Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/34352e3232392e37342e302f32342d3234203d3e20323636373239.roa
File:                     34352e3232392e37342e302f32342d3234203d3e20323636373239.roa (raw, json)
Hash identifier:          wNds3JFQnNavgDEmTCvDy0iYJripxo15L0Lp+OBwK4c=
Subject key identifier:   B4:F9:32:87:95:A9:BB:6E:99:48:3C:AA:71:12:D2:53:65:51:DE:1F
Certificate issuer:       /CN=8B0FB3B0ECA54A997135F9E5491919368741661E
Certificate serial:       75EFFF8CC65577FC41C28ED0E8C6C4795119FD9C
Authority key identifier: 8B:0F:B3:B0:EC:A5:4A:99:71:35:F9:E5:49:19:19:36:87:41:66:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B0FB3B0ECA54A997135F9E5491919368741661E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/34352e3232392e37342e302f32342d3234203d3e20323636373239.roa
Signing time:             Tue 04 Feb 2025 18:47:48 +0000
ROA not before:           Tue 04 Feb 2025 18:42:48 +0000
ROA not after:            Tue 03 Feb 2026 18:47:48 +0000
asID:                     266729
IP address blocks:        45.229.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ef:ff:8c:c6:55:77:fc:41:c2:8e:d0:e8:c6:c4:79:51:19:fd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B0FB3B0ECA54A997135F9E5491919368741661E
        Validity
            Not Before: Feb  4 18:42:48 2025 GMT
            Not After : Feb  3 18:47:48 2026 GMT
        Subject: CN=B4F9328795A9BB6E99483CAA7112D2536551DE1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:8c:f7:ff:8a:6a:b6:2f:7f:ca:7e:46:23:
                    31:af:7e:92:be:c6:7e:e0:ae:3e:05:a7:d4:63:60:
                    c9:8d:1f:3f:ec:b4:0d:6d:83:df:96:06:50:94:05:
                    25:02:bf:16:95:63:0d:48:9d:1c:be:e3:da:72:ea:
                    6a:c5:ba:4e:22:86:b5:84:45:a5:db:5a:67:04:60:
                    53:98:80:d6:1c:e4:39:9f:1d:e0:fd:7a:76:d2:0d:
                    17:d4:0e:0a:90:92:0e:a3:e9:4a:5d:e8:c5:c3:b9:
                    72:9c:c3:28:86:0c:bb:5d:28:92:c2:73:d7:23:a6:
                    48:e8:8c:7c:ee:7f:1f:8d:8d:fe:28:a6:15:91:84:
                    2c:8a:15:f8:ff:2c:0a:43:a6:1e:4e:d3:54:f2:de:
                    4f:d7:8c:bd:12:a7:1b:05:b1:91:58:e6:f6:8d:ce:
                    ec:15:8a:43:dd:36:d1:91:dc:61:e7:4b:99:0b:8a:
                    c7:46:bc:42:8c:3c:01:00:ef:4f:11:17:40:56:aa:
                    a7:c5:9a:3e:7e:3a:e4:06:68:e8:e4:c0:25:bd:6e:
                    31:8c:75:d2:96:91:e2:ee:99:5e:db:6e:83:ab:6e:
                    d8:cd:70:b9:61:87:99:77:df:95:6a:78:09:df:6c:
                    56:89:ed:3f:12:31:c0:5c:ac:52:04:12:b4:2c:1e:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F9:32:87:95:A9:BB:6E:99:48:3C:AA:71:12:D2:53:65:51:DE:1F
            X509v3 Authority Key Identifier:
                keyid:8B:0F:B3:B0:EC:A5:4A:99:71:35:F9:E5:49:19:19:36:87:41:66:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/8B0FB3B0ECA54A997135F9E5491919368741661E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B0FB3B0ECA54A997135F9E5491919368741661E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/34352e3232392e37342e302f32342d3234203d3e20323636373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:70:b9:0d:84:00:13:42:ae:e1:14:e7:4d:f4:07:ff:fb:
         1c:c4:cd:e9:27:c8:e0:60:3e:a9:20:ad:60:58:22:2d:62:ea:
         b9:f8:75:0d:e8:1b:8c:42:68:9a:bb:89:1a:e4:90:21:51:64:
         e7:ae:b2:45:e7:6d:83:c3:f6:bf:b5:37:7d:b0:d9:da:3a:23:
         4c:a0:af:98:8f:2b:c8:35:12:25:03:6a:e8:fa:00:12:a6:9b:
         59:4f:ff:da:3a:45:ae:5e:19:f8:2b:6f:5c:96:ef:75:16:e6:
         6d:18:71:6f:2e:ae:15:e1:44:16:b8:85:ee:fe:88:1b:f7:23:
         97:3b:4e:0e:c3:dd:10:29:49:a5:d5:8e:1f:71:d9:9d:12:3b:
         b9:dd:a7:c9:18:17:cf:ac:3c:a3:6f:f8:17:b8:1f:ca:57:e8:
         b5:86:3f:22:6e:8b:fc:0a:b9:5d:87:6a:8c:ac:cd:bd:9c:4a:
         43:dc:75:9b:c9:e4:96:11:32:40:0a:41:8a:b2:3c:ca:b7:52:
         63:3d:eb:1c:54:85:19:7e:f3:58:cf:85:f2:18:30:89:e0:4c:
         b8:07:6f:07:5b:f1:64:10:79:49:c3:f3:57:0b:44:28:cf:ac:
         a7:2e:fc:e9:c2:83:0e:9c:20:62:9e:91:73:52:1b:98:6e:6c:
         6d:d9:f2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:39 2025 by rpki-client