Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32342d3234203d3e203532353130.roa
File:                     3137302e3234352e34382e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          +iFJx5F9L5PN3Ie0x+NiO4cApMUBhZidf7Nc5wzcP5k=
Subject key identifier:   E2:81:E7:6C:15:C1:E4:99:3D:90:82:9D:64:F8:B5:A0:9C:EF:41:B5
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       1DDE7B874A8C15E3FA1DB3791605C00936EB0E06
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 04 Feb 2025 18:31:45 +0000
ROA not before:           Tue 04 Feb 2025 18:26:45 +0000
ROA not after:            Tue 03 Feb 2026 18:31:45 +0000
asID:                     52510
IP address blocks:        170.245.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:7b:87:4a:8c:15:e3:fa:1d:b3:79:16:05:c0:09:36:eb:0e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Feb  4 18:26:45 2025 GMT
            Not After : Feb  3 18:31:45 2026 GMT
        Subject: CN=E281E76C15C1E4993D90829D64F8B5A09CEF41B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:03:c9:f8:ea:53:03:c7:b5:b6:0b:63:81:71:
                    0f:8f:aa:c5:bb:8b:99:6a:a3:34:50:77:e1:6b:6c:
                    78:c0:e0:b6:24:33:d5:aa:33:23:c3:51:0c:1e:7e:
                    75:b4:c4:41:93:f5:05:a5:47:c8:b8:4d:e4:f5:d1:
                    a3:51:39:71:f6:b8:c8:97:e0:53:40:f3:8b:58:31:
                    5b:3c:ec:23:a1:27:c1:d4:9a:b0:60:35:88:dd:bb:
                    d1:a6:1b:c0:84:ff:97:0a:84:e5:36:4e:e6:d4:fa:
                    8b:cf:05:ec:0d:c9:b9:ac:3c:99:da:fd:fc:26:98:
                    66:4b:79:6c:4b:ca:d5:a7:98:7a:50:30:37:48:31:
                    03:9d:ea:2d:03:eb:de:d6:75:34:3e:2c:e2:22:61:
                    5f:aa:46:22:1a:17:04:1c:fb:1c:d8:a0:00:17:74:
                    90:dd:95:7a:2f:70:2d:82:bc:24:1f:8d:2c:86:b0:
                    e5:8d:97:6e:51:55:bd:84:b3:44:df:68:68:38:50:
                    c2:09:5e:c8:a6:b9:48:69:fb:fe:6c:04:c7:de:95:
                    21:4b:57:c2:c2:ab:c0:b9:2a:5e:2a:15:9a:e4:80:
                    40:d7:2f:cf:35:16:a9:8f:9f:ec:3a:71:0c:cf:88:
                    e0:81:9e:0d:27:16:5b:d7:fa:d7:c3:67:da:60:e3:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:E7:6C:15:C1:E4:99:3D:90:82:9D:64:F8:B5:A0:9C:EF:41:B5
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e6:34:17:fa:e8:76:f8:76:f5:f6:2f:cc:99:5b:98:a8:24:
         52:7f:fd:ee:82:b0:80:6d:82:dd:62:7b:8f:fe:f8:3c:66:99:
         98:80:af:1d:6b:ae:67:d5:a3:87:e3:3d:ef:d0:f8:72:93:fa:
         cd:08:7a:53:16:a2:9d:3a:12:53:5a:31:1f:0b:e9:c7:b0:e9:
         29:dc:3f:32:43:23:83:ce:7c:5b:44:68:0c:1d:9d:3c:35:bd:
         78:5f:66:a6:93:a8:26:79:48:3b:3d:64:69:b6:6b:bc:d5:b9:
         9e:57:61:45:8a:9f:6e:e7:e1:c5:d1:20:10:71:43:23:ec:3d:
         6a:6e:8a:64:7a:33:1b:a0:87:80:40:02:fc:d3:fd:a7:9f:75:
         40:de:4e:0e:39:1c:e7:7b:cc:e2:be:0a:f6:95:7e:1f:98:43:
         17:04:e9:89:87:e6:a4:23:57:1e:30:1c:8e:28:77:db:87:a1:
         52:14:a7:26:46:31:c1:c9:00:e3:3e:74:20:4a:6f:11:d7:d3:
         ff:ba:ab:dc:08:d9:fb:e1:71:e1:02:6b:1d:d4:38:64:f9:35:
         d9:69:0a:fd:5b:62:94:02:1f:b5:9a:65:1d:9e:b1:9f:9f:d8:
         f3:ee:32:ae:f3:0e:a5:51:13:17:9d:5a:6d:aa:87:91:f2:ec:
         f3:81:08:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHd57h0qMFeP6HbN5FgXACTbrDgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNTAyMDQxODI2NDVaFw0yNjAyMDMxODMxNDVaMDMxMTAvBgNV
BAMTKEUyODFFNzZDMTVDMUU0OTkzRDkwODI5RDY0RjhCNUEwOUNFRjQxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgA8n46lMDx7W2C2OBcQ+PqsW7
i5lqozRQd+FrbHjA4LYkM9WqMyPDUQwefnW0xEGT9QWlR8i4TeT10aNROXH2uMiX
4FNA84tYMVs87COhJ8HUmrBgNYjdu9GmG8CE/5cKhOU2TubU+ovPBewNybmsPJna
/fwmmGZLeWxLytWnmHpQMDdIMQOd6i0D697WdTQ+LOIiYV+qRiIaFwQc+xzYoAAX
dJDdlXovcC2CvCQfjSyGsOWNl25RVb2Es0TfaGg4UMIJXsimuUhp+/5sBMfelSFL
V8LCq8C5Kl4qFZrkgEDXL881FqmPn+w6cQzPiOCBng0nFlvX+tfDZ9pg42jVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4oHnbBXB5Jk9kIKdZPi1oJzvQbUwHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzczMDJlMzIzNDM1MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1MDAN
BgkqhkiG9w0BAQsFAAOCAQEAL+Y0F/rodvh29fYvzJlbmKgkUn/97oKwgG2C3WJ7
j/74PGaZmICvHWuuZ9Wjh+M979D4cpP6zQh6UxainToSU1oxHwvpx7DpKdw/MkMj
g858W0RoDB2dPDW9eF9mppOoJnlIOz1kabZrvNW5nldhRYqfbufhxdEgEHFDI+w9
am6KZHozG6CHgEAC/NP9p591QN5ODjkc53vM4r4K9pV+H5hDFwTpiYfmpCNXHjAc
jih324ehUhSnJkYxwckA4z50IEpvEdfT/7qr3AjZ++Fx4QJrHdQ4ZPk12WkK/Vti
lAIftZplHZ6xn5/Y8+4yrvMOpVETF51abaqHkfLs84EI9g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:45 2025 by rpki-client