Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3138302e302f32342d3234203d3e203432.roa
File:                     3137302e3231302e3138302e302f32342d3234203d3e203432.roa (raw, json)
Hash identifier:          UruOOsYpyYWngwPk9MZ624R03aZ6oqWhqmwTI1Ead2c=
Subject key identifier:   6E:89:26:7B:C5:A6:A5:FD:5D:CD:2D:D0:4E:AF:79:5B:C9:EF:6A:6B
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       2A32E1E6A8E4191966EB490719C63DD224A4B959
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3138302e302f32342d3234203d3e203432.roa
Signing time:             Tue 04 Feb 2025 18:27:03 +0000
ROA not before:           Tue 04 Feb 2025 18:22:03 +0000
ROA not after:            Tue 03 Feb 2026 18:27:03 +0000
asID:                     42
IP address blocks:        170.210.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:32:e1:e6:a8:e4:19:19:66:eb:49:07:19:c6:3d:d2:24:a4:b9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:03 2025 GMT
            Not After : Feb  3 18:27:03 2026 GMT
        Subject: CN=6E89267BC5A6A5FD5DCD2DD04EAF795BC9EF6A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:f3:ca:8b:ac:67:58:60:83:30:ed:6f:c0:
                    5d:05:08:2c:b7:14:a2:bf:a9:79:17:52:d1:47:9b:
                    d6:fd:16:27:34:d4:f3:22:94:73:7a:65:df:a4:7e:
                    ac:0a:ac:f4:db:73:42:75:e2:9b:65:1a:ff:d3:6c:
                    92:cf:5f:ff:d6:0e:b1:ac:1b:39:1a:56:ea:c1:03:
                    ca:04:6f:6f:f0:36:f5:a8:30:8e:62:09:26:9f:4e:
                    13:43:4a:e8:0a:7d:17:ad:8b:1c:87:ed:0b:af:d0:
                    38:12:ee:ff:51:ed:11:fc:57:b7:9c:2d:60:99:e9:
                    2a:b7:1a:cb:be:2d:3b:f0:99:cc:c2:dd:a1:ba:82:
                    f8:70:f1:f8:f5:12:26:b0:27:b7:e0:02:37:cb:d0:
                    3d:d4:8c:59:05:3a:93:fe:08:e0:4b:a4:0f:d1:12:
                    99:79:e9:38:8e:f3:e5:33:ff:a2:4b:e6:63:b6:b4:
                    67:08:77:62:6e:ed:bd:89:16:6e:99:f3:87:ae:2b:
                    b8:53:56:62:51:5a:99:03:a6:a8:ba:54:dc:09:e5:
                    e7:11:ee:f8:1a:f5:39:c8:58:69:b9:a4:82:1d:4c:
                    d5:38:51:e8:eb:a4:af:1d:16:8a:fb:84:92:55:5e:
                    1d:61:47:f6:34:2b:e1:f3:06:62:8b:53:3d:25:5f:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:89:26:7B:C5:A6:A5:FD:5D:CD:2D:D0:4E:AF:79:5B:C9:EF:6A:6B
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3138302e302f32342d3234203d3e203432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:cb:5a:97:a3:1a:17:b1:d1:c3:1b:05:3a:31:8e:f3:65:86:
         f4:70:01:2e:02:3b:29:63:ba:bc:a0:d8:d7:e8:50:0f:65:77:
         e8:7a:d1:91:62:80:d8:c8:af:90:a1:2a:f9:e3:63:7d:70:35:
         eb:06:ff:d8:eb:66:99:b6:00:01:55:90:0c:fd:9f:79:f0:4e:
         02:f5:6e:1a:bd:43:9a:6b:67:32:6e:87:0b:17:4a:8a:17:d7:
         72:7d:a2:28:41:f4:f3:1c:78:00:a1:ff:24:e6:a5:54:bc:b2:
         82:ce:e0:f3:ea:92:b7:34:59:ac:5f:ed:10:ec:66:a8:14:09:
         37:73:24:01:ce:70:d2:8a:b7:62:06:32:f7:46:5a:fa:48:c8:
         d5:41:51:8e:c5:7c:84:97:9b:80:15:cf:35:e3:1e:19:ef:41:
         9b:ae:4b:69:04:3a:d4:63:59:bb:dc:2f:0e:1d:67:fe:fd:21:
         ef:97:75:f1:e8:a8:58:8b:e9:95:ff:b6:15:2c:30:7a:87:18:
         5a:d3:f1:26:56:09:e1:26:e4:12:77:ab:ce:bc:72:7a:97:ac:
         09:b5:ce:1b:c9:c2:1c:6d:40:f8:cc:49:25:8d:f8:b9:1d:a2:
         f0:32:5f:dd:c2:2e:42:43:86:09:a2:21:53:d3:cc:44:87:a4:
         29:88:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:58 2025 by rpki-client