Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa
File:                     3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa (raw, json)
Hash identifier:          MwmPGvrfA6xF4zGImOQXV9+PY6aKrK1Z5dWY7ytnUlY=
Subject key identifier:   0F:AF:64:CE:21:62:96:60:0C:FA:7C:03:5B:32:1A:7B:0F:4D:92:5D
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       61697708A3E949DADD0FAF83F8CC4DC6AA96111A
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa
Signing time:             Tue 04 Feb 2025 18:27:01 +0000
ROA not before:           Tue 04 Feb 2025 18:22:01 +0000
ROA not after:            Tue 03 Feb 2026 18:27:01 +0000
asID:                     263204
IP address blocks:        170.210.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:69:77:08:a3:e9:49:da:dd:0f:af:83:f8:cc:4d:c6:aa:96:11:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:01 2025 GMT
            Not After : Feb  3 18:27:01 2026 GMT
        Subject: CN=0FAF64CE216296600CFA7C035B321A7B0F4D925D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c2:38:ba:e9:73:0f:8f:ab:a0:f8:26:95:d4:
                    d6:ad:a0:c2:bf:13:15:ca:56:30:c4:f5:94:1b:73:
                    15:d4:b0:28:15:5d:97:dc:88:dd:2b:dc:f9:f5:68:
                    2b:9d:81:46:91:e6:7b:08:44:82:ab:5d:e1:ce:09:
                    fd:6d:81:6e:d7:06:96:d0:89:1c:36:59:a0:54:3e:
                    f6:73:f2:ca:85:5a:8a:26:43:24:bc:8d:70:b8:8d:
                    4b:fc:e9:75:22:12:fc:3f:7e:06:c7:51:56:31:9e:
                    a4:04:6a:e1:2b:aa:56:95:ff:a0:b0:ab:0c:69:45:
                    28:82:57:75:74:73:6a:e6:85:9e:56:ac:2f:35:c3:
                    e9:0d:af:cb:59:ac:62:25:96:a3:e1:21:61:8c:ad:
                    28:eb:72:85:b3:88:97:b9:2d:0f:78:be:f5:78:75:
                    65:50:d8:93:69:46:46:08:c6:55:7e:c4:86:84:09:
                    72:6d:e8:4c:26:91:07:49:c0:92:ed:b8:60:09:67:
                    83:fe:96:2b:0b:f8:26:1e:d9:a3:9f:81:13:22:3c:
                    44:dd:6f:80:4a:9d:1d:ab:9c:8f:62:05:67:af:94:
                    6b:09:b9:fa:0d:bd:97:fa:2b:8e:d6:f2:43:90:75:
                    68:01:c4:30:08:94:5b:07:54:a6:36:83:33:d6:9f:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:64:CE:21:62:96:60:0C:FA:7C:03:5B:32:1A:7B:0F:4D:92:5D
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3231362e302f32322d3234203d3e20323633323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:cc:bb:1b:e5:05:c1:27:57:7d:e2:56:18:d6:09:28:e2:
         01:98:c8:6c:72:21:8c:20:4a:35:82:56:fc:a7:a4:10:90:d7:
         88:7a:ca:7f:86:e1:bd:cf:7c:ab:52:78:4d:3c:62:10:ed:c3:
         3a:34:29:9b:59:7c:65:b6:70:ed:ee:8a:47:e5:1f:aa:4e:49:
         28:89:78:25:2c:b7:ad:90:8b:1c:a7:ca:45:95:ce:b4:13:b0:
         13:f3:66:aa:1d:60:de:ff:5e:ca:16:bc:99:5c:4e:25:47:d1:
         ce:a2:e2:d4:9f:7e:4c:0c:80:7e:85:9e:7e:11:de:cb:b9:00:
         d6:90:a5:41:e1:f8:81:55:fc:d7:e1:d0:ba:4c:ff:86:a9:e7:
         e1:53:0d:1e:cb:c5:65:81:ce:0a:a7:33:46:fe:6c:36:48:54:
         e7:49:b0:e7:1d:55:7e:3e:4a:c0:ac:29:cc:79:3f:3b:13:58:
         e4:12:3e:e7:22:e1:40:74:6b:15:63:8b:e7:cc:5a:10:02:f3:
         67:17:c2:f6:48:15:3b:3c:b6:cd:42:11:f6:f4:2e:7d:c0:84:
         dc:86:ba:44:93:60:ab:5c:89:98:ed:a1:3c:0a:d2:19:4b:18:
         91:e0:88:3f:d7:0b:66:54:a2:eb:59:b7:eb:ac:96:4f:92:0f:
         42:04:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:56 2025 by rpki-client