Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e33302e302f32342d3234203d3e20323637383431.roa
File:                     34352e3136332e33302e302f32342d3234203d3e20323637383431.roa (raw, json)
Hash identifier:          uJHQe5c/aMrL19H3TKwPu3dsE9j9+OnzcgTRbR1CWl0=
Subject key identifier:   49:52:F1:F3:E1:46:25:CE:B4:98:92:A9:18:B2:98:50:B1:96:49:BC
Certificate issuer:       /CN=B83212ED5241F8A76D1955EDB09C991FF777815E
Certificate serial:       470914B62A76AE1945C4013B7BDD67B30A777DA8
Authority key identifier: B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e33302e302f32342d3234203d3e20323637383431.roa
Signing time:             Tue 04 Feb 2025 19:56:48 +0000
ROA not before:           Tue 04 Feb 2025 19:51:48 +0000
ROA not after:            Tue 03 Feb 2026 19:56:48 +0000
asID:                     267841
IP address blocks:        45.163.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:09:14:b6:2a:76:ae:19:45:c4:01:3b:7b:dd:67:b3:0a:77:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83212ED5241F8A76D1955EDB09C991FF777815E
        Validity
            Not Before: Feb  4 19:51:48 2025 GMT
            Not After : Feb  3 19:56:48 2026 GMT
        Subject: CN=4952F1F3E14625CEB49892A918B29850B19649BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:7c:53:73:6d:21:be:a1:3c:45:0f:6b:1b:
                    77:b8:c6:5e:44:df:e5:cd:49:c4:e1:22:54:c7:74:
                    e1:f3:10:0b:55:3f:01:58:8d:72:ef:69:06:2b:6e:
                    60:e8:c0:b8:b3:d9:c5:e2:24:95:75:3c:3f:aa:18:
                    83:18:0c:89:4a:a3:1e:5a:75:a1:14:39:31:71:4d:
                    e4:7f:99:3f:dd:ed:f4:53:d0:55:3d:a0:8b:53:97:
                    26:b9:aa:73:b4:be:17:61:11:c2:91:f0:1d:6f:ef:
                    60:e9:15:86:8d:80:d4:0b:25:61:84:00:8b:b6:9c:
                    c9:88:74:68:11:2b:75:b4:21:45:07:2e:f3:aa:ea:
                    78:58:e4:e0:42:ff:1a:2d:e2:32:bc:4f:11:94:1d:
                    b1:85:07:45:4a:3d:bd:bc:ef:50:c6:8f:b8:38:d9:
                    f1:64:e5:5a:b9:43:c4:4d:34:53:e2:ed:6d:64:aa:
                    79:19:fa:3a:42:47:25:9e:10:8f:19:b6:72:2d:2b:
                    ed:7f:4e:6b:54:bf:ac:ea:cd:7d:9c:a1:2d:1d:6d:
                    0e:35:c4:66:07:ac:bc:15:61:d0:e0:68:4e:02:d7:
                    40:71:cc:02:80:dc:5b:76:9e:5a:2b:13:c1:57:9f:
                    6d:fd:d0:90:cf:f3:c5:6d:67:49:d4:9d:63:57:e2:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:F1:F3:E1:46:25:CE:B4:98:92:A9:18:B2:98:50:B1:96:49:BC
            X509v3 Authority Key Identifier:
                keyid:B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/34352e3136332e33302e302f32342d3234203d3e20323637383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ce:8f:d0:7a:2c:4d:ef:77:44:09:76:19:e6:28:c1:ea:d2:
         bc:4c:8d:41:72:af:9f:8a:02:5e:1b:40:44:19:c4:6d:50:75:
         4b:99:3a:3e:8e:a9:13:8a:39:1d:5f:7a:cd:78:4e:c3:31:d0:
         82:9f:97:d7:e8:28:6a:91:1c:e1:38:34:01:c1:4d:e3:bc:d1:
         84:01:12:82:a5:6a:29:a4:4a:7e:98:49:83:cf:3d:3e:a9:40:
         84:d7:cb:0c:49:7c:0f:af:8d:bd:14:8c:3e:21:9c:72:82:81:
         ac:ed:a3:fe:f1:3d:16:cb:84:19:e4:9a:25:bc:30:b3:bf:5e:
         a6:28:59:a5:f7:da:3a:3f:7e:f1:1b:3d:0f:30:fd:4d:f7:f7:
         a5:9e:66:7b:5f:da:f6:7c:ef:3a:a3:ba:c6:90:42:8c:fd:48:
         ab:90:64:65:95:b6:5b:d2:8e:54:f2:be:58:f3:8a:1c:5d:de:
         95:ba:60:9f:f7:19:18:5d:c3:35:85:8a:c8:ad:ae:5a:72:0f:
         f9:ee:fa:a5:a0:bc:67:e7:ab:1f:7f:12:bf:f6:dd:23:b9:b4:
         b1:54:5e:c8:4c:b9:f9:a9:3f:0e:8b:78:6e:cc:06:1d:5a:6e:
         4b:66:1b:1e:b7:57:84:b9:ce:35:63:de:68:fa:d0:5c:a9:be:
         54:f8:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:12 2025 by rpki-client