Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa
File:                     3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa (raw, json)
Hash identifier:          BWEo+niz345kiwzHXp125pD1osVAWCc4K2SYUNVzzpI=
Subject key identifier:   90:A6:46:7D:F7:FA:7B:FF:98:C7:E1:D0:84:B1:0C:B2:14:72:BD:A7
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       597E59A3228A389F6CAF05710826E35CFD27C5F1
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa
Signing time:             Tue 04 Feb 2025 18:49:25 +0000
ROA not before:           Tue 04 Feb 2025 18:44:25 +0000
ROA not after:            Tue 03 Feb 2026 18:49:25 +0000
asID:                     263740
IP address blocks:        170.246.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7e:59:a3:22:8a:38:9f:6c:af:05:71:08:26:e3:5c:fd:27:c5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Feb  4 18:44:25 2025 GMT
            Not After : Feb  3 18:49:25 2026 GMT
        Subject: CN=90A6467DF7FA7BFF98C7E1D084B10CB21472BDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:fd:5c:0c:c8:50:24:b1:26:56:ec:be:dc:
                    c0:03:0e:7e:f2:25:9a:36:63:b1:3f:a7:f2:d4:c4:
                    26:33:c4:46:29:5e:9d:f0:0c:fe:bf:31:a9:20:2c:
                    b4:f8:4c:9e:08:31:ee:b3:06:0c:a8:40:8f:47:78:
                    e2:3e:c7:a9:8b:c5:da:ec:3d:92:64:aa:19:83:c0:
                    05:6b:c8:a1:96:8d:a4:e7:8f:3f:77:33:40:31:f3:
                    ae:aa:f1:34:38:d6:f4:b4:71:9c:b1:45:2e:12:77:
                    66:c8:24:37:21:2d:8e:5c:95:e7:b0:63:f6:f8:9c:
                    17:21:86:26:ce:cd:86:a9:87:95:92:ab:c4:76:be:
                    64:1d:6a:4d:49:94:57:ed:2e:35:2e:18:30:f2:87:
                    54:5a:b9:22:41:21:6a:31:db:48:6d:a3:83:44:c2:
                    a1:8b:87:b0:1b:47:1a:e2:02:93:f1:aa:f0:46:7c:
                    e6:38:13:f8:13:53:b0:d7:39:4c:9f:f1:db:c1:4b:
                    fc:d1:ff:d8:c7:e7:21:ca:a3:bb:01:40:36:8a:e2:
                    03:01:1b:83:ec:fb:6d:1b:7e:e4:23:b2:9f:a0:1f:
                    a0:71:d8:12:64:c4:7f:48:8f:03:ce:6d:cb:f8:83:
                    ae:79:ba:7f:95:93:b7:a4:ee:05:69:d7:41:d7:13:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A6:46:7D:F7:FA:7B:FF:98:C7:E1:D0:84:B1:0C:B2:14:72:BD:A7
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3137302e3234362e35322e302f32322d3232203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:86:85:3a:21:0a:69:c4:0f:e8:fd:ce:df:37:53:f1:35:
         7c:18:fc:58:97:3d:c6:db:93:61:83:ce:52:36:79:b1:96:78:
         bd:4a:4d:24:ee:91:55:7e:4b:62:de:7b:48:6e:23:27:4f:99:
         44:0a:68:9d:7f:a7:56:ad:41:05:06:1d:ac:ac:ff:8b:8a:13:
         11:1b:cf:84:bf:7b:b5:f7:01:cd:da:bd:a9:50:25:1f:9d:df:
         c4:01:de:de:50:0c:b4:81:48:3b:8f:1e:d1:6b:fb:56:37:9f:
         55:cc:22:f0:89:c6:ce:9e:0e:d3:30:ee:bc:ad:d9:d8:83:c1:
         5f:40:b1:07:c5:9e:23:de:96:d1:44:b0:bd:72:29:5f:fe:2f:
         a7:e6:c5:2f:a9:62:51:2e:75:f2:3b:d6:de:b4:8c:8f:b4:00:
         f9:93:33:44:62:4e:b9:ad:5f:2f:50:0a:0f:e9:51:df:b7:d7:
         4b:ba:cf:d3:7e:54:9b:52:aa:50:76:33:df:1b:ea:83:d7:ef:
         c7:65:27:2c:12:57:5b:78:b1:98:0e:38:7b:1a:36:ba:42:f2:
         c6:8e:df:e0:5f:0c:21:e2:00:2d:3e:dc:0e:e0:22:82:6a:32:
         ff:31:0b:8b:c4:4e:f9:4d:02:4c:2f:9a:b8:1a:79:ce:fc:21:
         e4:73:64:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:12 2025 by rpki-client