Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323637373638.roa
File:                     34352e3137302e3233322e302f32322d3234203d3e20323637373638.roa (raw, json)
Hash identifier:          cwyozUZA11jgS5P4BRcc9Mxjq6V38XKYtwlsy/+lEMw=
Subject key identifier:   0D:77:D8:CD:EB:3E:EF:21:A2:4F:A3:41:11:7D:AC:23:26:5D:B0:BB
Certificate issuer:       /CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
Certificate serial:       32470A1C7173004E4F93A9CB3A057F007616C6EC
Authority key identifier: 92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323637373638.roa
Signing time:             Tue 04 Feb 2025 20:08:14 +0000
ROA not before:           Tue 04 Feb 2025 20:03:14 +0000
ROA not after:            Tue 03 Feb 2026 20:08:14 +0000
asID:                     267768
IP address blocks:        45.170.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:0a:1c:71:73:00:4e:4f:93:a9:cb:3a:05:7f:00:76:16:c6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927E0012070570AB4DFA4DD1913EF12B0C5A1FBA
        Validity
            Not Before: Feb  4 20:03:14 2025 GMT
            Not After : Feb  3 20:08:14 2026 GMT
        Subject: CN=0D77D8CDEB3EEF21A24FA341117DAC23265DB0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:bf:ec:b0:cc:07:39:09:1d:a1:b0:7a:26:
                    95:b0:1b:86:ab:f4:a1:84:78:ff:37:a5:40:6b:96:
                    27:07:dd:8b:5d:77:d5:15:89:be:a2:95:10:14:64:
                    ad:8e:49:fa:61:67:6f:4d:c6:50:8d:9b:68:14:ec:
                    ae:af:87:2e:cb:09:bc:41:1f:e3:3c:56:bd:2e:a5:
                    a4:22:05:2f:be:35:f7:14:f6:e0:2c:5a:e1:68:d4:
                    9c:8c:82:17:ab:a5:f6:f3:15:c6:62:cb:cb:bb:48:
                    8f:09:f2:6d:0c:cd:45:48:9f:66:24:45:d2:a8:5a:
                    ba:7d:fa:75:48:32:ae:5c:1f:0f:6e:59:a3:a2:88:
                    cd:03:16:61:f9:1b:8e:b2:03:ec:36:53:ab:32:88:
                    be:a0:57:a7:8a:d1:15:8d:8c:75:4e:bd:28:66:00:
                    2b:30:93:6f:ee:a2:dd:1f:71:17:a4:27:02:fa:1f:
                    10:98:6f:ae:35:bc:ea:b9:4c:70:03:c4:20:35:2d:
                    0f:82:f0:8a:2b:34:57:b3:71:4c:4c:ea:54:25:37:
                    92:f5:6e:c5:61:fc:00:55:11:a7:12:bc:e6:27:c6:
                    46:11:e6:01:cc:3c:3e:8c:bb:59:7c:19:1b:b7:f6:
                    74:ff:5d:bc:bc:cc:43:f0:a8:df:e4:85:48:d5:00:
                    1b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:D8:CD:EB:3E:EF:21:A2:4F:A3:41:11:7D:AC:23:26:5D:B0:BB
            X509v3 Authority Key Identifier:
                keyid:92:7E:00:12:07:05:70:AB:4D:FA:4D:D1:91:3E:F1:2B:0C:5A:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/927E0012070570AB4DFA4DD1913EF12B0C5A1FBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F0A1BCFC0E11E8265228A6D986A3B342B22EAAA1A6D57193BF92FD07650EFEFE/0/34352e3137302e3233322e302f32322d3234203d3e20323637373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:70:61:26:b8:63:48:b1:d4:25:23:da:9d:1f:a9:47:60:
         68:21:54:13:6c:25:60:ab:d1:7f:d0:62:0d:23:b9:61:00:69:
         3f:99:32:26:c3:8f:bc:6f:24:da:40:44:08:33:16:28:fe:1c:
         88:c0:03:50:05:b9:91:17:fe:cc:49:d3:da:f4:4e:59:07:35:
         2c:dd:04:30:1b:30:9e:7e:09:e3:d3:1d:2c:fc:25:b5:4e:67:
         a4:8a:2b:dd:a1:03:4a:ef:a0:f1:6b:c6:00:23:4b:8a:75:af:
         99:db:cc:58:fd:da:9a:18:ca:8c:58:c5:70:f0:f3:85:0a:7c:
         ee:3f:b5:90:fe:73:a1:13:44:c9:f2:f0:79:9b:de:86:33:b5:
         c7:bf:1f:e1:29:ff:d9:7b:cd:0f:a8:9c:0c:a2:0a:47:55:a2:
         35:47:87:08:0f:3d:e7:e9:4d:7d:af:9d:39:2b:f8:03:48:16:
         36:24:b6:9e:3b:c8:6d:f0:31:68:7d:72:be:ea:a3:ee:5f:f2:
         c4:07:bc:09:d5:6c:af:b4:34:14:ed:91:a9:9e:06:42:25:0f:
         df:5e:be:a6:db:c5:47:63:3f:09:fb:86:4f:24:57:bb:4c:be:
         e3:5b:db:04:4a:15:90:21:29:87:ec:fc:1f:30:97:a8:17:77:
         9c:24:02:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:48 2025 by rpki-client