Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e302f32342d3234203d3e20323634373430.roa
File:                     3137302e3233392e3138332e302f32342d3234203d3e20323634373430.roa (raw, json)
Hash identifier:          QvVItwbSIGgQOBZG13OPb181KNpv4rk0G6qByxZh0K4=
Subject key identifier:   B0:55:33:84:B1:12:02:92:E3:4B:AB:14:3D:9D:BD:AE:74:D5:50:08
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       1B9E2D57072316AC0B843B3C7697418DCD63A805
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e302f32342d3234203d3e20323634373430.roa
Signing time:             Tue 04 Feb 2025 18:44:48 +0000
ROA not before:           Tue 04 Feb 2025 18:39:48 +0000
ROA not after:            Tue 03 Feb 2026 18:44:48 +0000
asID:                     264740
IP address blocks:        170.239.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9e:2d:57:07:23:16:ac:0b:84:3b:3c:76:97:41:8d:cd:63:a8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Feb  4 18:39:48 2025 GMT
            Not After : Feb  3 18:44:48 2026 GMT
        Subject: CN=B0553384B1120292E34BAB143D9DBDAE74D55008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:73:19:67:d1:cb:ae:ff:9d:bf:96:44:c6:
                    7a:70:9f:20:f9:7a:95:5a:b3:3f:a0:d3:c6:b6:bf:
                    47:2d:f8:9b:82:d5:3c:ac:3f:24:9c:f9:6e:42:99:
                    ba:00:26:52:cf:4a:0b:fb:57:b4:33:dd:58:57:07:
                    27:e0:05:43:92:2a:d1:18:ab:ae:e6:5b:32:c2:5e:
                    ac:9b:ac:9d:e9:7f:f3:2b:9a:fb:7e:ee:e6:7e:47:
                    21:40:88:16:99:5a:6e:88:42:c7:0d:3a:46:65:16:
                    0b:34:ce:a7:f1:be:ed:47:8a:59:d1:9d:0f:f1:16:
                    c2:ed:15:27:67:56:fc:15:b8:9c:b1:d7:7a:f5:d0:
                    7e:8f:df:69:d6:11:79:2f:d4:ff:5c:e6:e1:2d:cd:
                    f7:b3:44:56:e2:2c:70:08:57:30:e4:73:d7:f0:93:
                    9f:18:33:9b:88:1b:fa:66:6f:87:c9:41:5b:cf:ba:
                    99:c4:86:ae:81:36:fc:71:2f:ae:67:5e:2a:a8:4c:
                    62:ae:18:47:38:44:4e:bc:bf:04:ea:61:82:85:4c:
                    73:2d:19:c6:3f:95:a8:62:17:5c:1c:35:96:7d:b4:
                    76:2c:8e:77:7b:5a:6b:6b:ff:71:8c:e9:2a:d7:99:
                    3e:08:ad:40:b1:8e:03:8c:cd:46:e2:ad:69:f0:28:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:55:33:84:B1:12:02:92:E3:4B:AB:14:3D:9D:BD:AE:74:D5:50:08
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138332e302f32342d3234203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:38:98:72:c0:b0:8b:95:12:91:e9:91:f4:91:a3:e9:09:
         54:e0:1b:e2:2c:e0:66:ab:46:b4:3e:cb:a7:ef:8a:5e:fa:5e:
         01:78:7f:fe:41:e2:20:12:40:16:4f:ea:85:fa:93:f5:e5:9c:
         4d:65:41:35:00:e6:9f:4c:59:b4:28:71:18:61:55:fe:6e:83:
         4e:f6:4a:e7:6b:bf:d9:52:d2:32:18:50:94:af:8b:99:e8:d0:
         4f:f1:af:05:f3:3d:49:61:e1:1a:75:13:ca:88:11:5e:c0:a4:
         f1:5f:ba:2f:30:5e:13:b8:55:71:2e:4d:fd:90:42:c7:cc:a0:
         89:d3:06:a3:48:0e:aa:e8:90:0b:3f:14:35:00:d9:8f:c8:6e:
         ff:05:33:bc:46:33:ef:c8:7d:06:42:7a:9e:ec:48:28:d8:c5:
         6b:5c:12:7c:2d:0c:3b:d6:e9:33:cb:98:3b:82:06:60:4d:22:
         91:8a:f5:11:8a:72:ef:8f:d1:19:1d:23:5d:64:98:cd:ab:61:
         0a:29:bb:26:d4:a9:ae:32:04:fb:f2:f4:fe:ae:77:a4:48:a6:
         79:4b:e5:4a:3f:a0:c6:c1:29:ce:91:2c:f8:37:30:84:4d:8d:
         2a:62:39:08:37:89:be:81:fc:6d:2a:51:11:a3:19:d6:10:6f:
         ea:25:c1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:30 2025 by rpki-client