Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa
File:                     34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa (raw, json)
Hash identifier:          ic052kRg7z9SNEg7lOpr3dWB8ZMeGR3otTnLe4KWj74=
Subject key identifier:   7A:C0:B1:07:93:CB:8B:A5:CC:78:52:85:55:00:2B:9B:F0:8C:B6:88
Certificate issuer:       /CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
Certificate serial:       4B7CEDBD65E84EDB8946EC8F1CAF750E8D4D3918
Authority key identifier: F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa
Signing time:             Tue 04 Feb 2025 18:32:43 +0000
ROA not before:           Tue 04 Feb 2025 18:27:43 +0000
ROA not after:            Tue 03 Feb 2026 18:32:43 +0000
asID:                     266694
IP address blocks:        45.229.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7c:ed:bd:65:e8:4e:db:89:46:ec:8f:1c:af:75:0e:8d:4d:39:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16271A6D5A5968361D977B117B0281F2D2B08AE
        Validity
            Not Before: Feb  4 18:27:43 2025 GMT
            Not After : Feb  3 18:32:43 2026 GMT
        Subject: CN=7AC0B10793CB8BA5CC78528555002B9BF08CB688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:77:1b:87:fb:80:5a:81:6d:00:4f:6f:a6:23:
                    b8:f3:e1:5e:6f:e5:bb:dd:c9:37:60:f8:3e:48:4c:
                    8b:7c:43:71:b9:51:37:54:21:e0:20:db:a8:8f:ca:
                    7a:93:f0:09:dc:86:0e:59:42:53:e1:dc:ed:f6:7c:
                    fc:b3:fb:7b:92:bc:e5:4d:0c:01:3c:55:65:54:42:
                    58:2a:ab:ae:d9:6e:8b:09:57:61:55:a0:a9:28:7e:
                    08:ec:5e:61:0e:4a:9f:d2:c8:3f:c4:07:37:ce:6b:
                    56:6f:df:cc:1c:9d:47:7a:e3:74:04:8b:db:64:5d:
                    bc:b0:9f:cf:b9:41:6e:28:1c:37:3c:aa:0f:fc:b2:
                    43:4a:08:36:7f:79:97:96:3b:d6:5a:fb:6a:8d:73:
                    35:9b:e7:fb:c6:fc:70:1d:6e:b4:21:0a:8c:c6:07:
                    37:7b:ae:57:51:41:80:62:8e:50:8f:1c:e5:b9:85:
                    5e:94:ca:5d:2a:fc:75:32:af:2b:17:b9:d3:82:15:
                    fd:91:53:95:3b:58:e9:83:dc:b6:cd:19:26:2b:6c:
                    41:e8:f4:cc:33:5b:ac:22:91:0e:89:47:7e:cf:03:
                    30:0c:1b:02:fc:c5:71:7c:a4:08:22:04:11:fd:11:
                    ca:09:f8:81:ad:28:e5:95:a7:da:f2:15:75:6a:41:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:B1:07:93:CB:8B:A5:CC:78:52:85:55:00:2B:9B:F0:8C:B6:88
            X509v3 Authority Key Identifier:
                keyid:F1:62:71:A6:D5:A5:96:83:61:D9:77:B1:17:B0:28:1F:2D:2B:08:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F16271A6D5A5968361D977B117B0281F2D2B08AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0C636A1E47A2EA41D574CCAC3AF4962C1CC62538C4C56D9DB43DC13125DBD7B6/0/34352e3232392e3136382e302f32322d3234203d3e20323636363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:fa:6a:cd:b1:dc:f6:9f:8d:1e:fe:91:83:66:d6:b2:52:7a:
         26:71:6c:83:63:ea:6d:9e:ed:15:9d:e6:de:58:73:0a:d1:7a:
         63:dd:d8:b8:01:cd:d8:82:ec:4f:1f:59:ee:f0:f1:bd:c9:fa:
         7d:8c:0c:3a:1d:ab:b7:a6:d0:25:f4:69:ab:3f:a7:42:d0:2b:
         fb:37:25:19:6b:c0:91:3d:bf:c2:c6:34:0d:ee:f7:cb:16:8e:
         f5:f5:e4:11:9a:eb:72:8d:5e:27:b1:b7:75:4a:fb:56:b2:18:
         95:30:dc:0f:a7:1c:ec:e3:5c:85:21:4c:50:a7:1b:c1:be:2d:
         ac:9a:ac:3e:5c:73:25:01:4e:28:06:3a:08:1b:29:cf:b2:0c:
         49:ed:65:f6:e7:28:fa:62:95:1b:e4:a5:3d:db:1b:0f:86:cf:
         5c:5c:b6:31:4e:5d:7c:8f:30:cb:ba:91:0c:d3:19:80:29:94:
         91:ba:b2:77:86:a0:75:86:20:b9:da:35:67:43:13:fc:f3:b6:
         8b:74:86:96:85:3e:39:93:3b:ff:10:92:90:4b:58:ee:58:11:
         d1:3b:fd:1e:5d:54:92:17:68:6e:2d:2a:b7:50:a2:1e:ea:c0:
         44:63:d2:05:2d:80:1e:ef:97:0f:f2:c7:32:26:03:72:7d:a3:
         83:8b:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:50 2025 by rpki-client