Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/34352e3136342e3233312e302f32342d3234203d3e20323634373734.roa
File:                     34352e3136342e3233312e302f32342d3234203d3e20323634373734.roa (raw, json)
Hash identifier:          mGUBhifSaxYMIkhw0BSKGnOs+jZygw87SZqRsYiizT0=
Subject key identifier:   75:14:24:94:86:7B:AB:BB:0A:9D:61:2F:D1:68:04:C9:77:33:B1:78
Certificate issuer:       /CN=3A2E414DFFAF888C3670046DD819856FE5330921
Certificate serial:       71BCF0B3CBB69A194D636570266C600EE05046A3
Authority key identifier: 3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/34352e3136342e3233312e302f32342d3234203d3e20323634373734.roa
Signing time:             Tue 18 Mar 2025 14:12:16 +0000
ROA not before:           Tue 18 Mar 2025 14:07:16 +0000
ROA not after:            Tue 17 Mar 2026 14:12:16 +0000
asID:                     264774
IP address blocks:        45.164.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:bc:f0:b3:cb:b6:9a:19:4d:63:65:70:26:6c:60:0e:e0:50:46:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A2E414DFFAF888C3670046DD819856FE5330921
        Validity
            Not Before: Mar 18 14:07:16 2025 GMT
            Not After : Mar 17 14:12:16 2026 GMT
        Subject: CN=75142494867BABBB0A9D612FD16804C97733B178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0e:ed:37:08:9f:a6:9e:a0:c4:64:ed:c5:e6:
                    0a:3c:5f:2c:6e:49:04:06:ae:29:44:67:2e:f1:53:
                    1a:7f:b2:de:e6:af:dc:1a:ef:5d:77:16:97:a9:7b:
                    cc:d6:07:3d:34:1e:cc:b0:48:6b:64:17:c6:72:c9:
                    70:c3:21:a0:ea:25:00:f3:85:d0:bf:eb:50:1a:fd:
                    bb:56:55:63:07:b2:e9:05:4b:a8:f1:02:4b:14:b0:
                    cd:0c:e2:5d:e6:df:4b:d1:5c:69:0c:b5:9f:b5:b9:
                    48:0a:cf:1d:32:7b:84:ba:07:44:e7:bf:97:fa:08:
                    05:56:e0:98:c3:09:fa:ca:a7:19:0b:f2:4a:44:eb:
                    1e:94:26:bc:33:f2:91:1a:c2:1c:c0:a1:f3:fa:a4:
                    1f:19:a5:f8:4b:bc:1d:0f:2d:eb:3a:3b:e5:94:b7:
                    0f:22:0b:bd:94:a1:95:d1:21:41:ab:45:a1:2b:17:
                    df:bd:95:f2:14:06:1f:bf:29:b4:9d:00:b3:24:6f:
                    88:c3:36:b5:ca:39:83:b4:07:0e:d1:98:32:0f:d8:
                    cc:36:74:af:02:48:38:98:5f:0d:f7:b4:6f:7b:f5:
                    d3:bc:7b:e9:a9:5a:3d:98:33:81:5a:c4:bc:8a:30:
                    49:b1:53:44:e7:1d:0c:d8:d5:16:64:38:e4:8b:a9:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:14:24:94:86:7B:AB:BB:0A:9D:61:2F:D1:68:04:C9:77:33:B1:78
            X509v3 Authority Key Identifier:
                keyid:3A:2E:41:4D:FF:AF:88:8C:36:70:04:6D:D8:19:85:6F:E5:33:09:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/3A2E414DFFAF888C3670046DD819856FE5330921.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A2E414DFFAF888C3670046DD819856FE5330921.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178166256DCDD47F9A10C085E7D668758CDA17F028D86B166B55C5D96490AEDC/0/34352e3136342e3233312e302f32342d3234203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:33:7a:54:c6:ab:70:36:4a:44:38:9e:a5:43:aa:7e:1b:
         55:1d:d8:c5:29:78:ba:d5:6f:bd:87:15:8b:e0:c0:d0:a9:c7:
         2e:98:12:9f:24:23:af:8b:d9:c8:51:d2:78:b7:5b:44:d3:f3:
         88:53:a2:42:1d:1d:f6:0d:ac:bc:89:b7:26:0b:ce:af:90:f6:
         db:99:f6:23:da:0b:38:ab:c1:6b:9a:b4:64:4d:dc:4c:32:43:
         04:f0:c9:94:7c:1d:c1:42:7d:16:6f:df:eb:8b:20:87:03:8a:
         ce:5b:66:26:e3:f5:b2:84:cf:23:fb:e5:7e:fe:ec:56:4b:90:
         84:db:cb:8e:7e:21:5d:c0:fb:be:ec:99:34:fb:8a:52:43:e6:
         cf:3f:84:d3:e9:7f:07:c1:04:9e:4d:db:4e:d7:43:5c:7f:1c:
         63:86:1c:26:ac:a7:62:6e:85:39:52:b4:7b:cb:e2:3d:86:b4:
         90:d6:9f:ae:51:83:49:69:2d:a6:59:1c:94:58:ea:ba:17:b1:
         c6:7e:19:14:8f:26:46:f1:52:a3:03:f6:65:7d:a8:5c:d4:e4:
         ea:77:8a:d2:68:52:9e:70:f4:ec:72:8e:5a:95:5c:45:f8:0f:
         f8:17:5a:cb:3d:52:45:02:08:4f:4a:59:1b:67:63:80:f1:33:
         fe:ca:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:17:16 2025 by rpki-client