Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323636363831.roa
File:                     34352e3232382e3138302e302f32342d3234203d3e20323636363831.roa (raw, json)
Hash identifier:          ASi92YBzCtgYAQexeZQDCormJfqlxUfwEjqjyMC7sKY=
Subject key identifier:   2B:4E:16:25:35:13:BD:83:2A:EA:49:76:A2:FF:4D:B6:F6:83:D6:4C
Certificate issuer:       /CN=260895D787D39C6EC70E61B3A77A0B956804C253
Certificate serial:       7A78A3525DEFEA15E5FDA7711696E1A1389828A4
Authority key identifier: 26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323636363831.roa
Signing time:             Tue 04 Feb 2025 18:24:37 +0000
ROA not before:           Tue 04 Feb 2025 18:19:37 +0000
ROA not after:            Tue 03 Feb 2026 18:24:37 +0000
asID:                     266681
IP address blocks:        45.228.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:78:a3:52:5d:ef:ea:15:e5:fd:a7:71:16:96:e1:a1:38:98:28:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260895D787D39C6EC70E61B3A77A0B956804C253
        Validity
            Not Before: Feb  4 18:19:37 2025 GMT
            Not After : Feb  3 18:24:37 2026 GMT
        Subject: CN=2B4E16253513BD832AEA4976A2FF4DB6F683D64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:c0:e3:d7:91:37:47:bb:3f:41:ea:19:84:
                    f0:1e:bc:58:73:17:89:69:d2:4f:0d:6a:38:bd:b9:
                    ca:52:72:4b:82:5f:90:4c:f0:86:84:a1:e3:83:ae:
                    aa:47:6d:b7:82:8a:6d:01:09:40:bf:99:9a:ac:77:
                    8d:00:c9:0d:49:ea:07:46:a9:95:3c:74:10:1e:94:
                    90:92:b9:fb:da:c7:19:76:fe:2d:fe:41:60:09:7b:
                    3b:90:6a:f1:20:a5:40:20:61:5b:a9:cb:f8:3a:35:
                    93:67:ac:34:6d:88:7d:87:ea:0d:ec:7f:29:5b:ae:
                    fe:21:a3:ad:fc:41:08:1c:a4:17:89:16:52:91:52:
                    13:f4:22:d3:18:7b:73:e2:72:c0:ce:7e:33:dd:3a:
                    97:51:a7:6a:f7:e7:13:94:ef:12:e6:cf:6c:34:1e:
                    95:2d:f6:bd:ef:de:04:04:36:d2:c7:96:56:13:9a:
                    73:a9:be:e5:7f:b2:2b:b1:0c:06:3c:d1:6c:95:51:
                    44:f5:24:28:d8:25:e5:64:05:08:ea:a9:ca:7c:d4:
                    32:d3:e5:d3:40:58:4a:9d:dc:e0:73:5d:e0:da:f2:
                    36:17:08:2c:ac:7f:b5:58:36:37:8e:90:35:4f:6b:
                    5e:8f:41:b2:9d:ca:fd:ba:41:40:71:0f:27:5c:c6:
                    6f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:16:25:35:13:BD:83:2A:EA:49:76:A2:FF:4D:B6:F6:83:D6:4C
            X509v3 Authority Key Identifier:
                keyid:26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138302e302f32342d3234203d3e20323636363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:92:c6:14:cb:07:08:67:93:d3:29:a2:1a:8e:ae:4d:c2:c7:
         32:9a:a8:1b:e7:56:fa:22:83:44:0a:b5:70:9d:af:0d:24:b8:
         ce:68:57:b5:8f:82:a0:0b:0e:c7:dd:88:2d:9e:88:17:fe:0b:
         ed:75:5c:bf:ba:aa:d8:a2:33:d5:9a:9c:df:bb:ce:ff:e8:63:
         ab:3b:59:12:0f:15:d0:b0:31:cc:ce:53:6a:25:84:cb:89:93:
         2c:04:62:a8:1e:87:af:5f:a3:44:7d:78:28:ca:22:8f:2f:f5:
         e3:6f:49:71:7b:ae:bc:82:74:1a:5a:42:fc:a3:85:68:02:9f:
         37:16:ea:b6:91:2c:da:fe:ca:a1:86:37:ed:b8:01:2d:96:67:
         84:7f:65:0f:6f:55:4a:e5:8b:8c:7f:bf:68:09:a6:3d:ee:53:
         72:41:c6:e5:8b:53:be:83:e2:15:22:6e:2e:b8:1f:7b:2d:a2:
         49:f9:cc:82:bc:0b:45:da:e6:49:23:d7:0f:cd:4d:4b:2d:74:
         aa:6c:5c:0d:74:36:fb:b5:2a:de:46:74:be:3f:ad:f4:30:5e:
         88:f3:c7:4c:8a:7f:34:c2:bb:05:4b:2a:d7:78:7c:3a:85:28:
         22:67:10:ab:71:3e:8e:00:11:3f:d6:ef:16:d7:c8:e8:95:14:
         43:26:2c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:20:38 2025 by rpki-client