Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa
File:                     3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          o/ZdiqeCuh8r0IldojG/iDQs9IGnN1eYpkP5AbNhqjk=
Subject key identifier:   83:98:3F:56:E7:EF:67:6E:81:B0:2B:4F:E0:EC:FE:6F:E9:F7:93:F7
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       20F3A05C9EC0CCC7FE041956B6D22AA22E49C648
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 04 Feb 2025 18:36:13 +0000
ROA not before:           Tue 04 Feb 2025 18:31:13 +0000
ROA not after:            Tue 03 Feb 2026 18:36:13 +0000
asID:                     263222
IP address blocks:        170.82.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f3:a0:5c:9e:c0:cc:c7:fe:04:19:56:b6:d2:2a:a2:2e:49:c6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Feb  4 18:31:13 2025 GMT
            Not After : Feb  3 18:36:13 2026 GMT
        Subject: CN=83983F56E7EF676E81B02B4FE0ECFE6FE9F793F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:7f:45:68:66:36:be:4d:8a:1e:57:e9:ac:
                    5b:dd:62:c0:65:55:ec:d6:4b:ad:a7:b2:7e:d7:e2:
                    a1:3b:88:13:ef:df:15:13:17:ca:56:b5:c6:50:5a:
                    2d:89:7b:bf:f7:30:4d:0e:e7:dc:da:04:a6:82:af:
                    c0:34:32:ba:0b:84:94:17:77:1e:83:ab:c1:d8:13:
                    1c:ef:ab:bb:bd:a8:df:26:70:8e:fa:7c:0c:26:92:
                    cc:7a:2b:dc:ce:1b:81:a7:b0:df:6d:02:37:bb:b4:
                    e3:b8:72:f1:68:dd:f5:cc:69:12:f5:65:f8:20:d3:
                    89:c7:fb:b9:69:df:d2:4d:39:5b:2b:88:ba:1f:2c:
                    29:db:1e:c7:7a:23:15:42:60:b4:25:fa:e5:5e:51:
                    56:03:3c:aa:e5:28:49:2a:02:21:4c:c8:f6:69:4a:
                    91:59:bd:dd:c4:67:dd:01:78:07:bd:16:db:64:a2:
                    f2:a3:2e:c2:80:0b:49:67:2b:c4:8e:dd:0a:e1:38:
                    5c:ff:4c:7b:86:04:35:26:de:c7:2a:e4:6d:cf:45:
                    56:ab:67:04:90:66:ca:7d:35:e1:13:89:ce:2c:f1:
                    49:21:db:8c:82:9b:d8:85:86:6c:88:36:1a:66:bb:
                    46:55:5f:39:3d:a4:4e:a6:c1:18:45:5f:a2:35:fa:
                    03:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:98:3F:56:E7:EF:67:6E:81:B0:2B:4F:E0:EC:FE:6F:E9:F7:93:F7
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:13:38:f7:a8:03:0a:e9:cd:9c:d8:9d:88:62:9f:6b:77:c2:
         60:59:90:51:6c:ef:05:2a:d4:d4:39:e0:7c:84:ed:9b:4d:1f:
         a7:35:23:df:d8:77:50:37:3e:87:03:f9:82:1e:f8:f8:95:02:
         8a:5b:88:b9:d6:70:1a:5e:1d:7c:64:d6:3e:65:85:18:f1:76:
         40:d8:07:58:d1:82:a1:39:de:14:e4:91:db:22:1e:d1:1b:2f:
         80:71:6a:f1:fd:82:55:d4:18:18:db:03:b9:35:7a:39:24:a0:
         23:f1:1a:a9:36:4b:be:51:8f:7d:f0:5d:45:08:a4:9e:2d:c8:
         8d:69:30:c8:7f:2e:f1:c2:a6:ae:27:ce:09:1a:b4:bd:b4:11:
         d3:b1:0f:3c:62:b8:39:95:1c:ed:f0:8e:35:54:1e:2f:35:09:
         26:fc:bf:d3:b4:84:06:fd:1a:42:75:8c:85:38:69:32:8c:67:
         39:25:97:0c:9c:33:52:10:c1:fc:9d:a9:2b:2d:30:21:17:2f:
         12:7c:8a:e5:c3:e7:41:98:fb:f6:ce:e6:e3:ef:72:6e:cb:7c:
         e7:0a:3f:cb:1d:df:47:20:44:6b:86:41:8a:5a:bd:49:04:a9:
         b9:d7:2c:37:29:b8:99:a3:be:80:e2:d8:5e:3d:bf:02:72:d8:
         b7:b7:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:57:57 2025 by rpki-client