Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e32382e302f32342d3234203d3e20323637383431.roa
File:                     34352e3136332e32382e302f32342d3234203d3e20323637383431.roa (raw, json)
Hash identifier:          rz91wq7CmkPg4FNE28JN82cLcjrfZncwDFHsW4Uws0o=
Subject key identifier:   B6:F1:1D:64:BF:57:11:C5:0C:BE:94:AF:A5:AF:DB:6E:48:15:1A:AF
Certificate issuer:       /CN=B83212ED5241F8A76D1955EDB09C991FF777815E
Certificate serial:       32BA3D08398C8266BA593CC02039C6CCD832361A
Authority key identifier: B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e32382e302f32342d3234203d3e20323637383431.roa
Signing time:             Tue 04 Feb 2025 19:56:47 +0000
ROA not before:           Tue 04 Feb 2025 19:51:47 +0000
ROA not after:            Tue 03 Feb 2026 19:56:47 +0000
asID:                     267841
IP address blocks:        45.163.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ba:3d:08:39:8c:82:66:ba:59:3c:c0:20:39:c6:cc:d8:32:36:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83212ED5241F8A76D1955EDB09C991FF777815E
        Validity
            Not Before: Feb  4 19:51:47 2025 GMT
            Not After : Feb  3 19:56:47 2026 GMT
        Subject: CN=B6F11D64BF5711C50CBE94AFA5AFDB6E48151AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1f:b7:cb:95:d0:61:73:fd:4b:1a:02:f9:53:
                    8d:46:c1:86:91:59:05:8a:86:b9:cd:dc:42:6b:bf:
                    95:43:9a:98:b0:dd:01:ae:84:be:55:b6:9f:b6:0a:
                    62:e2:41:89:0f:80:c0:de:f7:ca:7c:d8:fb:54:b2:
                    b7:10:ec:c7:22:5b:f5:91:17:43:c4:8b:0d:7f:d7:
                    a6:3b:03:8a:4c:c9:36:dd:ee:dd:6f:d3:e2:8d:11:
                    4d:22:5a:27:d2:fe:7b:e7:fc:2a:d9:2e:ed:db:cf:
                    91:53:f9:34:f9:6b:96:d3:8a:a6:e9:68:c1:b6:e2:
                    24:10:9d:77:8a:34:76:20:1f:1d:d7:e5:ff:a8:e0:
                    c2:00:51:d9:3f:17:95:bc:93:ee:4f:07:ba:81:d8:
                    ff:3b:79:e0:97:11:d5:7c:78:e5:ea:bf:eb:09:4c:
                    56:8a:68:e2:80:f9:bf:bd:0e:e8:ec:34:61:98:93:
                    5e:d9:d6:8e:59:3d:be:e7:b8:03:f1:e2:a3:2d:a4:
                    4d:b7:0f:0a:6c:b2:24:b3:0c:06:12:1e:34:de:7f:
                    5a:86:4d:d5:58:b6:95:4e:05:2b:8d:2f:55:6f:29:
                    5a:36:7c:b0:ff:d5:cb:22:63:6c:e7:74:70:1f:e9:
                    92:03:ae:97:95:fc:6c:44:27:dd:da:5f:f5:b4:f8:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F1:1D:64:BF:57:11:C5:0C:BE:94:AF:A5:AF:DB:6E:48:15:1A:AF
            X509v3 Authority Key Identifier:
                keyid:B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e32382e302f32342d3234203d3e20323637383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e4:40:1e:f6:e5:38:c0:f0:d4:e9:30:a8:5a:3b:57:a5:67:
         93:e4:3e:83:be:b7:ce:dd:39:33:35:27:30:c2:bc:70:75:f9:
         4d:b2:49:4e:25:0f:cc:c2:b6:f4:13:c6:57:fe:d4:f6:05:41:
         c8:13:a2:41:e4:86:8e:9c:d7:4f:7d:07:54:c2:e2:32:80:b5:
         ac:f0:d5:1a:34:03:23:72:0c:4c:bd:38:41:23:e2:bd:df:64:
         72:cd:90:ff:5e:53:1d:42:4b:be:42:7d:68:a6:61:c5:ce:eb:
         5e:0e:37:3a:35:28:ba:b1:d0:e4:d6:6d:23:6d:cb:58:c7:69:
         04:73:12:2d:b2:dc:87:cb:b1:d0:7f:ed:4c:36:bf:15:71:42:
         ab:17:36:c3:21:98:9a:dc:d5:ca:49:4e:78:42:40:c1:05:51:
         87:71:99:fe:16:cb:fe:75:20:1e:80:d8:05:67:a4:78:ef:62:
         6a:48:cf:fb:74:73:90:b2:a6:6c:68:bf:3f:d0:7f:8d:b9:f4:
         3b:de:95:de:c3:09:e6:98:06:50:2b:e5:26:0d:64:0f:38:82:
         84:71:d3:ff:ed:a4:b3:9b:fc:48:6e:d8:d4:1d:9f:31:8d:14:
         ff:fb:51:79:bd:00:cb:f4:63:9e:27:3d:2c:96:66:87:36:f3:
         61:0d:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:10 2025 by rpki-client