Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32332d3233203d3e203532353130.roa
File:                     3137302e3234352e34382e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          svtCWX2KYpb/Yoa1sY6sqTrTcX/Q8qRlrIMZLveCd8Y=
Subject key identifier:   F2:06:97:37:EB:19:DE:AC:14:26:69:F1:FE:E8:73:09:DD:95:72:34
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       50F517E5826EFA433CAFBF17EFE9647EB808C7DE
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 04 Feb 2025 18:31:46 +0000
ROA not before:           Tue 04 Feb 2025 18:26:46 +0000
ROA not after:            Tue 03 Feb 2026 18:31:46 +0000
asID:                     52510
IP address blocks:        170.245.48.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:17:e5:82:6e:fa:43:3c:af:bf:17:ef:e9:64:7e:b8:08:c7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Feb  4 18:26:46 2025 GMT
            Not After : Feb  3 18:31:46 2026 GMT
        Subject: CN=F2069737EB19DEAC142669F1FEE87309DD957234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:6e:57:9d:2b:f5:02:a1:72:11:ac:42:00:
                    72:fd:d2:52:be:50:25:81:ba:c5:38:08:bd:96:a2:
                    b0:b5:d7:0a:a3:89:2b:32:ec:90:cd:1a:b6:d0:5a:
                    56:72:ef:95:51:6f:ed:eb:50:71:81:14:a7:f5:a2:
                    53:89:a8:f1:dd:ee:22:06:64:55:4e:49:a7:4e:ae:
                    ad:39:3c:b9:95:7e:85:30:23:7b:eb:95:63:7f:ee:
                    75:9c:dd:74:f9:92:e9:bb:64:9b:81:e7:87:c8:aa:
                    f2:dd:e0:35:25:a8:9d:c1:6d:78:af:f5:2e:d0:35:
                    02:6f:fa:41:95:1e:02:16:f7:ea:e0:24:bf:11:57:
                    a8:37:f5:4f:79:44:78:94:38:ad:7a:28:cc:cd:3c:
                    88:18:a2:63:d1:53:ce:04:27:e7:6d:e0:ed:ac:5d:
                    7e:e0:f8:b1:df:4f:79:7a:d2:b2:4d:26:73:a1:7e:
                    08:a1:7e:85:53:e4:b6:6c:eb:b3:5e:26:58:e6:db:
                    13:d3:28:ff:49:b5:01:70:8a:d2:ab:a5:62:d0:77:
                    73:b8:b9:88:de:6a:02:44:71:78:88:df:a1:a7:93:
                    3b:37:04:e7:89:af:4e:2d:5b:65:4e:cd:76:b5:c8:
                    a7:a5:dd:5e:83:8f:27:c6:17:79:41:90:d2:a8:02:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:06:97:37:EB:19:DE:AC:14:26:69:F1:FE:E8:73:09:DD:95:72:34
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:8f:b8:15:71:8a:ea:b0:4a:59:d9:87:51:40:11:10:5f:5a:
         ae:51:a9:16:c5:5a:f9:a0:8c:3f:c6:8b:fc:40:32:0e:8a:82:
         f4:8e:f5:07:16:bd:4c:62:d9:a0:69:f9:13:90:2d:09:b2:c7:
         60:01:c6:43:9e:75:9c:2d:6b:76:25:e1:07:f7:6a:ea:ee:69:
         d5:71:b1:f0:f4:95:32:b5:38:1b:3d:40:23:eb:43:cb:d9:94:
         26:04:80:a5:f4:b2:e2:98:5c:86:82:fb:de:66:e9:58:b9:fd:
         e3:f1:51:a5:cf:58:2d:90:4a:b8:00:88:a3:9c:e7:53:ba:37:
         a4:eb:a4:15:62:45:d6:41:6c:89:1f:74:e3:9a:23:67:1f:23:
         9c:e9:6c:02:06:55:cf:4a:43:ec:1d:1c:11:51:5f:71:d0:90:
         fb:f4:8f:0c:90:c0:bb:41:c1:e5:91:86:d7:54:d3:ab:23:48:
         b9:1a:ac:96:2b:9b:86:e0:11:b1:af:7b:e5:c4:3d:ff:71:9f:
         d2:a6:f4:61:2e:35:dd:e8:75:c2:73:4a:06:d4:38:23:c1:8f:
         37:4c:e5:d9:cc:55:7c:50:b3:88:bd:b5:a1:15:00:89:79:19:
         45:05:a9:d5:65:91:bb:57:10:46:68:98:d6:49:a7:90:58:a4:
         a2:9b:9d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:13:42 2025 by rpki-client