Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa
File:                     3137302e3234352e35302e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          2Y1q7ie04bfKlVd9lJlepD+adRIkUfv9kz3LtWQIo0E=
Subject key identifier:   77:C9:20:26:50:54:4A:FC:A0:53:B2:3C:C8:93:FE:50:5F:15:A8:E5
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       30424BF6AEE13B3273B2454CE5CA435DB69271AD
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 04 Feb 2025 18:31:42 +0000
ROA not before:           Tue 04 Feb 2025 18:26:42 +0000
ROA not after:            Tue 03 Feb 2026 18:31:42 +0000
asID:                     52510
IP address blocks:        170.245.50.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:4b:f6:ae:e1:3b:32:73:b2:45:4c:e5:ca:43:5d:b6:92:71:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Feb  4 18:26:42 2025 GMT
            Not After : Feb  3 18:31:42 2026 GMT
        Subject: CN=77C9202650544AFCA053B23CC893FE505F15A8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:ee:c9:c0:f5:3e:83:7b:bd:e3:e0:ab:80:
                    dd:28:d0:f2:5c:d5:c8:c0:ce:34:62:d9:a7:37:6f:
                    2f:49:08:c0:48:fd:65:41:70:98:70:ee:6a:6a:d5:
                    f4:df:1a:12:c7:4f:ce:60:a5:d7:aa:9f:7f:50:e7:
                    8a:84:bb:b1:e2:e3:f4:88:b1:80:d5:4b:98:8d:4f:
                    84:57:bb:49:e7:05:17:e5:4d:60:53:0f:12:c0:9f:
                    29:3a:3d:1f:c6:b7:b6:db:e0:07:2f:18:9e:9e:e8:
                    57:cb:39:14:ca:e0:7d:a8:af:2a:a9:f6:4f:6b:89:
                    fb:3e:aa:b6:b4:69:bb:f9:c5:de:0d:4e:35:3d:07:
                    ba:51:b5:9f:b4:ef:91:d8:92:14:55:2b:f3:c1:28:
                    e2:04:58:fb:23:84:0f:49:46:e1:2d:2a:27:65:c0:
                    04:0d:b0:6b:3e:65:ce:5b:42:a1:a2:fa:ec:e5:6d:
                    8b:85:00:a4:74:65:76:15:5f:ca:47:eb:cc:cc:64:
                    19:07:82:ba:d0:ee:b8:c6:3c:f0:6c:64:a3:fa:cb:
                    0c:ae:9b:fa:db:29:45:e8:51:05:ed:8c:fe:89:c9:
                    0f:97:b8:a1:88:57:4e:d1:39:74:95:1d:39:e1:ed:
                    ce:30:53:76:0f:f0:44:0a:6f:ec:e1:2f:d6:21:a9:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:20:26:50:54:4A:FC:A0:53:B2:3C:C8:93:FE:50:5F:15:A8:E5
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:8b:ba:b5:29:b8:30:8c:8d:9f:d1:56:db:cd:f2:03:41:6d:
         f3:51:dc:6d:1a:b9:6e:c4:ca:69:a2:17:76:03:7c:c4:91:56:
         87:e3:42:1c:67:87:52:6c:41:f7:c3:2d:fb:eb:49:a4:af:65:
         cd:aa:ac:53:7a:7a:6e:75:0c:73:43:66:6d:41:4e:7b:1d:71:
         b3:57:87:31:49:d8:5a:0e:13:a1:46:da:0b:18:73:83:78:d6:
         e1:af:e4:7d:90:d4:eb:78:31:c5:f8:a3:3e:ac:3d:c3:c1:1d:
         c1:fa:bf:48:0d:4c:72:d8:fc:be:c5:5c:fb:c5:06:33:43:8a:
         91:df:10:78:b3:64:d6:c2:f0:e1:88:e8:f0:2e:4b:b0:52:4d:
         d4:dc:39:7d:69:c5:8c:80:36:f5:2c:d7:70:95:ac:db:cf:3e:
         9a:a3:5d:83:f5:a5:99:53:a2:4b:4f:97:f9:33:15:45:ab:f5:
         39:bf:45:81:b0:c9:0d:d9:18:58:88:0e:dd:aa:a3:3e:a2:46:
         09:df:7f:88:e5:a0:f9:62:66:73:0b:94:60:09:8b:a9:59:38:
         97:8b:2b:4a:41:38:69:88:31:79:3e:a8:9b:77:57:c8:a6:6e:
         51:5a:6a:41:65:09:50:1b:92:75:ac:1a:4d:c2:c3:ee:37:cd:
         e7:0d:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:14:17 2025 by rpki-client