Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa
File:                     3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa (raw, json)
Hash identifier:          lZgBQCF6sdl80sNsR95OPfxfCRFzXT86NqaLdHlm6u0=
Subject key identifier:   89:86:3A:D3:04:00:EF:33:81:24:44:4F:AB:5D:8D:44:78:AD:B8:37
Certificate issuer:       /CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
Certificate serial:       2C54FE31B798FF710161F7D92345B493B96BB533
Authority key identifier: 7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa
Signing time:             Tue 04 Feb 2025 18:48:38 +0000
ROA not before:           Tue 04 Feb 2025 18:43:38 +0000
ROA not after:            Tue 03 Feb 2026 18:48:38 +0000
asID:                     264605
IP address blocks:        170.254.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:54:fe:31:b7:98:ff:71:01:61:f7:d9:23:45:b4:93:b9:6b:b5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
        Validity
            Not Before: Feb  4 18:43:38 2025 GMT
            Not After : Feb  3 18:48:38 2026 GMT
        Subject: CN=89863AD30400EF338124444FAB5D8D4478ADB837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:e8:36:ad:68:19:30:07:bf:2b:37:80:8e:
                    8f:3f:5d:a1:13:d6:35:d7:e4:25:5f:15:32:45:21:
                    15:83:94:17:25:1d:f8:2c:3d:72:fa:c4:e8:b3:39:
                    86:49:a1:e6:fa:7c:c2:ea:7f:7a:e9:ee:f4:f8:09:
                    b2:fd:7a:2d:a3:a2:cc:5f:c4:ac:91:ec:5c:30:71:
                    dd:ba:52:7a:62:71:79:9c:ce:e9:c8:87:28:a1:f5:
                    c1:5f:d7:66:6f:f7:a0:51:37:c3:63:24:c2:20:b5:
                    c6:cf:25:f0:ba:b4:b9:65:af:59:24:e3:51:9b:56:
                    10:9e:96:04:12:b0:dd:b0:d4:58:c8:53:0f:ba:8d:
                    88:9f:66:97:27:5e:b6:a9:c3:cf:e4:5a:45:47:b0:
                    4c:b3:4e:5b:ab:4b:60:30:4a:b7:a4:d6:62:bf:b9:
                    2b:14:0b:52:f7:92:d1:4f:fc:61:03:ea:73:36:24:
                    72:94:ac:04:e4:70:85:fc:39:6a:b2:af:11:62:98:
                    5e:d1:4f:29:87:af:f4:d5:22:09:81:88:10:3b:8e:
                    3d:5c:6b:51:a1:50:8c:12:00:33:c1:6b:38:6a:ce:
                    53:19:aa:c3:15:90:f5:80:02:75:37:79:03:c1:d4:
                    15:8b:01:0d:fb:54:4a:72:a8:18:94:69:0b:e6:92:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:3A:D3:04:00:EF:33:81:24:44:4F:AB:5D:8D:44:78:AD:B8:37
            X509v3 Authority Key Identifier:
                keyid:7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:3e:d5:5e:c5:f3:54:73:57:9d:cf:29:a0:8f:d3:e1:23:
         26:a7:cf:e5:78:95:0b:6f:c5:9f:55:8e:4d:10:86:53:c7:fd:
         3c:84:c5:a1:5f:11:94:44:65:15:cc:01:20:55:83:6d:83:9e:
         0a:68:24:3a:d1:9a:69:e7:46:c1:37:51:12:41:ef:d2:f4:2b:
         f2:a4:5b:d1:e1:7e:34:d2:08:51:fd:44:9c:fc:18:d9:bc:f8:
         27:25:34:93:c3:8d:aa:4f:e3:e2:92:d0:8c:f7:ce:c1:a3:47:
         01:79:12:20:ec:08:e8:ce:6a:95:7a:83:61:bb:e0:48:8c:b4:
         a4:79:9c:31:f6:46:9f:ae:00:f3:c4:87:ce:f9:a1:b0:e9:b7:
         27:c3:da:9d:ec:44:00:3c:91:76:03:a3:96:57:06:8c:29:1b:
         3c:e5:74:81:11:40:4a:01:33:c3:ac:4b:f1:a3:78:2e:f2:fe:
         e2:48:f5:72:c0:a9:6f:19:4c:e0:eb:9d:83:22:06:89:aa:ce:
         20:ea:12:ae:45:1f:6f:71:41:56:83:82:3c:d4:6f:00:62:b0:
         7a:26:d7:dc:a3:9f:0d:f7:98:b3:f4:69:51:8c:88:90:37:d3:
         f0:2c:a1:c1:84:0c:9a:6d:fa:ee:bc:0b:22:d3:55:4d:aa:78:
         8f:ae:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:54:44 2025 by rpki-client