Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/34352e3136342e31322e302f32322d3234203d3e20323637373030.roa
File:                     34352e3136342e31322e302f32322d3234203d3e20323637373030.roa (raw, json)
Hash identifier:          S3pyF2iO63AGRo4WAf24tCdkIDJxOnScRNBi2etFQKc=
Subject key identifier:   22:2D:FC:A8:D9:26:66:FE:38:C7:21:0A:50:60:ED:F1:FA:09:30:27
Certificate issuer:       /CN=2F55674FD1E428392406A71D58348B254459B753
Certificate serial:       01BC4A6349A7A1C86E1D58882DEA624905EB6118
Authority key identifier: 2F:55:67:4F:D1:E4:28:39:24:06:A7:1D:58:34:8B:25:44:59:B7:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F55674FD1E428392406A71D58348B254459B753.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/34352e3136342e31322e302f32322d3234203d3e20323637373030.roa
Signing time:             Tue 04 Feb 2025 18:50:49 +0000
ROA not before:           Tue 04 Feb 2025 18:45:49 +0000
ROA not after:            Tue 03 Feb 2026 18:50:49 +0000
asID:                     267700
IP address blocks:        45.164.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bc:4a:63:49:a7:a1:c8:6e:1d:58:88:2d:ea:62:49:05:eb:61:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F55674FD1E428392406A71D58348B254459B753
        Validity
            Not Before: Feb  4 18:45:49 2025 GMT
            Not After : Feb  3 18:50:49 2026 GMT
        Subject: CN=222DFCA8D92666FE38C7210A5060EDF1FA093027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:e5:4e:9a:f9:c2:3f:00:aa:71:9f:b1:bf:
                    64:5d:e9:0f:fa:b6:3c:25:21:b2:74:71:41:be:c2:
                    55:87:d0:3f:08:5a:c1:dd:4d:e8:11:9a:ef:08:15:
                    a0:b7:f4:b4:92:f6:6d:f9:ea:52:0a:6b:72:73:83:
                    58:66:59:ec:f7:2a:b6:9b:84:ca:6c:8a:26:9c:c4:
                    d0:62:05:a0:81:a9:c0:43:47:d0:48:b8:40:1c:21:
                    1f:54:cc:5f:f9:5d:6b:38:44:3b:48:82:64:7f:24:
                    08:b9:cf:93:e3:cc:a3:8e:17:3e:ca:1c:22:2b:d8:
                    55:30:d8:86:06:6b:11:8e:c6:f9:65:c8:c9:da:21:
                    f6:eb:26:71:9a:56:ac:75:2a:07:54:b9:73:ba:2c:
                    c0:02:f8:7d:7b:18:b1:a8:a6:98:92:a8:2b:a8:7b:
                    08:d0:fa:22:25:72:7e:cf:f1:d3:44:2b:63:1c:1c:
                    67:c2:23:8c:f0:99:9b:69:86:92:f6:08:7b:41:7b:
                    c3:04:26:0b:cf:1b:df:04:cf:5f:e1:a3:ec:5a:d8:
                    5f:ec:7e:eb:3f:c9:e7:2f:55:78:21:dd:16:63:07:
                    59:40:5f:0d:f8:93:a9:ac:23:24:f3:b9:46:e2:83:
                    71:38:92:5d:6c:36:7c:ec:95:55:20:a6:d0:79:84:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2D:FC:A8:D9:26:66:FE:38:C7:21:0A:50:60:ED:F1:FA:09:30:27
            X509v3 Authority Key Identifier:
                keyid:2F:55:67:4F:D1:E4:28:39:24:06:A7:1D:58:34:8B:25:44:59:B7:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/2F55674FD1E428392406A71D58348B254459B753.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2F55674FD1E428392406A71D58348B254459B753.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8F5B2064C902E437C2AECDD5907069D5E2C45B5E7F2F26CEAFD8B5DF7F59861/0/34352e3136342e31322e302f32322d3234203d3e20323637373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:cc:a6:ca:41:c6:4b:b1:cc:18:4c:96:b7:b7:be:ae:cf:b5:
         98:66:ba:50:8e:23:0e:1c:cf:fc:67:ae:44:a2:53:65:8b:2a:
         18:53:56:9a:31:57:1f:33:bb:82:0a:1d:93:57:20:3e:47:08:
         76:b5:45:55:eb:e2:54:2b:a4:3b:8d:70:fb:44:c1:45:76:2c:
         97:a5:4d:0a:76:d5:db:f3:eb:86:5b:b8:23:37:b1:16:58:eb:
         4d:18:73:bc:27:46:4d:8d:25:26:59:77:c7:6b:28:ba:55:42:
         2d:b5:b9:f0:48:3e:59:61:78:36:00:b5:0e:42:65:5c:b3:cd:
         34:35:87:f5:05:0b:e1:de:ae:4b:68:bb:5f:ec:7f:4b:7d:3c:
         9d:90:25:e9:f8:a7:b8:b3:3c:5a:02:f3:9d:f0:2b:c0:86:48:
         69:83:71:23:be:ee:a7:36:c4:91:c4:c5:29:4b:e7:3f:0c:d7:
         de:8c:41:ad:b3:37:a9:d4:67:85:1e:d9:8f:5e:bf:a3:42:32:
         8c:0c:74:d0:36:2f:7b:43:95:23:e1:18:7f:87:2a:37:3a:d6:
         29:ff:b8:ea:7a:36:73:55:9f:44:9d:ff:04:f6:e3:6c:4f:34:
         d8:12:c0:62:b5:c2:e9:9e:ab:1a:da:8b:78:7e:1d:c2:c4:f5:
         c7:73:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:40:37 2025 by rpki-client