Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/3137302e38322e3135362e302f32322d3234203d3e203532343638.roa
File:                     3137302e38322e3135362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          PcAtVtcmeTtFVOLZsYZkQWXnsLm+5rSpN7Tfftl4D/0=
Subject key identifier:   B3:5A:D6:65:4D:E5:8E:67:74:AF:46:A1:49:BB:1B:0F:B5:57:6F:53
Certificate issuer:       /CN=04D30653956EB19B20571B774DBED43F32A8824E
Certificate serial:       06EF626CB584A478CBF4DB5AA49E305B93F69927
Authority key identifier: 04:D3:06:53:95:6E:B1:9B:20:57:1B:77:4D:BE:D4:3F:32:A8:82:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04D30653956EB19B20571B774DBED43F32A8824E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/3137302e38322e3135362e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:17:47 +0000
ROA not before:           Tue 04 Feb 2025 18:12:47 +0000
ROA not after:            Tue 03 Feb 2026 18:17:47 +0000
asID:                     52468
IP address blocks:        170.82.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ef:62:6c:b5:84:a4:78:cb:f4:db:5a:a4:9e:30:5b:93:f6:99:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D30653956EB19B20571B774DBED43F32A8824E
        Validity
            Not Before: Feb  4 18:12:47 2025 GMT
            Not After : Feb  3 18:17:47 2026 GMT
        Subject: CN=B35AD6654DE58E6774AF46A149BB1B0FB5576F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:46:fe:0d:5c:a8:cb:07:cc:6e:3f:b4:2b:
                    c7:fb:68:ba:e0:c5:d8:37:d6:e3:1d:6f:25:61:88:
                    31:c6:14:ef:4d:cb:7c:41:a3:d5:f4:a3:f1:46:1a:
                    eb:f9:bb:e5:6b:b3:0c:f2:1b:2d:6b:ea:a5:eb:60:
                    ef:18:18:ab:ed:59:71:85:9a:cb:e2:85:0a:0b:48:
                    4c:5b:95:52:64:43:97:51:ad:8f:e6:04:60:9e:12:
                    d4:b9:65:bb:f4:14:c2:46:07:45:dd:45:88:92:d5:
                    47:af:76:a4:0c:cf:79:77:a7:f4:5b:7c:a3:0c:ad:
                    12:8a:c3:61:51:e2:ed:21:d6:63:c1:07:25:54:8b:
                    3a:3e:d3:e3:86:fa:22:54:af:eb:d4:f1:f4:f9:46:
                    97:ad:ed:c6:36:2e:e4:67:13:8e:e9:57:70:09:d9:
                    df:3b:8d:72:3f:5e:01:af:ba:09:8f:ba:15:66:52:
                    b0:d2:31:2e:77:c5:c1:75:9d:ed:49:4a:2f:2a:55:
                    15:17:ce:c7:2b:ce:70:f0:36:2d:dc:81:c5:b8:cd:
                    b5:65:05:ae:b1:72:a6:a8:02:2b:7a:77:ea:63:d4:
                    d2:0c:ff:2f:86:eb:e2:00:8a:f3:11:cf:1c:6b:88:
                    22:91:70:37:c5:08:fc:24:3c:9d:9b:bd:59:bc:7d:
                    e6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5A:D6:65:4D:E5:8E:67:74:AF:46:A1:49:BB:1B:0F:B5:57:6F:53
            X509v3 Authority Key Identifier:
                keyid:04:D3:06:53:95:6E:B1:9B:20:57:1B:77:4D:BE:D4:3F:32:A8:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/04D30653956EB19B20571B774DBED43F32A8824E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04D30653956EB19B20571B774DBED43F32A8824E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/3137302e38322e3135362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:f8:c0:09:9c:dd:eb:e4:c3:ad:44:44:f7:88:97:1d:11:f5:
         40:5d:15:ce:8b:5d:21:52:2d:55:77:a4:8d:5d:38:d6:1c:ba:
         2a:82:54:0d:74:a2:e3:ea:b7:7c:f2:bf:9b:64:16:63:2c:78:
         de:6c:84:6b:66:fb:25:12:9f:4f:0d:f1:8a:2b:2c:61:c1:15:
         fb:9e:ca:95:0a:4a:b9:0e:66:ed:27:0d:05:2f:c5:c9:a6:d1:
         3e:ee:28:fa:d6:61:75:97:ee:fe:97:9d:da:92:51:3f:12:34:
         67:79:79:ae:bd:ce:9e:46:e5:4e:10:58:f1:8b:b6:8a:8a:ea:
         07:5f:e7:f0:d4:a7:f3:bd:53:da:78:02:e2:c2:25:1b:0b:c6:
         4f:fb:d0:41:78:32:25:8c:5f:62:4f:8b:34:fc:d3:6f:4f:f7:
         67:1e:8e:3e:bb:79:32:a6:33:e0:0b:6e:09:45:77:de:0f:88:
         bb:db:2f:78:a4:50:f2:73:3f:d9:32:4e:65:c7:aa:8b:de:c1:
         05:64:d2:8e:91:1c:b0:25:93:8d:65:e0:e5:72:91:78:aa:ee:
         2b:c7:c5:f0:c5:a9:1d:50:44:25:56:f7:86:04:0e:6f:d4:c2:
         17:f3:fc:c1:ae:e1:08:fe:76:f1:97:32:d9:97:0c:e6:5a:b1:
         47:10:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:22 2025 by rpki-client