97:11:a0:93:67:78:eb:3e:a5:f8:15:4b:70:44:
         bc:66:cd:1f:f2:a8:11:3e:22:72:95:57:89:39:bc:60:0a:3b:
         46:8b:df:3b:d2:e5:eb:7a:28:cf:56:d5:02:f0:73:ad:e3:b9:
         fe:9b:13:2b:4f:36:b3:97:46:4e:d7:ab:c1:b7:53:c7:96:14:
         07:76:00:fd:54:a5:e5:ba:6e:eb:95:dd:03:e0:22:3e:9b:6c:
         96:ab:90:b4:19:30:c9:26:50:e9:6e:89:14:94:59:cc:33:43:
         f3:01:21:00:80:62:08:fd:c7:30:53:b1:24:6e:31:a6:76:f7:
         f9:60:11:66:3c:cb:97:3a:39:ee:5c:30:7a:56:1b:4b:25:7b:
         31:76:8c:b6:95:9b:87:d2:e0:24:f2:17:df:f0:07:65:fd:c5:
         3f:36:b4:0a:53:39:a9:83:da:f0:09:14:33:69:67:00:03:69:
         e8:13:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:15 2025 by rpki-client