Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa
File:                     3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa (raw, json)
Hash identifier:          7AE5A+s7I+hb8uLTaCcDd8MR2Ry5b1XEo6VR/iQ8X8U=
Subject key identifier:   69:AF:F1:D3:BF:6B:F0:AA:11:90:BF:21:3C:E1:DE:0F:16:B7:BD:96
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       42B50168F3944BB33BBAB765060C54C26E156378
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa
Signing time:             Tue 04 Feb 2025 18:27:04 +0000
ROA not before:           Tue 04 Feb 2025 18:22:04 +0000
ROA not after:            Tue 03 Feb 2026 18:27:04 +0000
asID:                     264785
IP address blocks:        170.210.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b5:01:68:f3:94:4b:b3:3b:ba:b7:65:06:0c:54:c2:6e:15:63:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:22:04 2025 GMT
            Not After : Feb  3 18:27:04 2026 GMT
        Subject: CN=69AFF1D3BF6BF0AA1190BF213CE1DE0F16B7BD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:61:89:9e:5b:db:99:4f:3a:f1:61:d4:15:52:
                    ef:6a:0a:ee:a1:5b:b3:b5:0f:85:db:8e:c6:ae:0a:
                    05:92:0d:28:ac:41:f9:95:68:fd:7a:8c:06:a8:e7:
                    43:d1:f9:3f:26:0d:1f:e5:84:3f:1a:25:34:aa:fc:
                    ef:e2:3b:f0:d7:1a:79:96:4d:f3:c2:e0:01:ea:f8:
                    28:a1:71:88:57:ca:60:f2:2e:b1:ab:48:97:db:95:
                    cb:f8:6a:44:b0:b6:0b:9d:ec:a3:f0:c5:d8:cc:cb:
                    6d:be:33:ee:72:0b:25:0e:ca:4a:18:02:78:5f:9b:
                    fa:ac:08:23:bb:46:dd:8d:8d:b4:43:3e:1a:f8:95:
                    b2:09:50:89:87:0e:c2:81:e3:4d:e0:50:0b:56:f5:
                    e8:1b:73:f0:0a:7c:66:57:d8:ac:39:7f:94:a4:20:
                    7b:15:84:47:c0:c7:7e:33:c6:2e:16:cf:50:4b:58:
                    ce:e5:c8:e1:0b:64:f7:1e:cc:2a:94:b1:d1:48:2d:
                    ab:8e:61:82:02:08:8d:ee:1b:af:29:84:e6:1c:9a:
                    a1:75:27:5c:d6:2d:08:40:7e:84:f0:21:a2:79:4f:
                    30:6f:60:91:d8:fa:47:fd:bc:0c:59:75:eb:85:bb:
                    27:ad:12:ed:8a:16:21:e4:55:08:00:94:79:ca:1c:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:F1:D3:BF:6B:F0:AA:11:90:BF:21:3C:E1:DE:0F:16:B7:BD:96
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6a:84:20:62:5b:70:1a:82:0d:ee:67:e6:2e:8b:bf:e1:64:
         85:49:2c:0b:93:f7:58:00:d7:c1:09:5b:7a:1b:e8:6a:c0:ec:
         76:1a:bc:81:cf:10:20:3b:77:37:6d:a5:bb:7a:12:d0:89:1f:
         b6:88:7c:64:b6:8d:a1:bc:fe:95:b6:a0:59:3b:16:d9:4d:22:
         39:80:85:66:04:4e:af:6f:6d:bd:e8:c7:f7:56:7f:f4:66:5b:
         92:0b:3f:da:b2:53:10:b7:4e:2c:e4:52:f3:19:9c:23:12:b9:
         05:f2:ef:9c:51:a4:08:4d:88:14:5d:01:79:32:e2:e7:26:ca:
         8e:6c:b0:03:9d:51:58:6a:e2:6a:05:4d:21:26:3e:39:81:56:
         09:ad:ef:01:c2:f2:f2:6a:af:65:20:12:f5:cc:3c:be:7f:8d:
         cc:bd:e5:f4:ac:c7:05:1c:fc:2c:ad:48:2e:04:2b:f5:21:bb:
         ab:4a:05:45:09:4b:f9:7f:52:97:36:4e:73:74:fd:3e:7c:63:
         f0:b9:26:d3:b2:58:29:05:36:68:fb:f0:7f:ac:8e:80:40:ab:
         03:88:d2:a9:22:ca:f1:7d:2a:da:61:2d:eb:e3:29:35:94:41:
         6b:0e:2d:6a:8d:0c:fb:18:48:09:b3:07:f9:1e:ab:4e:6b:c5:
         ac:f4:63:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:52 2025 by rpki-client