Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa
File:                     34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa (raw, json)
Hash identifier:          XE89ynTdaiW8KtEutDmF9rHRf9MJfUB9fAP2XfEHlMU=
Subject key identifier:   06:77:25:08:2B:B9:E8:35:71:33:F5:94:8A:70:85:ED:7C:82:92:EC
Certificate issuer:       /CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
Certificate serial:       0CDAB5357099AD05769FD8054287A37271BB4464
Authority key identifier: 8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa
Signing time:             Tue 04 Feb 2025 18:38:11 +0000
ROA not before:           Tue 04 Feb 2025 18:33:11 +0000
ROA not after:            Tue 03 Feb 2026 18:38:11 +0000
asID:                     269734
IP address blocks:        45.180.242.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:da:b5:35:70:99:ad:05:76:9f:d8:05:42:87:a3:72:71:bb:44:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14
        Validity
            Not Before: Feb  4 18:33:11 2025 GMT
            Not After : Feb  3 18:38:11 2026 GMT
        Subject: CN=067725082BB9E8357133F5948A7085ED7C8292EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:7c:b4:fa:ec:a2:ac:47:b9:ef:b3:86:73:
                    c0:f8:65:a6:25:72:f6:36:b9:5e:af:23:b5:a8:ac:
                    4a:82:96:f8:8d:91:91:0b:97:1a:e9:86:e4:05:9a:
                    c3:b4:20:94:bc:e1:bf:c8:f8:64:ba:da:92:57:51:
                    0e:e4:ec:fa:79:4a:2c:5c:b3:95:78:b2:f0:be:bb:
                    6a:4f:db:d4:f4:f3:29:09:50:96:68:15:ba:38:7f:
                    83:92:8b:cf:6e:b4:ba:82:ae:8e:d7:81:ed:79:75:
                    c1:e6:04:d6:de:fd:f1:b0:e4:f0:54:5c:06:33:03:
                    e6:7e:15:6f:1f:3c:3e:f8:6c:bf:e9:ef:4b:1d:48:
                    6e:76:3a:f9:1d:0e:1c:30:5f:2e:6f:7f:31:d1:9a:
                    5c:0b:24:cd:ac:22:9b:bd:e3:da:be:35:58:85:87:
                    16:2e:a2:28:15:d2:e7:ed:f4:c7:4b:8f:a0:ce:19:
                    db:36:c6:42:92:cc:fc:c3:3b:93:d9:9f:9d:9c:05:
                    db:e1:63:02:39:c3:f9:0f:de:83:b2:d2:25:5c:88:
                    b5:39:0f:dd:93:ea:72:3f:d4:c9:42:9e:70:76:b3:
                    e9:d8:8b:7a:79:ae:7d:c7:59:53:b9:d8:4f:8c:28:
                    0f:17:fe:d3:55:f5:6e:50:15:5b:20:a8:cf:3d:34:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:25:08:2B:B9:E8:35:71:33:F5:94:8A:70:85:ED:7C:82:92:EC
            X509v3 Authority Key Identifier:
                keyid:8F:88:AC:48:39:4D:A9:AB:A2:BA:9C:35:9E:01:BB:67:E1:A7:2C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F88AC48394DA9ABA2BA9C359E01BB67E1A72C14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E86DBB6A4249CAD590C73765D4BD7E758A4C189D489995D82C5E9E46567E62D/0/34352e3138302e3234322e302f32342d3234203d3e20323639373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:52:d5:a4:28:39:38:59:40:5e:f5:f3:74:75:96:cd:a2:9f:
         78:55:a4:f6:8b:7a:98:2b:00:57:03:8f:1b:f4:11:dd:e5:e3:
         c9:68:13:c1:bd:c5:58:2d:6f:77:a4:17:15:31:e9:53:b9:c5:
         79:9a:ea:f1:70:22:56:57:15:5d:86:e4:aa:2d:c6:2f:65:c4:
         8e:39:97:78:6d:06:6d:2e:38:c0:20:5d:45:b9:b2:fa:73:f4:
         b5:6c:48:23:40:12:ff:72:5c:cd:2b:e6:eb:e7:93:d3:5b:4d:
         c3:ab:91:b9:2b:ca:2a:36:54:53:87:04:f4:98:af:2b:8e:b7:
         97:cd:0e:76:2c:95:1a:99:0f:7e:43:3e:9d:0a:99:86:e9:ab:
         b2:b9:61:16:fe:a5:dc:9a:c6:bd:fc:e4:31:95:93:34:c4:09:
         45:99:0a:0a:1b:dd:ae:3d:83:1f:ff:da:42:7d:82:da:c4:f6:
         ed:d3:08:85:e5:d9:1b:e2:11:74:84:26:7d:42:6c:52:be:b9:
         c9:4a:98:be:86:81:7c:c7:ae:5b:64:93:d9:20:75:06:ce:50:
         ba:a4:d7:00:a5:4c:04:5e:e6:22:37:48:56:f9:eb:a1:09:7c:
         89:0c:7f:d0:b1:5c:50:d8:77:19:d5:ac:04:fa:6b:49:69:74:
         b5:55:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:58 2025 by rpki-client