Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32322d3232203d3e203532353130.roa
File:                     3137302e3234352e34382e302f32322d3232203d3e203532353130.roa (raw, json)
Hash identifier:          zudmRPTesgFrnsNEhpRJvvqIz4gcknUlLm75L3sBuWk=
Subject key identifier:   FD:44:F1:80:0C:9F:6E:77:46:55:79:97:BC:77:F3:D8:9D:63:88:09
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       078BA8923774FD08944443DC6DFA9C38778F47DD
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32322d3232203d3e203532353130.roa
Signing time:             Tue 04 Feb 2025 18:31:43 +0000
ROA not before:           Tue 04 Feb 2025 18:26:43 +0000
ROA not after:            Tue 03 Feb 2026 18:31:43 +0000
asID:                     52510
IP address blocks:        170.245.48.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8b:a8:92:37:74:fd:08:94:44:43:dc:6d:fa:9c:38:77:8f:47:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Feb  4 18:26:43 2025 GMT
            Not After : Feb  3 18:31:43 2026 GMT
        Subject: CN=FD44F1800C9F6E7746557997BC77F3D89D638809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:33:b6:8e:24:d2:f3:43:cf:af:c8:6d:35:60:
                    fe:d4:09:18:43:be:af:c4:0d:fd:56:f2:3d:8c:72:
                    82:42:68:cc:39:3b:d1:7b:4e:5c:f1:6a:f6:b9:25:
                    04:7e:2a:ac:1a:4a:33:2b:07:ae:fd:24:9c:ec:73:
                    38:93:fa:38:40:fa:72:d7:7e:e2:e9:5b:46:b0:89:
                    21:02:d5:e5:3b:64:61:32:8c:8e:0a:da:79:7e:89:
                    1e:fb:1e:33:54:98:1d:f2:4a:1e:a4:f3:93:8d:e8:
                    18:9b:e2:48:7f:1b:ae:65:60:36:d8:43:26:ef:17:
                    92:32:f2:55:bf:fb:0e:1a:e8:41:00:5e:1f:9d:93:
                    71:62:cd:13:4d:bd:40:df:cb:2d:1d:26:11:f1:83:
                    7f:70:79:61:5a:3b:32:75:2d:74:84:46:48:a3:c8:
                    12:fe:50:58:44:3f:a8:e4:39:a4:6a:7d:07:ce:18:
                    df:ad:59:70:6f:16:ca:85:33:bc:b0:00:88:28:49:
                    2f:7a:b9:e0:4d:f8:e0:f6:b1:93:c5:d5:8e:89:60:
                    21:c8:b9:ca:22:79:9d:c1:72:12:11:7a:13:df:60:
                    55:39:62:64:6e:b6:95:64:7f:d4:44:9b:06:1d:37:
                    e3:c0:9a:84:8d:07:bb:1e:33:d9:8f:eb:a2:7b:ec:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:44:F1:80:0C:9F:6E:77:46:55:79:97:BC:77:F3:D8:9D:63:88:09
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32322d3232203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:84:ac:d3:5a:ba:8b:98:a4:7d:73:d2:ef:1a:8f:e6:2d:e2:
         e3:99:14:5e:22:aa:c4:a1:4c:c2:4f:95:ec:bb:72:77:fc:5c:
         6c:f1:14:4c:57:1b:bd:fa:f0:37:0e:25:22:45:cd:ca:c1:d6:
         c4:f0:22:84:19:88:8e:23:e0:ff:00:10:09:01:ab:aa:9f:14:
         ff:67:c3:5b:7e:cb:80:6c:9d:ae:e7:d8:2b:99:1e:8c:ff:85:
         0f:73:68:89:d7:dc:21:3a:cc:b5:08:79:5e:1a:ec:41:11:bd:
         d5:a6:58:8f:86:f3:1a:7b:9d:0a:92:a8:de:00:f3:ae:fc:bd:
         58:17:d1:be:8e:19:85:dc:3c:91:11:39:b2:b2:e8:6b:94:f8:
         f7:1d:4c:d9:66:72:31:19:97:6c:4f:c2:43:56:38:f2:27:4f:
         67:0f:46:ed:d0:83:6e:57:3d:bb:5d:a0:36:64:cb:c2:a0:b6:
         d1:31:3a:4d:c3:4c:a6:89:82:7b:41:ca:94:70:c4:57:35:a5:
         7b:b3:79:70:16:64:c2:6f:27:69:46:69:19:4d:89:a6:d9:d5:
         6e:7e:64:1d:7d:a9:9b:ea:87:bb:57:75:92:66:74:85:d3:57:
         c8:b4:97:3f:d8:dd:52:de:65:e1:96:81:2f:c0:8a:0b:d3:48:
         80:f4:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:53 2025 by rpki-client