Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e203532343638.roa
File:                     3137302e3234362e3130302e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          lOedMCG2PRrOnPnyHXFfAYGdwiglJ+LZ/lM/+Odojzk=
Subject key identifier:   D2:8C:12:78:E6:32:E3:2A:10:BB:E7:5A:DB:21:DE:28:68:C6:65:FA
Certificate issuer:       /CN=BAB763D78A27788C4136E1E1F000F960EF242B72
Certificate serial:       0A0222FEBE2632F1BC788ED6531F71D8D7C1C570
Authority key identifier: BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 19:58:02 +0000
ROA not before:           Tue 04 Feb 2025 19:53:02 +0000
ROA not after:            Tue 03 Feb 2026 19:58:02 +0000
asID:                     52468
IP address blocks:        170.246.100.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:02:22:fe:be:26:32:f1:bc:78:8e:d6:53:1f:71:d8:d7:c1:c5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB763D78A27788C4136E1E1F000F960EF242B72
        Validity
            Not Before: Feb  4 19:53:02 2025 GMT
            Not After : Feb  3 19:58:02 2026 GMT
        Subject: CN=D28C1278E632E32A10BBE75ADB21DE2868C665FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:8f:5c:d5:2e:d4:b9:8a:0a:b1:34:d9:c8:
                    1a:6f:3e:23:e5:70:20:4c:77:15:47:ae:cb:de:ae:
                    89:9f:c4:68:8b:cd:4f:53:cd:87:4c:42:df:6b:f5:
                    c6:43:b9:90:4f:00:2f:6c:07:99:72:ff:b7:80:da:
                    74:7c:ff:aa:24:c2:e4:10:4b:33:4f:0d:c0:2a:cf:
                    eb:b2:b7:2c:72:d4:9d:46:f2:58:42:00:3d:f1:df:
                    6f:d1:6d:58:1c:d9:88:fd:ac:4c:33:31:cb:84:b7:
                    52:16:7e:cd:eb:6e:90:20:89:c0:02:f1:7d:16:16:
                    89:e2:45:74:75:23:ce:25:d6:6d:05:68:6e:51:32:
                    b0:47:61:b0:34:18:6e:e0:d4:52:90:85:c5:b0:98:
                    b7:c6:73:c8:f1:14:1c:ca:1c:cf:80:25:ce:8d:a8:
                    59:fd:f6:cd:dc:6a:64:a6:70:26:33:44:df:62:6b:
                    4b:b8:c8:03:26:27:54:f4:08:b3:a6:eb:d8:65:ae:
                    d9:28:e6:6d:63:37:27:49:6d:f3:67:40:75:ca:79:
                    b5:21:f2:d2:89:a0:4a:83:bc:b2:c8:bc:c7:da:74:
                    16:b7:78:a8:fe:7d:dc:37:1d:86:7b:67:55:0c:85:
                    28:2a:7f:94:e3:c5:05:6d:25:bc:77:70:de:6d:8f:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8C:12:78:E6:32:E3:2A:10:BB:E7:5A:DB:21:DE:28:68:C6:65:FA
            X509v3 Authority Key Identifier:
                keyid:BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:bf:58:14:1a:53:01:59:d3:3b:96:cd:42:ff:37:0b:ce:
         f4:84:6a:fd:e2:20:2a:0a:4c:50:d6:9f:19:de:3a:cf:42:45:
         0d:aa:1f:56:77:69:6c:5a:a8:a6:92:a4:0d:6b:47:45:2a:f3:
         7e:0c:cd:cb:85:b8:c0:ec:51:62:da:fe:69:63:29:08:7d:cf:
         ec:35:af:24:fb:f6:d6:0a:d9:29:5b:ab:bf:f8:33:26:ec:c5:
         a7:ed:9c:05:60:d5:d1:88:cf:85:7e:26:d7:82:ad:c4:15:74:
         ef:11:2e:61:b8:28:66:52:0f:bb:93:c5:69:10:4f:c9:87:72:
         43:1e:34:c2:0f:b7:d2:1b:af:ad:a9:60:e4:a4:db:07:c5:06:
         d3:43:87:dc:0c:dd:1a:b3:02:2d:45:73:dc:60:a3:f8:cc:7e:
         eb:93:49:d2:a4:80:2c:06:8a:e5:c4:b3:6b:15:f5:c6:ca:5d:
         7c:70:dd:0f:2f:a7:d7:91:b6:f0:e8:02:4c:91:8e:45:62:c9:
         89:07:25:3d:7f:c9:7d:59:59:77:eb:be:8d:ef:39:20:3b:e7:
         ca:75:bd:3c:44:54:a9:a7:8c:dd:ad:7d:3d:6d:8f:73:97:42:
         3a:67:78:67:d9:3d:e3:d6:f2:d4:0c:8f:7f:f0:6a:18:42:9d:
         58:9a:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:19 2025 by rpki-client