Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa
File:                     34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa (raw, json)
Hash identifier:          WrZcEvJcP6umczKctqMT8vtZ5L9D1EWor/sIN6dUHMU=
Subject key identifier:   AD:62:A0:8F:C8:4C:C0:0A:9C:AA:D9:AC:90:1A:B1:91:26:46:58:BF
Certificate issuer:       /CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
Certificate serial:       69725B76F09F485744E2A196299B2B44F0AF5377
Authority key identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa
Signing time:             Tue 04 Feb 2025 18:41:50 +0000
ROA not before:           Tue 04 Feb 2025 18:36:50 +0000
ROA not after:            Tue 03 Feb 2026 18:41:50 +0000
asID:                     266793
IP address blocks:        45.234.160.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:72:5b:76:f0:9f:48:57:44:e2:a1:96:29:9b:2b:44:f0:af:53:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
        Validity
            Not Before: Feb  4 18:36:50 2025 GMT
            Not After : Feb  3 18:41:50 2026 GMT
        Subject: CN=AD62A08FC84CC00A9CAAD9AC901AB191264658BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:fe:74:93:38:f6:1d:ce:fe:d9:3a:c0:f8:
                    db:1f:70:07:8e:22:4e:a8:47:32:8b:31:88:30:25:
                    79:8c:f8:d4:8f:e2:ae:c7:4f:37:ad:e4:a2:1e:f4:
                    aa:ff:99:4e:7e:a9:48:d6:57:a2:25:62:e1:cf:14:
                    9b:9b:39:4f:54:a1:76:3f:83:58:f6:47:21:79:2f:
                    e0:80:ec:8c:43:ec:18:57:79:97:fd:4c:16:41:c9:
                    0d:6f:82:61:63:e8:76:69:76:35:38:5c:78:cd:0f:
                    4e:95:7c:da:51:df:94:34:38:96:6a:fd:52:6c:8d:
                    42:28:cd:c1:95:6b:c3:74:c2:68:15:43:2f:2b:6b:
                    ae:0b:b4:79:44:73:88:40:45:45:d5:59:7d:4f:d6:
                    11:cb:07:75:e4:66:fb:79:5a:84:ca:8b:43:54:72:
                    82:6e:9d:9a:04:eb:6a:6f:50:d5:7b:d5:a3:9c:47:
                    ca:c0:8c:68:82:31:a1:02:18:8e:1b:68:e6:63:32:
                    95:3e:1c:19:6b:33:2e:02:38:1f:94:bd:52:ec:7a:
                    84:07:5b:b0:5a:24:99:e9:cb:73:18:a0:4c:20:a8:
                    a3:23:14:79:b6:0c:a1:39:5b:98:67:65:37:9d:09:
                    85:ad:9e:3f:56:b8:f6:09:16:71:84:15:bd:cd:26:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:62:A0:8F:C8:4C:C0:0A:9C:AA:D9:AC:90:1A:B1:91:26:46:58:BF
            X509v3 Authority Key Identifier:
                keyid:6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136302e302f32332d3233203d3e20323636373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:97:fa:84:b4:f6:89:c5:fd:86:56:b8:b9:2b:79:ea:f8:
         95:61:4d:b9:b7:ef:34:12:70:b0:5a:e9:21:b2:03:c7:6f:d9:
         01:80:9d:9b:69:5a:2d:3b:d5:6e:24:0a:27:c1:5b:e0:c5:94:
         ce:b1:fb:44:d4:0a:72:4f:30:71:30:e2:02:0c:64:26:44:09:
         46:58:16:9f:28:60:77:05:8f:a0:8e:e4:5f:3a:74:35:8f:2d:
         8a:5c:a4:6e:4c:89:04:75:4b:34:12:22:33:b1:a2:cd:8b:ff:
         a1:53:0b:cd:22:45:2f:0f:c6:53:a6:6e:f5:9a:13:7b:46:ae:
         41:2f:87:9e:2f:ec:5d:96:9b:fe:3f:c6:ce:c7:73:27:5c:a6:
         09:93:13:c4:a7:21:fc:ee:b4:19:21:2d:33:cf:26:17:da:71:
         2b:3a:6b:e1:ed:e5:e8:62:3b:5c:4f:fa:09:ef:66:13:6b:ef:
         57:36:06:04:a4:1c:9b:e1:95:6f:dc:3b:52:e4:6a:76:ff:53:
         d6:33:3e:51:5d:35:8c:8f:f5:06:cc:f3:63:c3:2f:4a:5b:1c:
         6d:5b:01:91:05:db:28:93:bf:28:4a:5b:b8:96:bc:06:32:bb:
         de:ed:03:cc:f2:3d:46:7a:9c:3e:e5:ba:23:21:04:8c:67:75:
         9b:6b:b1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:41 2025 by rpki-client