Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138312e302f32342d3234203d3e20323636363831.roa
File:                     34352e3232382e3138312e302f32342d3234203d3e20323636363831.roa (raw, json)
Hash identifier:          R3ymSgLEMPtYN+KK/6czMYuseA+unnp4Ab7KQKdNvgg=
Subject key identifier:   76:11:CF:AE:A4:84:91:6E:32:F2:DB:0F:F2:1A:5A:88:C2:39:E5:EF
Certificate issuer:       /CN=260895D787D39C6EC70E61B3A77A0B956804C253
Certificate serial:       32537F8938778982CF53EAFACBEF98455E144A00
Authority key identifier: 26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138312e302f32342d3234203d3e20323636363831.roa
Signing time:             Tue 04 Feb 2025 18:24:38 +0000
ROA not before:           Tue 04 Feb 2025 18:19:38 +0000
ROA not after:            Tue 03 Feb 2026 18:24:38 +0000
asID:                     266681
IP address blocks:        45.228.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:53:7f:89:38:77:89:82:cf:53:ea:fa:cb:ef:98:45:5e:14:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260895D787D39C6EC70E61B3A77A0B956804C253
        Validity
            Not Before: Feb  4 18:19:38 2025 GMT
            Not After : Feb  3 18:24:38 2026 GMT
        Subject: CN=7611CFAEA484916E32F2DB0FF21A5A88C239E5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:2f:b6:f4:23:12:d7:c5:bb:10:a0:ce:d7:
                    0a:88:6f:e4:6d:ca:b2:5c:bf:8f:7b:4f:33:41:d2:
                    c8:d6:ec:2e:d7:95:74:66:d3:ea:84:e2:39:9a:f9:
                    34:f6:da:85:43:b7:57:17:33:49:20:f3:55:11:5b:
                    b2:4a:87:da:e4:ec:5b:65:57:15:2b:cc:96:ce:72:
                    8e:f3:1f:b4:b3:59:2b:de:fb:b1:4a:e8:f3:38:e8:
                    17:35:59:45:45:a4:13:20:3e:30:ba:c9:16:d3:81:
                    67:a2:14:6f:ba:09:c1:fb:c3:47:0e:bb:c5:8b:dc:
                    86:e7:29:f8:cd:65:dd:e5:bf:66:50:82:75:6f:30:
                    b2:19:3f:44:dc:7e:5e:2a:95:8d:11:ad:35:fd:b6:
                    7c:e3:3d:a7:4a:f6:20:8e:cd:50:80:bc:01:3a:bc:
                    f3:a2:14:6f:9b:99:4a:2c:73:b9:ec:67:ab:e7:84:
                    fa:77:2a:60:aa:c4:24:14:f3:ed:72:93:43:c0:b1:
                    ef:bd:f6:88:1f:96:a6:d0:4d:36:9f:99:84:b1:4d:
                    11:a1:df:f6:67:50:d1:0a:b5:e0:ca:64:f3:cb:ee:
                    c5:5f:17:d5:f7:8c:ca:ba:de:fd:27:ad:69:12:03:
                    34:72:8e:04:9b:7e:76:7a:1c:7c:ba:1d:92:19:49:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:11:CF:AE:A4:84:91:6E:32:F2:DB:0F:F2:1A:5A:88:C2:39:E5:EF
            X509v3 Authority Key Identifier:
                keyid:26:08:95:D7:87:D3:9C:6E:C7:0E:61:B3:A7:7A:0B:95:68:04:C2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/260895D787D39C6EC70E61B3A77A0B956804C253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260895D787D39C6EC70E61B3A77A0B956804C253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08FFB186254B9A6FF3D064A717D95968A37DFFBB08A91D7372658FB5BBB7D63C/0/34352e3232382e3138312e302f32342d3234203d3e20323636363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:24:01:02:c5:68:8d:cf:c5:88:8c:e2:06:37:4e:a3:35:a8:
         5a:98:38:b8:4d:d7:43:47:46:cd:3d:96:6f:55:64:bc:c1:49:
         5d:19:92:e7:6a:f6:02:49:dc:8d:c9:e2:da:de:09:07:d0:d0:
         f6:68:38:0e:ec:c7:4e:8a:c6:1f:ff:93:f5:a6:5c:02:e3:d7:
         a3:10:7b:b0:aa:2a:0e:6e:43:fc:1f:ac:7a:80:0b:22:8f:99:
         ef:8e:82:e3:d8:eb:70:48:e8:b1:5f:9e:bc:86:1b:c3:2e:b4:
         88:1d:dd:9c:1a:75:ea:a3:40:d2:80:19:f0:2e:7f:82:db:c0:
         99:86:9e:b1:3c:52:e6:aa:50:67:66:1e:c1:22:3c:1d:90:d4:
         2c:68:fd:48:b8:cf:eb:f0:b8:63:3f:6a:d7:b1:d9:74:f5:75:
         2f:ff:80:0b:fc:e7:f3:1c:8a:37:00:52:7d:ab:bb:20:7f:14:
         08:3c:8e:68:b6:35:34:c2:b0:e6:77:59:5f:6f:66:62:22:79:
         a7:82:df:dc:bc:35:09:61:86:69:7a:31:43:71:1e:a8:ad:ac:
         6d:86:9d:88:65:90:5d:ba:e3:aa:38:a8:7a:08:04:f1:84:2f:
         fe:01:7b:6a:37:bb:88:96:aa:5a:ba:70:fe:8b:35:19:16:a1:
         a5:38:f8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:42 2025 by rpki-client