Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135382e302f32342d3234203d3e20323637383332.roa
File:                     3137302e3234352e3135382e302f32342d3234203d3e20323637383332.roa (raw, json)
Hash identifier:          u9Wft9fLyXtaVjIZLbOeFT8lPOmIMMJ2ssrAjObKTc4=
Subject key identifier:   BA:9F:A6:B0:36:9C:C4:DB:7D:70:BF:57:F1:C4:E5:43:70:85:E7:37
Certificate issuer:       /CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
Certificate serial:       66B3196B90A611B8017E4E8773D4DCF97AA3D124
Authority key identifier: ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135382e302f32342d3234203d3e20323637383332.roa
Signing time:             Tue 04 Feb 2025 18:40:41 +0000
ROA not before:           Tue 04 Feb 2025 18:35:41 +0000
ROA not after:            Tue 03 Feb 2026 18:40:41 +0000
asID:                     267832
IP address blocks:        170.245.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b3:19:6b:90:a6:11:b8:01:7e:4e:87:73:d4:dc:f9:7a:a3:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
        Validity
            Not Before: Feb  4 18:35:41 2025 GMT
            Not After : Feb  3 18:40:41 2026 GMT
        Subject: CN=BA9FA6B0369CC4DB7D70BF57F1C4E5437085E737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:a7:2c:c5:23:ea:42:23:2f:b2:ec:ab:a7:
                    91:dc:42:f5:6f:60:be:4c:ee:68:e3:fd:da:91:51:
                    7f:29:a3:f2:99:81:66:ba:57:eb:48:6a:f8:58:1c:
                    99:a8:65:fa:cf:33:29:e6:71:0b:b7:2d:f0:38:6a:
                    11:dd:0e:83:ca:9d:59:ec:32:8a:65:21:de:e3:78:
                    76:79:73:be:18:dd:79:f7:c1:c7:da:7d:67:ae:64:
                    b4:e3:8f:2c:f2:fb:df:8d:c7:fd:a2:3f:42:ee:93:
                    d7:08:7e:b8:93:9a:57:37:4a:65:bd:55:91:f8:2e:
                    f4:8a:9b:1e:40:c9:9d:6f:46:b0:9a:8f:c8:e3:29:
                    ba:e6:71:14:f9:25:3d:a1:91:40:a0:ac:3b:39:a5:
                    bd:7b:c6:17:a3:79:d2:65:96:7b:7c:44:8d:cb:6a:
                    04:f0:63:6b:82:a5:54:7b:65:a1:80:fd:00:f8:dc:
                    8f:06:82:cb:5e:44:56:be:38:fa:0d:97:b5:c7:24:
                    1d:59:f7:20:1d:0b:1f:56:a6:12:a2:a9:d7:93:aa:
                    f2:34:78:f3:bc:08:e6:e9:37:1e:f0:12:44:f7:3f:
                    a8:46:09:2d:52:86:03:1a:60:24:80:57:69:1d:ad:
                    54:ca:19:a3:80:8d:ce:e4:3c:85:4c:f8:68:b6:8a:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9F:A6:B0:36:9C:C4:DB:7D:70:BF:57:F1:C4:E5:43:70:85:E7:37
            X509v3 Authority Key Identifier:
                keyid:ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135382e302f32342d3234203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c3:ce:56:89:35:d9:cb:05:20:b4:f5:19:c2:ee:fe:7c:b5:
         b0:0a:7c:8c:7b:aa:c5:02:62:a9:a2:5d:c4:6e:9a:0c:47:96:
         10:9e:b4:95:8d:51:66:3a:e8:88:43:e2:59:cf:a3:3a:25:c5:
         34:6f:b8:5e:09:a2:b6:3d:3f:3d:57:fd:fe:b3:8c:57:77:0a:
         b2:e1:98:7a:13:8e:6d:f1:9f:b7:2c:d9:a5:0f:63:47:91:59:
         68:ca:70:96:3c:45:87:9b:91:3c:63:47:89:64:fa:58:13:0a:
         57:cf:92:ea:e5:32:d0:65:c4:76:99:59:f8:72:57:48:47:50:
         4d:64:df:ff:e3:c0:f7:7c:d2:0f:3f:4e:e4:ea:3b:85:6f:0a:
         09:e0:8d:8b:98:69:ea:99:6a:6d:f4:9f:97:5f:e1:ee:66:9b:
         7d:06:eb:ae:5e:57:77:f7:5b:83:20:36:5c:15:8c:28:ac:95:
         7b:1b:d6:ae:8a:08:03:c8:4f:65:6d:e8:35:b9:48:0c:ee:f0:
         8b:f1:10:f9:56:7d:cb:4a:be:16:ac:a7:3d:f0:58:1a:6a:9f:
         18:f0:3f:a2:a2:2a:c9:31:bc:7e:d0:a8:5f:0f:29:52:df:5d:
         8b:3b:a0:cd:2d:fa:44:2f:74:1a:29:e7:a2:07:bf:fb:b1:37:
         15:94:61:93
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUZrMZa5CmEbgBfk6Hc9Tc+Xqj0SQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQzNUExMzY0NDI1NzFGQkZCMjM0ODdFN0ZDRjU3OUE3
Q0FFNkJCQjAeFw0yNTAyMDQxODM1NDFaFw0yNjAyMDMxODQwNDFaMDMxMTAvBgNV
BAMTKEJBOUZBNkIwMzY5Q0M0REI3RDcwQkY1N0YxQzRFNTQzNzA4NUU3MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrcKcsxSPqQiMvsuyrp5HcQvVv
YL5M7mjj/dqRUX8po/KZgWa6V+tIavhYHJmoZfrPMynmcQu3LfA4ahHdDoPKnVns
MoplId7jeHZ5c74Y3Xn3wcfafWeuZLTjjyzy+9+Nx/2iP0Luk9cIfriTmlc3SmW9
VZH4LvSKmx5AyZ1vRrCaj8jjKbrmcRT5JT2hkUCgrDs5pb17xhejedJllnt8RI3L
agTwY2uCpVR7ZaGA/QD43I8GgsteRFa+OPoNl7XHJB1Z9yAdCx9WphKiqdeTqvI0
ePO8CObpNx7wEkT3P6hGCS1ShgMaYCSAV2kdrVTKGaOAjc7kPIVM+Gi2ipInAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUup+msDacxNt9cL9X8cTlQ3CF5zcwHwYDVR0j
BBgwFoAU7TWhNkQlcfv7I0h+f89Xmnyua7swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNTBBOTkxNjdCRTFDQzM5MzcwQUI0Q0I5RTNDRTdDNTM1
QjdDNkFCQzcxOEUxMDQ3NjI5Qzk2QTQ4NkMzRkY1LzAvRUQzNUExMzY0NDI1NzFG
QkZCMjM0ODdFN0ZDRjU3OUE3Q0FFNkJCQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRDM1QTEzNjQ0MjU3MUZCRkIy
MzQ4N0U3RkNGNTc5QTdDQUU2QkJCLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzUwQTk5MTY3QkUxQ0MzOTM3MEFCNENCOUUzQ0U3QzUzNUI3QzZBQkM3
MThFMTA0NzYyOUM5NkE0ODZDM0ZGNS8wLzMxMzczMDJlMzIzNDM1MmUzMTM1Mzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzczODMzMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
9Z4wDQYJKoZIhvcNAQELBQADggEBAITDzlaJNdnLBSC09RnC7v58tbAKfIx7qsUC
YqmiXcRumgxHlhCetJWNUWY66IhD4lnPozolxTRvuF4JorY9Pz1X/f6zjFd3CrLh
mHoTjm3xn7cs2aUPY0eRWWjKcJY8RYebkTxjR4lk+lgTClfPkurlMtBlxHaZWfhy
V0hHUE1k3//jwPd80g8/TuTqO4VvCgngjYuYaeqZam30n5df4e5mm30G665eV3f3
W4MgNlwVjCislXsb1q6KCAPIT2Vt6DW5SAzu8IvxEPlWfctKvhaspz3wWBpqnxjw
P6KiKskxvH7QqF8PKVLfXYs7oM0t+kQvdBop56IHv/uxNxWUYZM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:41 2025 by rpki-client