Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/34352e3138322e34332e302f32342d3234203d3e203532343638.roa
File:                     34352e3138322e34332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          j4pxhGczcvfub+1pWmQ3u0tMIFrBZCIDiCOow0FuYXU=
Subject key identifier:   79:0D:ED:EB:5A:22:A5:27:71:8A:14:F6:E2:9C:AE:07:8B:BE:67:72
Certificate issuer:       /CN=24CA8C9C613F74DE73C0153A83A206D0476833FF
Certificate serial:       276CBFE7E1D42377777E6E4062FABF031BA172DF
Authority key identifier: 24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/34352e3138322e34332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:45:35 +0000
ROA not before:           Tue 04 Feb 2025 18:40:35 +0000
ROA not after:            Tue 03 Feb 2026 18:45:35 +0000
asID:                     52468
IP address blocks:        45.182.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:6c:bf:e7:e1:d4:23:77:77:7e:6e:40:62:fa:bf:03:1b:a1:72:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CA8C9C613F74DE73C0153A83A206D0476833FF
        Validity
            Not Before: Feb  4 18:40:35 2025 GMT
            Not After : Feb  3 18:45:35 2026 GMT
        Subject: CN=790DEDEB5A22A527718A14F6E29CAE078BBE6772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:e0:27:00:4a:14:87:8d:8a:d0:a5:0d:4f:
                    5c:2d:23:36:76:97:5c:31:82:80:1a:63:fe:af:63:
                    f3:aa:2a:bd:f3:38:c8:34:b3:38:70:c0:05:54:13:
                    70:52:b3:8c:a4:7d:ca:d1:61:69:0f:e8:dd:01:f1:
                    8d:21:bf:0e:72:f2:76:28:13:d3:b7:86:72:e1:fa:
                    c9:e8:79:28:aa:a4:0b:7b:4b:13:dc:0f:35:b5:e2:
                    35:19:af:c8:d9:d6:52:17:20:51:ad:e8:65:bd:01:
                    92:ef:31:e0:14:48:a5:da:64:b2:4c:e9:9f:96:54:
                    aa:f1:61:85:b8:03:c5:af:1d:42:3f:38:f3:f6:84:
                    aa:80:7d:f2:2a:01:1e:c1:68:d4:07:f9:05:57:59:
                    8c:7a:e4:c1:83:f7:63:45:e6:6c:d1:61:04:8a:b8:
                    a0:5a:e1:b7:fd:ba:28:5f:4c:4d:2a:ec:fc:30:c4:
                    74:5a:0a:74:7d:a6:ce:cf:cc:ca:b1:19:ac:0b:b0:
                    bd:3b:e5:dc:af:0d:9c:67:62:da:0a:33:ae:38:0f:
                    01:b6:f2:e6:8f:6c:01:b2:6b:ec:b5:c7:e8:31:9e:
                    5d:3f:e0:d3:55:1d:ea:d4:4d:19:74:5a:71:ec:52:
                    a5:43:05:0a:e2:55:ce:72:b0:3a:3e:d7:8a:f5:fe:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0D:ED:EB:5A:22:A5:27:71:8A:14:F6:E2:9C:AE:07:8B:BE:67:72
            X509v3 Authority Key Identifier:
                keyid:24:CA:8C:9C:61:3F:74:DE:73:C0:15:3A:83:A2:06:D0:47:68:33:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24CA8C9C613F74DE73C0153A83A206D0476833FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8350773BDE0C40341E49D287A064E75C032D109E5275E16243D2E9F82DBC7C/0/34352e3138322e34332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:6c:e5:f0:55:97:d5:f3:eb:39:9c:5a:4d:b6:6e:e3:5e:
         43:d1:af:2b:16:84:ac:75:e1:4c:fe:69:64:c4:86:5e:0c:5e:
         e9:6d:51:f5:85:c7:37:e8:ed:f2:ce:20:28:3f:27:dd:62:03:
         40:f1:60:89:31:4b:52:b0:97:91:5e:47:88:68:b5:35:93:19:
         ec:be:a8:18:d3:56:4e:9d:f9:db:56:93:26:7f:d4:92:cb:a3:
         eb:c2:03:d9:35:6a:7c:a5:6e:c5:5b:bb:d8:38:8f:c2:69:3e:
         66:d8:80:29:65:ec:ca:c2:c3:c9:0f:24:d5:ae:10:f6:4f:95:
         bf:7d:d7:0a:c5:02:24:ac:cc:2e:ba:ab:d4:b0:96:02:ae:bc:
         79:d5:6d:b9:20:c8:7a:85:3b:5b:2b:2c:1e:6a:19:d6:d2:94:
         d4:1f:64:83:d1:36:ae:0d:2f:bf:c6:17:f9:a5:f6:e6:d7:93:
         7f:4f:aa:05:24:f5:a8:16:ec:c5:00:a8:87:8b:79:16:a9:f6:
         0a:1d:76:1b:87:39:15:eb:ae:f8:88:56:f1:dd:c2:30:33:1a:
         dd:71:c5:25:67:d9:05:c0:c9:13:4f:59:18:d9:19:7f:3f:ee:
         46:2f:57:8d:de:c0:cc:59:b4:a9:fe:dd:25:a9:0b:f4:2a:2e:
         d9:ff:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:00 2025 by rpki-client