Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33392e302f32342d3234203d3e20323639393630.roa
File:                     3137302e38322e33392e302f32342d3234203d3e20323639393630.roa (raw, json)
Hash identifier:          cECedfiECOVVT3/05HdZVWSkqrdFL39l+yZIPueE/Gg=
Subject key identifier:   BE:4F:F5:9E:C9:6E:3B:C8:CE:0C:13:4D:23:F5:B2:BA:17:1C:3E:B8
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       4C1B73B18BB2E9E6895DF92EC6F6D2633D96ED26
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33392e302f32342d3234203d3e20323639393630.roa
Signing time:             Tue 04 Feb 2025 18:16:05 +0000
ROA not before:           Tue 04 Feb 2025 18:11:05 +0000
ROA not after:            Tue 03 Feb 2026 18:16:05 +0000
asID:                     269960
IP address blocks:        170.82.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1b:73:b1:8b:b2:e9:e6:89:5d:f9:2e:c6:f6:d2:63:3d:96:ed:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Feb  4 18:11:05 2025 GMT
            Not After : Feb  3 18:16:05 2026 GMT
        Subject: CN=BE4FF59EC96E3BC8CE0C134D23F5B2BA171C3EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:a5:d4:e4:14:6e:0d:ec:11:e3:e4:06:0d:
                    58:dc:18:16:6c:ce:fb:c5:06:78:86:55:95:ca:c3:
                    e8:22:88:73:85:1e:a5:23:48:ed:e1:be:86:60:7e:
                    a0:d0:0f:02:c4:c3:62:67:d1:12:4a:02:29:52:3c:
                    3c:4c:e7:27:21:e6:db:f2:73:5d:1a:c2:c8:0f:99:
                    7e:9d:1a:23:5f:e2:b2:d8:ce:34:9c:95:ab:ec:98:
                    53:08:81:01:cd:53:b4:7f:10:22:72:86:3c:16:17:
                    1d:11:f9:d7:d2:2e:18:bb:f9:36:d7:fa:46:93:a7:
                    35:c1:78:ae:63:ca:fc:29:c8:9d:7c:99:b6:ed:db:
                    a1:9f:5a:54:a5:62:aa:ba:b2:80:91:3c:79:93:c1:
                    07:c4:a3:72:03:e9:a0:8c:25:c1:08:d0:60:28:d3:
                    38:cb:84:50:b3:29:3b:5a:f1:6b:14:3b:03:d5:c0:
                    05:9e:a1:ce:32:2d:37:d5:de:04:3a:74:0d:b8:20:
                    30:2c:cf:63:f4:d4:3a:01:ef:d4:79:56:dd:27:e3:
                    24:2d:53:17:3f:70:7c:56:e5:41:73:cb:a5:97:18:
                    df:0c:58:57:e7:87:c4:f7:10:4c:87:fe:6b:0a:89:
                    f4:4e:71:70:94:5b:29:32:86:60:3a:c3:35:2c:16:
                    f4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4F:F5:9E:C9:6E:3B:C8:CE:0C:13:4D:23:F5:B2:BA:17:1C:3E:B8
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33392e302f32342d3234203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:73:20:74:96:28:13:b9:43:ab:3a:58:6c:35:94:51:57:
         d0:a5:f1:cc:ec:ed:bb:96:6a:32:88:6b:77:98:69:5f:3f:c3:
         bb:9f:c7:ac:cd:51:df:d9:f7:a8:6c:6e:ff:9d:5a:3c:3f:a6:
         9f:81:7f:f1:48:43:0a:7d:e0:12:09:b0:50:c6:45:d2:54:86:
         a4:14:ec:8b:f6:4a:d3:7b:27:36:34:f9:a8:9c:dd:b1:b5:83:
         9b:50:31:18:c5:8b:eb:b6:43:f0:53:bb:d8:14:e2:9a:f2:9c:
         e3:cd:55:1e:3e:79:c8:e0:59:b4:c2:bf:c1:57:8f:e3:2b:b7:
         21:2f:d5:58:1f:e4:3b:d2:1b:df:44:68:03:c2:5e:e7:a9:b6:
         16:b8:e4:cc:bd:08:cc:8b:56:0f:4f:9f:5c:92:3b:c8:39:ba:
         bc:a1:e2:4b:fe:b0:b0:f0:11:ca:d1:e0:ed:f8:0f:d4:60:88:
         4a:57:e0:b4:6f:34:c5:1c:10:0e:a4:b5:8b:3e:9b:3f:b5:09:
         77:f5:8f:09:7a:25:04:78:39:e1:c7:59:54:28:6d:5f:e9:1b:
         44:fc:90:9a:20:cf:f3:e3:e6:05:c2:63:82:50:ed:24:4b:72:
         d6:ac:ba:ea:29:ba:6d:21:c2:d4:cf:86:d6:59:66:3a:e0:7b:
         0f:53:6e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:52 2025 by rpki-client