Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33372e302f32342d3234203d3e20323639393630.roa
File:                     3137302e38322e33372e302f32342d3234203d3e20323639393630.roa (raw, json)
Hash identifier:          pT9bsrZqtKdIt/5S1og7s8SDDxl6GvXaT9W9NscbZsU=
Subject key identifier:   06:D6:AB:CD:7A:83:42:C8:D5:E1:E0:CB:64:56:A7:A9:99:A1:8A:B4
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       1A036607B90C70A15043203D064E625E228DA7C5
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33372e302f32342d3234203d3e20323639393630.roa
Signing time:             Tue 04 Feb 2025 18:16:05 +0000
ROA not before:           Tue 04 Feb 2025 18:11:05 +0000
ROA not after:            Tue 03 Feb 2026 18:16:05 +0000
asID:                     269960
IP address blocks:        170.82.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:03:66:07:b9:0c:70:a1:50:43:20:3d:06:4e:62:5e:22:8d:a7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Feb  4 18:11:05 2025 GMT
            Not After : Feb  3 18:16:05 2026 GMT
        Subject: CN=06D6ABCD7A8342C8D5E1E0CB6456A7A999A18AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:1e:7f:07:bf:27:b2:68:6d:55:cb:f0:58:
                    c5:14:ce:a4:ab:7e:79:9c:b0:bf:f7:6e:a5:22:b6:
                    80:77:42:de:ea:b7:8f:3d:7a:8f:22:03:b7:32:a1:
                    2c:67:1e:6c:f0:43:32:c2:08:c1:bb:96:d2:92:c1:
                    4e:df:60:b9:70:27:86:2f:20:44:71:bf:b0:cf:22:
                    05:e3:14:d6:5b:f3:01:53:85:de:ff:b9:4c:e7:45:
                    d0:ad:aa:7a:35:66:b7:f0:05:6e:40:6d:b2:6d:5c:
                    e7:4e:cb:d2:a1:c0:ac:00:c5:68:ea:6f:3e:6d:88:
                    4a:ac:91:26:02:89:60:73:8b:e9:4e:00:2d:8d:58:
                    90:86:c8:2d:06:26:1d:41:83:5e:be:af:1f:b4:03:
                    aa:07:02:b5:60:e9:64:7c:ee:51:ef:fd:b7:ac:02:
                    c5:34:0e:c5:71:94:7c:da:c4:96:7f:17:36:b4:14:
                    0f:62:98:f1:45:65:2f:b6:a4:b6:2d:6b:d3:32:27:
                    68:a4:8f:63:2a:a6:ea:e8:53:bf:a8:46:47:49:2c:
                    0a:57:34:d2:ee:f7:ba:df:7a:97:84:f7:85:8b:39:
                    3e:58:10:14:9e:62:81:9b:8f:5d:e0:e0:60:43:fb:
                    78:c3:85:97:0b:ab:cb:33:83:de:13:de:b4:81:04:
                    e7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:AB:CD:7A:83:42:C8:D5:E1:E0:CB:64:56:A7:A9:99:A1:8A:B4
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33372e302f32342d3234203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:d6:2a:20:98:13:e4:d4:67:a3:4a:5a:de:8a:24:74:2d:
         d1:96:0b:ca:34:0c:47:59:23:b1:df:77:77:87:5f:63:25:24:
         b6:96:94:93:3e:80:90:8f:f3:9b:2e:7a:1b:22:8e:1e:d1:e0:
         b9:33:5f:db:31:16:96:34:6b:86:a9:3e:bd:ab:82:69:a5:63:
         78:25:0e:c3:3a:5f:39:23:5c:78:ea:cc:40:89:fb:1d:11:16:
         9e:37:44:b9:22:9b:f5:7a:76:8c:f4:cd:e8:ae:3b:58:8c:2e:
         84:b2:d1:6f:5e:3f:31:e2:b0:94:7b:3e:c8:12:b9:30:d6:14:
         38:8f:60:e7:62:77:71:c1:90:cc:45:bb:bc:fd:ff:19:da:bc:
         2f:28:53:ce:74:5b:c2:86:47:33:75:3e:0d:0c:cd:a8:4e:f1:
         1d:89:be:6b:7e:20:6c:b4:06:8d:1b:4f:d2:2f:c2:a8:16:62:
         ba:51:c3:30:a8:72:e6:f0:4c:d9:6c:19:84:a2:cb:a8:e4:11:
         ff:f8:ab:82:71:01:db:6b:60:84:ae:fb:f1:8a:0f:a0:77:59:
         31:13:46:c4:e6:d0:df:4f:08:9e:27:ad:7b:f1:b0:4c:8c:3a:
         19:a2:99:6a:d2:62:8b:d3:fa:34:58:11:08:6c:c9:39:61:bf:
         2d:b3:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:23 2025 by rpki-client