Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/90b0f0dfe46a8ca10be0d5e020f0b9d6390079de.roa
File:                     90b0f0dfe46a8ca10be0d5e020f0b9d6390079de.roa (raw, json)
Hash identifier:          RxNr5am2hVg0Ua8YzCqEsE9cOawzUYC49jNFv9odb5k=
Subject key identifier:   70:47:D6:3C:6C:F6:1D:2E:70:01:C2:32:25:33:0B:B3:4C:8D:F2:47
Certificate issuer:       /CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
Certificate serial:       230067
Authority key identifier: 82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/90b0f0dfe46a8ca10be0d5e020f0b9d6390079de.roa
Signing time:             Mon 30 Oct 2023 17:44:27 +0000
ROA not before:           Mon 30 Oct 2023 17:44:27 +0000
ROA not after:            Thu 30 Oct 2025 17:44:27 +0000
asID:                     264761
IP address blocks:        170.150.44.0/22 maxlen: 22
                          2803:5b40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293863 (0x230067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b2d6c543f96c6e360e6bb67a94434bb666f2d80
        Validity
            Not Before: Oct 30 17:44:27 2023 GMT
            Not After : Oct 30 17:44:27 2025 GMT
        Subject: CN=90b0f0dfe46a8ca10be0d5e020f0b9d6390079de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b0:de:11:b6:b0:25:1f:28:a8:4e:6e:93:72:
                    02:ae:b8:f9:92:82:f8:f0:04:f9:6b:f3:e8:04:b6:
                    41:c2:93:b4:a0:59:e0:f8:49:4b:3a:7f:ea:97:b5:
                    cb:27:ef:dd:89:0c:7a:53:4b:d3:00:6d:af:32:63:
                    d6:f1:98:0a:26:de:f6:cd:da:56:67:98:08:1c:cd:
                    fb:9f:35:9b:32:07:c5:a5:8e:65:ca:05:95:97:ad:
                    bf:28:b9:b7:ce:f0:5a:c0:0f:9a:56:dc:f1:3a:a0:
                    de:1b:30:39:a6:ff:01:b8:c6:a7:7e:d0:3b:f7:31:
                    f9:a9:60:2c:3e:a9:ef:02:10:83:79:b1:34:33:05:
                    a4:17:2d:56:8a:51:9e:49:45:e9:3b:13:27:89:ae:
                    10:d1:df:8b:af:cd:56:74:23:df:88:e3:22:90:c4:
                    12:03:1a:47:66:6b:19:d0:cc:c5:05:5f:95:cd:14:
                    21:59:2c:1b:a1:63:5b:4c:a6:41:0a:6b:4e:f9:19:
                    bd:06:81:d7:75:2b:ca:6d:7b:91:63:31:01:95:d5:
                    c2:47:87:d8:cc:bd:d5:c4:5f:45:08:96:57:53:1f:
                    df:2a:3e:0b:69:70:15:c1:41:a0:37:d9:8e:67:35:
                    46:92:b4:6c:01:a2:d2:1f:49:1b:8e:8d:07:5f:e7:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:47:D6:3C:6C:F6:1D:2E:70:01:C2:32:25:33:0B:B3:4C:8D:F2:47
            X509v3 Authority Key Identifier:
                keyid:82:E6:1D:62:7A:72:C4:AE:B9:7B:6E:8B:13:50:2D:BE:71:E6:7E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/90b0f0dfe46a8ca10be0d5e020f0b9d6390079de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e05524aa-469c-407e-816a-4f94f6986cda/6b2d6c543f96c6e360e6bb67a94434bb666f2d80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.44.0/22
                IPv6:
                  2803:5b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:e0:4b:e8:cb:92:ed:5a:4d:5e:ca:b3:31:c4:ec:14:f1:
         d8:b2:ca:99:f7:8e:32:5b:5b:55:1f:6a:37:f5:75:3f:0e:58:
         2f:d0:1d:41:45:00:ef:77:b8:9b:72:c0:63:c2:ef:0f:b7:e8:
         bd:3a:fb:e1:e0:d8:85:ec:ca:ab:c0:4f:60:26:ae:4b:a2:7f:
         c6:f6:d4:ac:12:73:c1:7d:6d:49:b2:e0:d0:3c:16:d4:e1:ef:
         3e:b1:2e:4b:89:5f:c8:b9:11:32:56:87:a3:ae:73:0c:0a:65:
         3e:9e:38:e1:09:9f:11:95:1b:d4:22:49:bf:6d:90:ae:f7:5b:
         03:35:50:e8:04:5a:47:c8:43:40:65:07:23:aa:83:a8:bf:51:
         e4:1f:bd:d5:b9:aa:78:3b:a3:2b:b2:77:67:62:13:59:24:82:
         d6:ee:77:c7:76:2d:57:db:55:95:9d:f8:14:42:27:49:0e:ea:
         81:3f:1f:c5:fa:89:8a:3f:b6:fa:4f:b8:5f:f8:3a:f0:7d:de:
         34:06:8f:26:a8:86:ba:26:83:fe:07:b1:d1:72:73:ef:05:72:
         c3:7c:8d:a2:aa:db:8f:da:9f:1b:50:b7:4c:22:26:67:b3:da:
         d8:56:e7:ed:96:8d:2b:5b:7f:67:55:ca:34:63:01:64:32:8e:
         fc:2f:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:20:01 2025 by rpki-client