Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37372e302f32342d3234203d3e203131353632.roa
File:                     3137302e3234362e37372e302f32342d3234203d3e203131353632.roa (raw, json)
Hash identifier:          g0g7/KAxW7Ag+bK5EBTRidmArudcLFIGNBWY+FvBhCY=
Subject key identifier:   40:B2:46:4E:F0:A2:F8:64:48:15:6E:B2:5C:7E:34:E1:04:6B:8C:6F
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       5D2B159AE23BB4A8C1DF12AAB6F0795C22E3BA51
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37372e302f32342d3234203d3e203131353632.roa
Signing time:             Tue 04 Feb 2025 18:00:52 +0000
ROA not before:           Tue 04 Feb 2025 17:55:52 +0000
ROA not after:            Tue 03 Feb 2026 18:00:52 +0000
asID:                     11562
IP address blocks:        170.246.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2b:15:9a:e2:3b:b4:a8:c1:df:12:aa:b6:f0:79:5c:22:e3:ba:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Feb  4 17:55:52 2025 GMT
            Not After : Feb  3 18:00:52 2026 GMT
        Subject: CN=40B2464EF0A2F86448156EB25C7E34E1046B8C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:87:2e:76:6d:3c:57:4b:7f:01:ad:60:2e:
                    e4:20:3f:72:78:7d:ac:11:a6:65:2f:33:64:f0:51:
                    19:e6:8b:e6:9d:ca:bd:d9:dc:c3:ce:6e:70:9c:cf:
                    ff:7a:04:4a:f9:63:7b:c1:8d:e5:77:68:dc:f8:5b:
                    83:16:4a:be:c2:60:3e:da:ec:ec:6c:27:cd:cc:58:
                    a9:bf:aa:35:21:35:a3:ba:39:2f:1b:43:7a:03:f4:
                    b5:b9:da:14:6e:4f:76:95:2a:36:71:45:5c:4e:32:
                    25:69:6b:16:e4:66:74:d7:6b:c0:de:af:7d:e6:68:
                    41:e1:76:2d:ad:b5:45:e8:23:82:28:e8:31:71:65:
                    e1:d3:e6:b7:9a:b1:94:ba:6a:dd:87:cf:2c:d3:a7:
                    c3:30:4f:27:20:6b:c2:9a:cb:70:a8:5b:1a:e2:ef:
                    a9:ef:f1:6a:0b:4d:7e:46:c6:af:da:bd:c4:e3:a9:
                    4e:5d:64:3b:3d:33:da:51:13:d8:e4:9c:83:e3:b2:
                    65:4c:98:12:88:03:2e:25:c5:be:1e:b6:c8:0b:d1:
                    54:25:6e:fa:44:cc:29:f2:ee:f5:f2:ee:5f:ca:27:
                    e9:ef:3a:a5:13:81:8d:8a:70:9f:2c:eb:21:0f:cd:
                    2a:0f:aa:60:94:9e:b6:6a:74:98:2e:17:8c:25:85:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:46:4E:F0:A2:F8:64:48:15:6E:B2:5C:7E:34:E1:04:6B:8C:6F
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37372e302f32342d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d5:5c:3c:f2:a3:16:cc:58:64:b0:b0:47:4e:d6:cb:56:29:
         5a:ac:c7:4a:8d:77:57:5b:d0:04:28:1a:e9:ec:59:5a:ad:27:
         1f:ab:9d:0a:45:58:99:00:f4:46:8d:f3:84:64:ff:23:9e:98:
         42:a0:da:a9:1c:7d:4b:11:ca:1b:8e:de:50:74:cf:74:a8:e0:
         95:ff:64:ab:b9:02:ab:3a:43:d3:50:5b:e4:a0:f7:24:26:31:
         32:e4:51:df:91:33:a6:2d:84:b0:f4:b3:15:69:53:de:91:51:
         0e:6c:22:6b:e3:be:f9:c0:99:dd:d2:7f:7e:ef:6e:7e:89:60:
         b9:d4:76:e2:6e:62:ca:61:c8:8c:8c:b1:af:b7:2f:6b:e2:81:
         95:e3:04:b4:bc:85:0d:cd:9d:4f:0c:fa:96:4e:ec:46:dd:36:
         31:55:21:fb:c2:4f:00:32:e6:81:d9:76:75:bc:67:d0:de:2b:
         f8:e1:d6:ce:6e:b5:e7:1f:3f:00:97:22:6a:75:90:49:33:b8:
         88:4c:7f:22:e2:9c:00:7c:fb:c9:78:05:b2:42:cb:48:77:a7:
         4c:30:cf:5f:d0:fc:41:03:76:41:1e:ff:e7:69:d4:1d:b7:6b:
         f1:4c:70:c6:05:82:62:74:83:a7:d3:8d:e9:82:c0:e8:ba:eb:
         91:43:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:06 2025 by rpki-client