Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/3137302e37382e3230382e302f32322d3234203d3e20323730313538.roa
File:                     3137302e37382e3230382e302f32322d3234203d3e20323730313538.roa (raw, json)
Hash identifier:          MOKPdxZ96OIR54Deoa+6bxBJdG88IT+M8ASguMJxJkc=
Subject key identifier:   4D:C0:DC:46:F8:EE:38:F6:EB:9C:55:CF:59:97:AC:3B:A4:DE:DE:FF
Certificate issuer:       /CN=D9A7BE89544C8816011A928E90C51CB503A4D5CD
Certificate serial:       4427C37CA3F575E2029BE88CB486F1FBAE67FD6B
Authority key identifier: D9:A7:BE:89:54:4C:88:16:01:1A:92:8E:90:C5:1C:B5:03:A4:D5:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/3137302e37382e3230382e302f32322d3234203d3e20323730313538.roa
Signing time:             Tue 04 Feb 2025 18:50:33 +0000
ROA not before:           Tue 04 Feb 2025 18:45:33 +0000
ROA not after:            Tue 03 Feb 2026 18:50:33 +0000
asID:                     270158
IP address blocks:        170.78.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:c3:7c:a3:f5:75:e2:02:9b:e8:8c:b4:86:f1:fb:ae:67:fd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A7BE89544C8816011A928E90C51CB503A4D5CD
        Validity
            Not Before: Feb  4 18:45:33 2025 GMT
            Not After : Feb  3 18:50:33 2026 GMT
        Subject: CN=4DC0DC46F8EE38F6EB9C55CF5997AC3BA4DEDEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d5:08:a0:cd:5c:88:b9:c7:81:f8:dd:7c:5e:
                    6f:a9:55:e3:1b:d9:4f:e0:d1:61:11:17:24:fe:ea:
                    b7:f9:92:2f:23:5c:e7:6f:a3:72:00:0c:90:1c:6a:
                    d4:8f:e8:1c:1c:64:f4:0f:14:13:14:ea:d6:85:84:
                    d5:05:46:b5:d4:0a:53:f9:f8:eb:fc:94:a1:e9:7d:
                    2f:d9:da:fc:db:22:21:a0:db:c2:78:19:e0:05:9b:
                    16:c8:77:0e:3e:79:33:0b:2b:5d:34:3c:02:9c:4b:
                    13:87:90:9c:43:ba:a3:39:db:51:e7:bb:d1:94:0b:
                    c4:63:dc:f6:26:aa:80:d2:61:a8:5e:b3:7e:aa:79:
                    23:7a:60:ec:34:c8:0f:51:5c:7b:73:da:fc:9d:51:
                    c8:d7:05:d8:b0:86:62:68:cf:68:15:b9:ae:cc:8d:
                    e9:8a:f7:ba:aa:ca:12:ac:fb:2f:08:26:2f:31:8c:
                    45:b3:bd:57:25:7e:bc:c3:b8:2f:ac:cd:ee:0b:91:
                    76:6f:d5:3c:0a:ea:d4:46:66:7a:7c:f3:34:f2:d3:
                    ad:01:19:7e:84:b3:52:a9:b0:7f:f0:53:04:58:4e:
                    22:80:27:f3:72:fc:9e:73:bb:e6:2e:b2:ca:e5:3d:
                    a2:c1:2d:1a:69:9c:6b:e8:a0:45:88:87:b5:2a:17:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:DC:46:F8:EE:38:F6:EB:9C:55:CF:59:97:AC:3B:A4:DE:DE:FF
            X509v3 Authority Key Identifier:
                keyid:D9:A7:BE:89:54:4C:88:16:01:1A:92:8E:90:C5:1C:B5:03:A4:D5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D9A7BE89544C8816011A928E90C51CB503A4D5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBC17D7472020B2AFF20D443EC032B04CD7B5F72BFFA811CE6596795EBC29087/0/3137302e37382e3230382e302f32322d3234203d3e20323730313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:80:df:cb:71:12:16:46:b1:20:85:26:96:79:25:6f:0f:
         69:fc:54:1d:71:31:21:67:d6:35:68:71:a6:b8:f1:0c:a7:65:
         c7:52:62:71:99:b4:9b:da:ca:97:97:d0:c9:05:3f:65:e8:04:
         e4:61:2d:be:6b:c3:79:bb:ef:2f:59:4d:6e:7c:1b:75:f0:c0:
         48:f6:c9:1c:a5:e2:86:84:ab:89:ea:47:ca:81:12:c3:ff:8d:
         e4:e0:0e:ce:ea:74:88:e2:67:8c:2d:94:8f:18:6f:02:dd:be:
         46:d0:dd:58:4d:67:9f:65:3e:7b:e7:d2:b2:63:99:0c:60:49:
         03:c9:c3:03:c5:a1:03:32:da:f2:8d:6e:8f:29:e0:2c:a6:c3:
         77:b8:d5:3c:c9:ba:6e:70:27:bf:9d:98:76:f8:9c:4c:ed:16:
         6c:e1:90:a6:cd:55:24:bd:e6:b1:99:bb:88:56:e7:20:57:a1:
         32:56:55:43:5e:df:88:c7:7b:61:e1:f7:f5:ae:68:c7:1d:79:
         4d:2c:c6:77:c5:8e:87:66:a1:97:a0:cf:aa:a5:f5:55:4e:1c:
         e9:32:31:68:19:a7:8d:1d:c3:e5:32:3d:e1:e1:1a:c0:2e:eb:
         23:16:7a:ed:97:bb:bd:d9:7c:eb:0b:3a:ee:ae:6b:21:5a:d4:
         58:95:13:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:20 2025 by rpki-client