Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/34352e3233322e39362e302f32322d3234203d3e20323636373533.roa
File:                     34352e3233322e39362e302f32322d3234203d3e20323636373533.roa (raw, json)
Hash identifier:          i4mTcsa9PfB2XUK9ciOX0wuhJDSWT4yXMpK+ildHeHw=
Subject key identifier:   74:C6:B2:69:C4:84:79:C5:19:45:7F:F0:2C:2E:C7:8F:4C:4E:37:A1
Certificate issuer:       /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Certificate serial:       2B0272B4C8A68788C07D18BE60B62DB9AF0E1A14
Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/34352e3233322e39362e302f32322d3234203d3e20323636373533.roa
Signing time:             Tue 04 Feb 2025 20:02:53 +0000
ROA not before:           Tue 04 Feb 2025 19:57:53 +0000
ROA not after:            Tue 03 Feb 2026 20:02:53 +0000
asID:                     266753
IP address blocks:        45.232.96.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:02:72:b4:c8:a6:87:88:c0:7d:18:be:60:b6:2d:b9:af:0e:1a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
        Validity
            Not Before: Feb  4 19:57:53 2025 GMT
            Not After : Feb  3 20:02:53 2026 GMT
        Subject: CN=74C6B269C48479C519457FF02C2EC78F4C4E37A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:19:08:3c:50:08:32:74:15:be:00:2b:75:
                    4a:cd:93:94:f4:29:80:c9:a4:a7:ac:3d:b0:87:3f:
                    ce:c1:c1:4f:a6:95:2a:07:04:d1:f6:37:50:b3:18:
                    a8:de:be:a2:cd:cd:2f:18:84:f4:b8:8f:cb:83:2f:
                    73:20:0b:05:20:35:be:ee:84:96:06:1a:9f:bd:d0:
                    6c:bc:39:95:43:da:87:a4:ac:6d:bc:e2:4c:44:d4:
                    a7:40:a0:7a:56:f3:5c:12:26:dc:96:0c:dd:43:05:
                    83:5a:cb:a0:fb:97:77:af:57:d2:86:e2:b7:e1:b8:
                    67:73:ba:8d:a6:ad:74:da:9d:75:af:d1:18:b0:f6:
                    43:b2:c3:ba:6c:f9:ad:14:5a:0c:04:76:8b:6b:20:
                    be:b1:23:e0:ab:01:b5:e5:ff:1e:57:9b:f8:4b:e8:
                    8d:b4:c2:4f:8f:94:d4:98:26:a3:e4:cc:88:66:db:
                    c8:8d:53:25:e7:d9:56:7b:2c:a6:7b:20:c2:ad:44:
                    39:9f:ea:5b:d5:61:5d:8d:a5:3c:32:e3:e9:ce:bf:
                    2b:c9:49:23:80:60:d2:e0:65:7f:c4:0b:77:af:6b:
                    33:eb:7a:8c:2b:fa:c4:c6:1e:3e:58:8b:aa:f9:be:
                    7d:fd:e2:ca:62:f7:b7:b4:1b:c7:70:1c:96:54:a8:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:B2:69:C4:84:79:C5:19:45:7F:F0:2C:2E:C7:8F:4C:4E:37:A1
            X509v3 Authority Key Identifier:
                keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/34352e3233322e39362e302f32322d3234203d3e20323636373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:4d:f6:7e:21:d9:89:0f:9d:a9:48:4c:29:f8:ab:3f:10:
         92:da:56:64:a1:d0:0e:1d:01:f1:3e:f1:4e:6d:ed:da:6e:c3:
         3b:b4:fe:6d:d2:df:37:84:3e:88:f3:2b:36:66:f3:2a:52:61:
         11:82:38:c0:ab:49:98:27:ea:71:31:70:cd:e1:2a:ac:35:96:
         fd:96:52:65:b3:e4:a1:89:60:b7:fe:eb:c8:bb:e6:63:b7:c0:
         ca:de:ed:68:50:ec:90:7d:e5:9c:0d:96:06:fc:82:e7:52:4a:
         72:1b:95:d9:48:b9:c0:c6:08:ca:aa:03:bd:f3:28:92:ed:70:
         63:86:68:3e:42:58:8f:92:9a:8f:74:82:7a:bb:ae:02:27:ab:
         48:c9:5a:d1:25:a0:cf:ea:76:dd:ab:51:47:5b:93:8d:55:a7:
         da:ab:89:78:04:ec:ee:8b:b3:56:f9:b7:6c:36:e4:26:6a:90:
         df:d9:ee:44:10:bd:ee:9d:71:9e:f2:7f:37:c3:54:93:f1:77:
         5d:44:65:fa:ac:a4:6f:45:ec:55:de:70:75:6d:02:14:24:fc:
         be:5c:99:84:7b:48:8e:18:e9:7a:15:1d:e7:69:8a:2b:45:b3:
         ab:19:20:db:cb:5f:4b:f8:87:9b:0a:88:52:6e:70:56:f7:4b:
         0f:21:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:50 2025 by rpki-client