Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3137302e3233392e3135322e302f32332d3233203d3e20323633373030.roa
File:                     3137302e3233392e3135322e302f32332d3233203d3e20323633373030.roa (raw, json)
Hash identifier:          mZVrFMiiMTgaYdaFcRvPBao7s1P1MN80zOs5miIVH18=
Subject key identifier:   AD:AD:E1:96:6B:9E:83:6D:F1:A4:64:AB:E7:5D:32:C0:42:E8:2B:FA
Certificate issuer:       /CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Certificate serial:       768488A7D872196287655100909B018C653B6003
Authority key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3137302e3233392e3135322e302f32332d3233203d3e20323633373030.roa
Signing time:             Tue 04 Feb 2025 18:21:53 +0000
ROA not before:           Tue 04 Feb 2025 18:16:53 +0000
ROA not after:            Tue 03 Feb 2026 18:21:53 +0000
asID:                     263700
IP address blocks:        170.239.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:84:88:a7:d8:72:19:62:87:65:51:00:90:9b:01:8c:65:3b:60:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
        Validity
            Not Before: Feb  4 18:16:53 2025 GMT
            Not After : Feb  3 18:21:53 2026 GMT
        Subject: CN=ADADE1966B9E836DF1A464ABE75D32C042E82BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:51:3e:c0:12:09:2b:bc:ca:b5:b6:72:d7:
                    d4:6c:45:7e:f3:44:fd:87:a6:08:26:66:8d:c8:e2:
                    c4:b7:91:c5:ef:74:d6:27:2f:b6:8c:e1:24:18:6e:
                    58:d9:da:a6:6a:7a:2e:56:40:c1:a4:cd:11:08:6e:
                    eb:d2:da:f7:f8:e2:65:42:ea:9b:04:7e:75:9b:c8:
                    09:d1:54:73:a8:5d:6e:c2:1c:e5:e8:72:cb:5a:fb:
                    cd:82:8e:2e:11:01:71:85:bd:31:bd:f1:c1:99:77:
                    13:85:64:36:ea:1e:85:11:6a:e3:4f:c2:79:2d:ae:
                    79:fd:a2:3f:8b:ae:d5:87:0a:7a:6e:c1:c2:e4:01:
                    85:26:c4:e4:12:23:ee:e0:6f:b2:a0:c5:10:d4:d1:
                    97:0a:d9:d2:b4:d1:2f:e7:9a:b8:aa:5b:96:49:17:
                    97:bf:35:bf:53:22:7d:6e:24:2c:c0:6f:91:3b:2d:
                    7d:63:10:b6:45:f5:67:24:85:8d:2c:01:76:d7:61:
                    13:99:6f:4e:5a:4a:91:6e:aa:ba:99:0a:66:d3:eb:
                    81:d3:d4:1a:bc:59:95:6d:0e:e5:d2:ee:0f:76:aa:
                    af:ab:25:f9:f2:b8:a7:02:56:77:31:4f:26:58:91:
                    be:48:c9:b7:f6:75:75:a8:81:b8:e7:f2:72:24:9f:
                    c3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:E1:96:6B:9E:83:6D:F1:A4:64:AB:E7:5D:32:C0:42:E8:2B:FA
            X509v3 Authority Key Identifier:
                keyid:B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3137302e3233392e3135322e302f32332d3233203d3e20323633373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:77:4c:b4:ea:af:ee:33:8d:ef:0d:53:1c:e6:38:e1:39:df:
         6b:5f:81:21:1d:13:bb:40:0e:33:3a:b4:23:57:cf:34:6c:f9:
         4f:f4:d4:29:9c:42:91:22:22:1c:9e:db:cb:c7:57:4a:88:20:
         8a:35:95:b6:a7:70:93:fe:de:a9:af:65:8e:e9:fd:96:bd:76:
         9c:73:63:8e:0c:85:bc:f9:a0:e2:fe:ff:7f:c7:75:f5:c7:d7:
         ab:05:d3:16:47:77:89:80:18:7c:3b:24:2f:64:13:8a:26:ef:
         fc:c8:3f:bf:52:21:a3:f2:a6:d5:fb:ee:c0:e9:bc:d4:bc:fc:
         ee:0e:ab:60:5c:81:6a:fb:c9:99:53:f2:08:f1:cc:e7:c3:20:
         4c:70:79:58:ca:28:b0:c1:68:4f:55:a4:aa:48:7f:4f:98:9f:
         1b:f9:2a:47:5a:19:16:de:18:9c:04:a0:f6:7c:de:9a:3b:48:
         fd:75:2e:09:ed:db:c2:5b:d0:40:e0:c0:5f:26:f2:a0:d9:90:
         51:e6:f1:ce:1f:fe:d0:0f:c9:6d:2f:ed:79:b2:17:ce:df:22:
         ad:e0:eb:a5:87:3a:9f:ac:5a:d4:50:e6:09:d5:af:a1:87:6f:
         47:65:ae:21:b9:69:e4:f3:6a:42:04:63:a3:43:4f:3d:c5:78:
         df:98:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:27 2025 by rpki-client