Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235352e302f32342d3234203d3e203433333530.roa
File:                     34352e3232372e3235352e302f32342d3234203d3e203433333530.roa (raw, json)
Hash identifier:          b/48NwGlnGyco7bXIl+TVmr3OUo8A+SizQaNWCZ4Lfk=
Subject key identifier:   83:6C:29:F4:6F:04:22:0D:D6:F8:C2:EB:A3:E6:75:A3:67:5C:DB:30
Certificate issuer:       /CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
Certificate serial:       2C4C0ECEAC28538A5BCBF9DF6806A853C0AAADD0
Authority key identifier: 0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235352e302f32342d3234203d3e203433333530.roa
Signing time:             Tue 04 Feb 2025 18:50:46 +0000
ROA not before:           Tue 04 Feb 2025 18:45:46 +0000
ROA not after:            Tue 03 Feb 2026 18:50:46 +0000
asID:                     43350
IP address blocks:        45.227.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:0e:ce:ac:28:53:8a:5b:cb:f9:df:68:06:a8:53:c0:aa:ad:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2E8494F1EE6E9343EF823748A436EA77B86231
        Validity
            Not Before: Feb  4 18:45:46 2025 GMT
            Not After : Feb  3 18:50:46 2026 GMT
        Subject: CN=836C29F46F04220DD6F8C2EBA3E675A3675CDB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:b8:3a:a6:35:d6:96:43:9c:d7:2f:cb:7e:
                    83:0e:45:71:81:c6:6a:e9:cc:a4:ae:fc:7b:8e:51:
                    80:2b:25:04:f2:3c:47:59:94:4c:f9:7b:b4:42:ac:
                    e8:a9:80:b1:cf:ac:d1:83:f8:22:b9:6d:59:00:f7:
                    02:4f:05:c6:53:37:01:a5:db:20:61:d2:78:d0:20:
                    7d:31:84:aa:f2:cb:3c:8d:4a:41:87:59:aa:77:0b:
                    bc:ad:25:80:ab:b7:95:9e:35:8a:83:87:03:45:93:
                    db:7a:ba:d2:40:5d:97:42:89:b1:87:38:8c:a3:64:
                    54:e8:74:f4:20:29:fe:ad:ae:3b:96:f6:f9:8b:e1:
                    78:24:5e:49:53:c0:cc:39:3c:b1:d0:0b:aa:a3:9d:
                    62:ec:82:93:38:6d:f5:e0:9e:1f:c0:e1:cc:2c:68:
                    5f:d4:ed:cb:5d:bf:a3:88:f7:89:46:e8:07:16:eb:
                    32:96:d1:ee:5c:6b:31:21:ca:22:33:1b:ab:2f:c3:
                    dc:04:0e:83:70:db:48:90:72:a4:2f:05:e2:66:9c:
                    04:d6:41:c7:41:21:bc:10:38:04:33:58:dd:8e:90:
                    af:64:b5:07:94:50:fc:75:d9:41:11:a2:e9:49:d3:
                    12:47:cd:a6:83:97:16:19:18:bf:d8:4b:b9:14:10:
                    2c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6C:29:F4:6F:04:22:0D:D6:F8:C2:EB:A3:E6:75:A3:67:5C:DB:30
            X509v3 Authority Key Identifier:
                keyid:0A:2E:84:94:F1:EE:6E:93:43:EF:82:37:48:A4:36:EA:77:B8:62:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A2E8494F1EE6E9343EF823748A436EA77B86231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736B3B1FC83140AA883214E5C5900315BDB58648D4C6CEA8A8B9048B8EFA6A53/0/34352e3232372e3235352e302f32342d3234203d3e203433333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:18:d3:c5:0a:0c:24:ca:fb:4c:c2:35:0a:f5:c1:0d:78:2d:
         fa:10:b2:a2:a2:36:55:8e:2b:77:87:c5:cb:8f:e0:25:a6:3f:
         28:7a:77:d4:02:0a:f5:b5:da:81:e6:da:46:6a:71:36:f5:67:
         02:27:b3:48:b4:00:29:46:78:09:95:db:6c:76:b0:5f:96:80:
         4c:8b:0a:98:9a:e0:65:17:da:a2:28:2c:f1:f5:b0:11:ae:8f:
         4a:6f:4f:93:1e:f4:3b:14:12:e7:20:c4:60:7e:10:04:67:27:
         e3:fa:62:f7:11:2d:97:c4:73:8b:6d:ac:0f:84:db:1b:55:02:
         25:e1:6a:e6:cc:6a:10:ad:d0:5a:2d:bd:bd:f9:48:56:b7:b5:
         a2:ae:69:f2:3a:15:a3:5e:e1:24:39:72:48:1b:6f:3e:4a:0d:
         bc:da:33:d1:2e:ff:c6:41:a2:c2:04:54:59:b5:fe:24:20:f3:
         62:7d:97:4f:17:9f:c8:20:1b:e2:4b:ef:46:a0:db:6a:d7:ce:
         a7:c3:bf:04:82:e1:a2:fb:07:31:f7:db:cb:d2:13:34:ba:df:
         0d:de:eb:31:d2:c8:ac:0c:95:f0:34:6e:27:8c:13:96:59:65:
         26:a5:9c:ed:aa:f1:8c:a2:a0:97:96:5e:4e:d4:d6:21:b9:d6:
         2f:b6:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:24:07 2025 by rpki-client