Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136312e302f32342d3234203d3e20323636383536.roa
File:                     34352e3233392e3136312e302f32342d3234203d3e20323636383536.roa (raw, json)
Hash identifier:          vV2Sr96+qpAXEF8bmoutxRgfAOAP6+59xxrj8irLQf8=
Subject key identifier:   35:D8:62:6E:7C:7B:78:A5:FA:CF:3C:5B:01:C2:1D:58:23:E8:3B:2C
Certificate issuer:       /CN=76799C3E256CD774538C329B5B66813C321D7693
Certificate serial:       046EB048929072B0E699940D4D1011BF0051BB30
Authority key identifier: 76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136312e302f32342d3234203d3e20323636383536.roa
Signing time:             Tue 04 Feb 2025 18:49:57 +0000
ROA not before:           Tue 04 Feb 2025 18:44:57 +0000
ROA not after:            Tue 03 Feb 2026 18:49:57 +0000
asID:                     266856
IP address blocks:        45.239.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6e:b0:48:92:90:72:b0:e6:99:94:0d:4d:10:11:bf:00:51:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76799C3E256CD774538C329B5B66813C321D7693
        Validity
            Not Before: Feb  4 18:44:57 2025 GMT
            Not After : Feb  3 18:49:57 2026 GMT
        Subject: CN=35D8626E7C7B78A5FACF3C5B01C21D5823E83B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:04:fc:be:c2:fc:a0:ec:14:40:48:5e:0d:
                    8e:36:10:9b:67:a9:e5:4c:87:2b:e1:2e:1f:63:c1:
                    af:22:20:60:7e:2a:2d:b8:bb:b6:9f:0a:58:31:88:
                    7d:f9:bc:18:53:d3:96:8e:54:b5:82:04:76:8c:19:
                    06:71:fe:00:c1:52:04:9a:3d:be:23:59:c0:ee:43:
                    cc:d2:ac:82:00:36:5c:d2:dd:69:cb:a2:b4:26:cd:
                    be:22:a0:09:2b:d8:17:3b:04:a0:16:7e:db:19:43:
                    b9:37:69:55:e7:9e:d3:6b:a5:89:12:45:cf:68:2d:
                    ee:ab:64:f4:b3:53:2a:43:6a:76:3d:ee:93:5b:5b:
                    0c:58:27:0b:30:e9:6f:d7:7b:a6:63:02:2a:33:46:
                    63:4c:65:7a:0b:c1:cb:0d:59:7d:e9:4c:9e:67:09:
                    57:6b:b3:34:56:19:4a:c4:98:fc:7d:17:5c:c9:76:
                    0d:82:88:79:32:41:04:51:62:4b:73:d8:45:80:e0:
                    5a:f8:f1:3b:09:eb:2e:fe:59:c0:e3:1d:ce:d6:ed:
                    6e:02:07:c2:8f:d7:68:5e:2f:8b:ca:a5:e0:c4:39:
                    d8:bd:65:30:f7:07:14:8d:c7:a2:2a:10:c7:77:4c:
                    51:11:3e:28:cf:03:fd:e2:62:1f:1d:37:16:c9:1c:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:62:6E:7C:7B:78:A5:FA:CF:3C:5B:01:C2:1D:58:23:E8:3B:2C
            X509v3 Authority Key Identifier:
                keyid:76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136312e302f32342d3234203d3e20323636383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e1:32:db:9d:f5:35:d8:2b:b1:60:20:61:70:5d:a2:e7:be:
         bd:72:13:90:4d:9a:34:97:f5:fa:5d:54:6b:61:70:89:e4:49:
         b1:95:0e:f5:0d:b4:05:e7:60:1b:9f:55:d6:36:38:54:73:d5:
         a2:e9:91:5e:07:9b:06:96:f5:f6:2f:27:d5:b2:0c:52:8d:c7:
         f9:6e:56:32:cc:e2:f1:ab:10:68:4c:ff:f5:71:35:5e:ea:0a:
         b4:5c:99:e1:cd:52:fd:4a:cf:33:8b:69:e8:dc:21:2b:59:3b:
         0c:54:4d:f2:f4:69:a2:8d:be:de:ec:39:74:07:f9:ca:a2:7f:
         36:2a:ec:41:8c:b4:27:5e:e3:43:d1:ff:aa:28:21:ba:8a:90:
         1e:e3:d1:4e:f5:89:32:8a:a4:20:e7:59:ea:09:4a:ef:04:5f:
         8a:3c:be:c0:b2:68:a2:96:0b:f4:71:f7:0c:2c:21:1c:83:4c:
         86:72:38:e2:7b:de:2d:03:39:a3:38:7e:e5:5f:1c:8f:df:70:
         5c:f5:20:86:a6:72:3e:21:9c:ba:5d:9e:61:d6:cc:4d:53:bc:
         26:b8:55:7b:5c:33:08:a5:8e:15:c0:a9:f1:f7:1d:92:16:45:
         b3:f5:d9:cc:47:8c:f6:0d:7e:45:86:84:34:77:99:01:b2:b1:
         3f:e9:5a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:49 2025 by rpki-client