Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/8de3e9eacd946b06a1b0d4c074241821538194db.roa
File:                     8de3e9eacd946b06a1b0d4c074241821538194db.roa (raw, json)
Hash identifier:          y7RfPosKifChq1wiBcHi+RJk9FkDlVMLiN24jro+PxA=
Subject key identifier:   E4:B6:80:9E:67:0F:25:D6:98:81:3F:C1:F0:37:96:99:C0:86:46:7D
Certificate issuer:       /CN=75efa7e220921478f459230041e65a4f7dc20ea6
Certificate serial:       20C09B
Authority key identifier: 6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/8de3e9eacd946b06a1b0d4c074241821538194db.roa
Signing time:             Tue 06 Jun 2023 04:39:53 +0000
ROA not before:           Mon 05 Jun 2023 04:39:53 +0000
ROA not after:            Fri 06 Jun 2025 04:39:53 +0000
asID:                     10269
IP address blocks:        170.0.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2146459 (0x20c09b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75efa7e220921478f459230041e65a4f7dc20ea6
        Validity
            Not Before: Jun  5 04:39:53 2023 GMT
            Not After : Jun  6 04:39:53 2025 GMT
        Subject: CN=8de3e9eacd946b06a1b0d4c074241821538194db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:a6:88:b6:9d:2d:af:67:b4:d6:2f:e1:d0:
                    2d:6d:f3:3d:b5:28:37:31:73:68:8a:f7:21:ff:7c:
                    94:50:76:15:2f:99:76:fd:62:9a:f1:5b:9c:22:28:
                    ce:56:36:c7:ce:fc:74:d2:8c:00:9a:38:49:55:34:
                    5e:49:c8:ce:7d:ad:8f:da:47:40:0a:5d:f5:d2:b1:
                    40:8a:33:63:b1:5b:0f:7b:e4:35:a2:68:c6:7f:fe:
                    c6:38:ef:7c:9e:76:13:13:4c:cf:99:1f:45:bf:b8:
                    26:af:84:8f:41:f8:62:8e:ab:65:07:9c:4c:92:9e:
                    2e:17:d7:3b:f7:25:6a:0b:99:06:2e:69:e7:68:88:
                    30:97:8a:f8:3c:6e:33:b0:9f:5c:13:d2:4f:6f:d6:
                    3c:68:04:42:0a:3c:d2:ea:5a:b3:ff:6c:2d:46:ea:
                    19:05:da:3c:7e:4d:5c:36:75:30:e5:d3:c3:20:29:
                    c3:0d:74:68:d4:35:4b:85:25:91:4b:73:be:f1:c6:
                    52:94:e3:4a:11:f1:3f:03:34:47:71:17:76:02:f0:
                    27:1b:00:aa:5a:90:37:f8:ea:ae:54:17:36:db:4e:
                    07:df:aa:59:b0:9b:c4:2c:2f:f9:5e:4c:d2:34:9a:
                    1c:22:a0:a8:a0:55:7d:23:ea:49:3b:64:01:df:74:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B6:80:9E:67:0F:25:D6:98:81:3F:C1:F0:37:96:99:C0:86:46:7D
            X509v3 Authority Key Identifier:
                keyid:6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/8de3e9eacd946b06a1b0d4c074241821538194db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/75efa7e220921478f459230041e65a4f7dc20ea6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:17:60:2b:f5:47:ca:0a:8d:44:44:91:46:d5:89:76:39:46:
         b0:d9:93:96:4c:af:9a:1b:1b:78:b4:41:c5:3c:b6:85:58:eb:
         e5:09:1f:48:dd:71:ff:e4:23:9f:35:93:38:56:1c:93:a1:14:
         63:e0:81:3e:63:55:1d:0e:33:25:d0:75:d6:83:c7:76:71:c5:
         04:48:8b:70:15:a3:22:8f:42:fb:8d:ac:37:ab:b3:8c:37:4c:
         53:73:5a:7b:fa:c6:13:3c:b3:ed:cc:96:7d:a6:7a:02:a2:4e:
         a9:a0:fd:58:6f:f9:a2:5d:88:1c:86:35:0b:2a:05:f3:65:5d:
         c9:e4:02:11:d6:1f:7c:13:1e:45:4b:8d:46:05:e1:bf:29:03:
         54:67:99:3f:c9:fd:26:e3:58:54:b0:ad:a0:53:39:91:2a:5a:
         1d:eb:90:c5:86:4b:18:e6:6f:25:8a:bd:cc:72:ff:40:56:5c:
         ed:c0:b8:37:47:f0:c3:cd:97:34:97:f2:8b:5b:6d:28:73:81:
         29:dc:08:31:a1:cd:cb:cd:79:04:1f:26:f3:74:f7:21:2b:ce:
         16:57:e4:57:e9:2b:99:df:8b:49:6b:b1:e1:2a:48:eb:7b:91:
         12:97:20:0e:76:76:d5:a6:b5:fa:91:f3:7b:75:22:22:39:52:
         3f:dc:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:52:41 2025 by rpki-client