Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa
File:                     34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa (raw, json)
Hash identifier:          7NoMRruYmqxXkcMhPhMwJpixjjPXS7U8DYtxF3pigXw=
Subject key identifier:   48:F0:3C:A9:20:A5:00:74:44:49:08:20:E0:55:88:51:A2:E2:5B:B1
Certificate issuer:       /CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Certificate serial:       2E495D62D3E047E92E855218FD9AC6BDE4E87C44
Authority key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa
Signing time:             Sat 08 Feb 2025 14:09:20 +0000
ROA not before:           Sat 08 Feb 2025 14:04:20 +0000
ROA not after:            Sat 07 Feb 2026 14:09:20 +0000
asID:                     272141
IP address blocks:        45.171.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:49:5d:62:d3:e0:47:e9:2e:85:52:18:fd:9a:c6:bd:e4:e8:7c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
        Validity
            Not Before: Feb  8 14:04:20 2025 GMT
            Not After : Feb  7 14:09:20 2026 GMT
        Subject: CN=48F03CA920A5007444490820E0558851A2E25BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:03:b8:a1:45:f8:d7:93:d2:17:16:ee:67:be:
                    31:1b:d7:13:2b:ec:2c:7f:e2:5a:4c:99:b2:e6:6f:
                    7e:75:df:37:45:b0:79:03:6e:d4:a9:5a:9e:bb:7b:
                    24:95:4a:51:fd:46:17:2b:84:63:76:7b:63:7e:c9:
                    b0:3b:e4:b7:df:9c:8f:51:25:f4:a5:0c:a1:fe:5d:
                    37:55:fc:53:27:42:8a:ee:61:44:d0:3b:fd:ca:42:
                    40:cd:cd:22:b0:5e:39:e5:59:fe:a7:fd:fb:95:21:
                    c9:a3:d2:3a:16:66:37:0f:da:0f:f5:08:17:db:6b:
                    56:cf:25:c4:38:a7:9f:36:d0:da:03:07:a3:3b:60:
                    07:31:70:db:6a:0c:27:b6:bd:30:f5:56:86:f2:8c:
                    87:12:33:11:ad:56:23:29:c5:e3:12:6d:03:1e:65:
                    8f:5e:82:60:c2:c9:26:bd:e1:27:fa:f1:f7:f4:7b:
                    03:6f:f5:fa:1c:65:ec:67:b5:3b:4b:00:04:21:e4:
                    63:ea:95:87:af:bd:46:d1:86:35:b2:82:57:58:61:
                    76:4d:66:08:30:36:ad:eb:b7:a6:c5:3c:6c:60:27:
                    20:3c:59:30:95:a8:e8:b8:a0:4e:17:53:3d:9d:2f:
                    66:a6:96:04:d8:46:3e:28:ca:c0:68:ea:94:c4:ba:
                    68:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:3C:A9:20:A5:00:74:44:49:08:20:E0:55:88:51:A2:E2:5B:B1
            X509v3 Authority Key Identifier:
                keyid:A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136342e302f32322d3234203d3e20323732313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:46:f8:71:26:1c:6c:cf:d7:36:4f:d3:a5:26:e5:d7:eb:c2:
         fc:97:89:5d:75:7b:ef:9a:17:1c:82:b0:b0:05:fe:aa:61:a9:
         bf:a7:16:83:14:c4:89:67:ab:a0:a4:de:07:65:17:93:a4:fe:
         d0:ac:e1:4b:1b:9f:e8:af:a2:5b:2f:e8:35:3d:17:37:34:5f:
         5e:2d:91:08:9d:e3:fe:42:ef:e8:69:5e:58:4f:37:2e:b8:74:
         b5:e5:98:84:e7:a2:16:ad:61:b5:cb:50:51:ae:c9:06:c7:b0:
         50:54:7b:de:49:6c:7f:eb:94:5c:74:48:4b:f8:b7:e7:1e:1e:
         e5:71:c2:3a:ef:ec:65:3c:0a:c0:e7:38:19:6c:8d:0e:34:86:
         12:28:aa:7b:85:f3:bf:ce:e0:f5:aa:6c:aa:2f:7c:52:76:09:
         9d:20:86:41:cd:3d:af:8a:42:3e:76:10:98:03:a1:98:59:89:
         6c:04:6b:94:11:d7:64:4c:68:3d:99:bc:9f:6f:57:15:4b:6e:
         b3:6f:5e:7a:b0:98:02:d9:98:9a:55:0f:37:c3:0e:66:1e:df:
         85:b8:4a:97:a3:99:0b:cd:f1:a8:56:19:26:aa:b2:26:8e:4e:
         62:8c:4b:27:29:24:4d:2e:bf:cb:ca:6f:d3:e2:9e:d1:8e:b1:
         ed:47:76:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:12 2025 by rpki-client