Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa
File:                     3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa (raw, json)
Hash identifier:          0+3K+mQW48OjOi5ZRGRc29rMTvhM43cMmdwICWmoFrw=
Subject key identifier:   B2:88:5C:E0:51:EB:E4:C7:E3:A2:F1:19:84:FB:24:EA:90:7A:8A:1C
Certificate issuer:       /CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
Certificate serial:       27481AD16A91FF731BE38E50995EDA8BBD66C43F
Authority key identifier: 70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa
Signing time:             Tue 04 Feb 2025 18:35:30 +0000
ROA not before:           Tue 04 Feb 2025 18:30:30 +0000
ROA not after:            Tue 03 Feb 2026 18:35:30 +0000
asID:                     265634
IP address blocks:        170.245.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:48:1a:d1:6a:91:ff:73:1b:e3:8e:50:99:5e:da:8b:bd:66:c4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
        Validity
            Not Before: Feb  4 18:30:30 2025 GMT
            Not After : Feb  3 18:35:30 2026 GMT
        Subject: CN=B2885CE051EBE4C7E3A2F11984FB24EA907A8A1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:12:61:72:e6:24:09:da:eb:5f:bc:b4:d4:
                    aa:c5:51:c3:cb:74:ae:be:2c:dc:8c:13:00:ce:fa:
                    83:52:c0:7d:8e:ca:82:b8:98:a6:a3:67:23:e9:51:
                    45:5a:d6:ab:ca:09:36:ef:da:0d:0b:cc:94:f1:0d:
                    6e:84:cd:8b:17:91:6a:a5:6c:1d:47:01:7d:bb:83:
                    8a:96:7c:dd:3b:cd:c8:90:d8:2a:ee:dc:a7:ae:34:
                    cd:e9:7c:22:8c:c0:a0:e2:f1:03:8a:99:37:b7:83:
                    27:03:3b:c8:8e:c5:b4:ec:6b:1f:1a:e8:54:c1:19:
                    cf:43:a7:c9:d1:ed:c0:81:0c:15:76:e5:e0:48:70:
                    28:19:1c:c7:f2:6d:58:06:34:9a:87:6c:c6:23:4b:
                    3a:a8:04:0a:97:9a:43:79:e3:55:46:b8:47:b9:27:
                    6a:76:8d:1d:19:f8:39:d0:91:a9:84:ea:e2:8e:c4:
                    37:12:8e:07:03:88:67:20:05:b4:5a:b5:f5:00:71:
                    15:06:d1:e2:16:60:fe:91:8f:b6:6e:74:20:8b:aa:
                    b0:e6:90:04:0b:e2:97:08:f9:45:58:78:43:71:bc:
                    77:7f:bc:72:f8:f5:d9:73:07:46:e5:7a:bf:be:a8:
                    21:8c:3b:8c:0d:58:ea:f7:83:61:f5:b3:32:b7:d8:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:88:5C:E0:51:EB:E4:C7:E3:A2:F1:19:84:FB:24:EA:90:7A:8A:1C
            X509v3 Authority Key Identifier:
                keyid:70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:87:3b:77:2b:11:5f:d8:88:01:61:5c:f8:f6:be:3d:c3:68:
         db:c3:a5:64:a3:c3:cc:60:92:d6:27:03:bc:2a:5f:4e:67:13:
         d0:27:21:4f:e1:bd:de:d9:ac:23:8d:5c:9d:5e:a0:1d:ff:a5:
         aa:e5:b1:9f:d5:d8:69:c6:7f:0a:9e:13:55:e2:7e:43:cf:48:
         b6:3d:21:e5:8d:50:75:e8:6b:36:af:67:73:10:8b:b6:25:a4:
         0e:07:48:c5:f8:9d:f7:97:95:cd:1e:ff:38:8d:b8:af:5b:0d:
         f6:cb:c4:4e:fa:14:3f:b4:00:39:91:95:51:ed:6a:7e:1b:56:
         5f:47:01:27:b8:9c:f0:a6:b1:71:13:6e:d6:c9:82:08:6e:c6:
         07:da:7f:c1:8c:3b:73:bb:71:16:0c:ba:74:2a:e7:6b:b6:49:
         40:e5:48:fc:6f:1a:fb:70:74:44:f1:0c:75:16:1b:99:25:02:
         a7:40:f7:01:aa:14:91:9b:74:78:1e:94:53:c0:ad:59:89:24:
         5c:88:5b:c1:db:9d:76:9c:33:0c:9a:1d:9d:2f:cf:9c:80:0d:
         a2:e7:da:72:6b:91:23:7c:28:66:7d:4f:6d:9b:d4:38:b4:b9:
         d5:66:e7:97:a8:30:a7:42:a9:11:38:52:fb:ad:fe:6b:e9:84:
         cd:fd:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:31 2025 by rpki-client