Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/282A2BE4A690B53D400194143F64F5BA5FC79F526DA8C412D7841CC93BDE718D/0/34352e3136342e3230372e302f32342d3234203d3e20323637373039.roa
File:                     34352e3136342e3230372e302f32342d3234203d3e20323637373039.roa (raw, json)
Hash identifier:          TqBcWCUslvgqmEicADMuwaETXlZraTWFBLe8VqtQriQ=
Subject key identifier:   A7:47:84:A8:58:EE:E6:2E:97:3F:ED:BD:97:29:FE:DA:28:73:3B:F6
Certificate issuer:       /CN=75729306F07A606EAF21C8AAD1AF8395DA52E929
Certificate serial:       3A28E77D844E56CD9C5DE1DE20102016A49F1245
Authority key identifier: 75:72:93:06:F0:7A:60:6E:AF:21:C8:AA:D1:AF:83:95:DA:52:E9:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75729306F07A606EAF21C8AAD1AF8395DA52E929.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/282A2BE4A690B53D400194143F64F5BA5FC79F526DA8C412D7841CC93BDE718D/0/34352e3136342e3230372e302f32342d3234203d3e20323637373039.roa
Signing time:             Tue 04 Feb 2025 18:50:13 +0000
ROA not before:           Tue 04 Feb 2025 18:45:13 +0000
ROA not after:            Tue 03 Feb 2026 18:50:13 +0000
asID:                     267709
IP address blocks:        45.164.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:28:e7:7d:84:4e:56:cd:9c:5d:e1:de:20:10:20:16:a4:9f:12:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75729306F07A606EAF21C8AAD1AF8395DA52E929
        Validity
            Not Before: Feb  4 18:45:13 2025 GMT
            Not After : Feb  3 18:50:13 2026 GMT
        Subject: CN=A74784A858EEE62E973FEDBD9729FEDA28733BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:aa:c7:d9:3b:8c:07:20:eb:ea:30:01:4e:e0:
                    2f:9b:14:01:fc:40:d7:47:6f:49:ba:66:d7:07:9d:
                    2c:64:95:c7:b7:e7:6d:c9:04:b8:27:11:ea:e5:44:
                    f8:22:4d:94:62:85:4c:10:19:41:a0:6d:18:b9:96:
                    b0:07:d4:bd:84:4f:8d:de:33:64:26:9c:ba:24:d3:
                    ff:4d:96:69:15:87:d6:db:3c:de:ee:b3:cd:50:18:
                    01:4d:00:d2:09:41:c5:29:1a:b3:9e:77:bb:fa:ae:
                    8e:43:59:ef:05:91:c9:ca:a0:80:b1:3c:33:97:1b:
                    35:0f:b2:62:f6:62:a3:8f:ca:fd:03:10:3c:6d:aa:
                    e8:db:90:59:db:6a:4e:e2:4e:15:d0:c6:58:1e:6f:
                    2e:6b:03:42:53:e9:b4:b3:cb:b8:42:74:9f:02:c2:
                    c9:87:dd:3d:a8:47:8e:c5:bf:bc:3d:23:98:cf:b0:
                    c2:32:80:76:24:d7:a8:ef:59:a7:e3:f6:7c:6d:e7:
                    b5:0b:a4:53:8a:05:da:2d:0d:c7:8f:de:41:a4:1e:
                    0f:20:2e:db:39:bc:02:02:37:c1:96:73:8d:c0:dc:
                    17:f0:d1:08:29:1b:aa:eb:48:a0:4e:85:72:0f:ac:
                    bc:30:d9:f6:d1:39:aa:6e:9d:cb:d8:ae:bf:55:30:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:84:A8:58:EE:E6:2E:97:3F:ED:BD:97:29:FE:DA:28:73:3B:F6
            X509v3 Authority Key Identifier:
                keyid:75:72:93:06:F0:7A:60:6E:AF:21:C8:AA:D1:AF:83:95:DA:52:E9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/282A2BE4A690B53D400194143F64F5BA5FC79F526DA8C412D7841CC93BDE718D/0/75729306F07A606EAF21C8AAD1AF8395DA52E929.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75729306F07A606EAF21C8AAD1AF8395DA52E929.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/282A2BE4A690B53D400194143F64F5BA5FC79F526DA8C412D7841CC93BDE718D/0/34352e3136342e3230372e302f32342d3234203d3e20323637373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:4c:f3:a7:53:c1:4f:a6:bd:73:9a:e1:43:6b:bf:92:f5:
         c2:64:9c:b6:61:36:d3:9b:20:5a:2c:86:34:9f:8e:9d:f4:df:
         e9:3c:e4:22:08:80:49:22:b9:71:bc:b1:a2:c0:05:88:62:71:
         23:5a:ea:73:0a:0f:5f:4c:9c:0a:6f:1a:12:95:ae:bb:06:07:
         94:9a:39:5f:6d:63:5e:87:75:da:61:97:4b:ab:fb:c2:bc:6c:
         6a:2b:77:77:a4:ea:50:fc:c7:71:88:4e:28:01:7d:26:3c:1e:
         0b:1e:73:d6:8d:04:3b:27:ac:62:4b:7b:c2:bc:54:f0:57:fb:
         6b:77:2b:f8:af:27:3e:c8:24:b2:2a:71:1b:7a:b9:3a:65:e2:
         db:d1:b3:f9:1c:f1:a9:52:e3:c1:df:6e:fa:c9:85:7f:06:6f:
         0f:38:c4:9d:3a:ae:6c:43:73:2a:36:3c:47:b6:b9:1c:c3:26:
         1d:f7:b7:da:95:3c:05:de:18:09:33:b1:2d:c8:34:f4:ff:0c:
         eb:a6:e2:fa:d8:90:f7:ad:4d:63:35:ac:d8:13:c9:09:0d:75:
         44:49:db:33:65:55:85:26:e1:ae:25:0f:2c:97:9f:92:eb:f2:
         34:4f:4d:e4:9f:dc:39:16:df:46:50:b2:e7:8f:65:03:db:6f:
         15:a2:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:43:40 2025 by rpki-client