Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138312e302f32342d3234203d3e20323632313836.roa
File:                     34352e37312e3138312e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          7kYNunKeNFbFrqR+U7rUrQWDnqwVGJ1rphEJA2RVJoc=
Subject key identifier:   54:7E:54:C7:34:C9:F6:CE:2F:C0:BF:35:7B:32:54:19:68:1E:D2:49
Certificate issuer:       /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial:       3D4B378AD9E63C8D74202A280F4EF93297853D69
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138312e302f32342d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:52:08 +0000
ROA not before:           Tue 04 Feb 2025 18:47:08 +0000
ROA not after:            Tue 03 Feb 2026 18:52:08 +0000
asID:                     262186
IP address blocks:        45.71.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4b:37:8a:d9:e6:3c:8d:74:20:2a:28:0f:4e:f9:32:97:85:3d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
        Validity
            Not Before: Feb  4 18:47:08 2025 GMT
            Not After : Feb  3 18:52:08 2026 GMT
        Subject: CN=547E54C734C9F6CE2FC0BF357B325419681ED249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:ca:01:f0:91:31:6b:36:c2:05:fa:ca:b0:
                    07:63:02:9d:0f:f3:f7:4d:ef:d5:71:a0:00:76:5f:
                    dc:e7:95:bc:bd:90:16:dc:36:56:c0:8a:ff:a5:3c:
                    af:29:9b:ba:ec:29:d2:ce:49:98:28:48:7f:65:aa:
                    54:28:99:47:d6:06:97:99:8c:97:71:7f:ca:77:f7:
                    56:dc:87:74:fb:ec:7f:a8:ef:fa:66:1f:6d:97:5d:
                    54:c3:97:62:71:f2:76:e6:6d:c6:1c:57:c7:72:86:
                    35:2a:35:72:35:e4:62:4d:4a:15:04:f1:1c:e8:ff:
                    94:a3:f5:8d:25:10:af:9f:e5:a2:18:ac:5f:32:39:
                    3e:67:83:23:18:1e:bd:db:6e:d8:9a:80:76:ad:9c:
                    94:9c:5f:61:d5:c4:ef:a5:d6:32:d3:00:2b:c8:11:
                    ff:98:83:54:17:d7:63:37:3c:45:11:e8:dd:3d:4d:
                    35:08:41:51:60:09:5b:b4:45:5a:13:3c:46:7c:09:
                    cb:00:c5:e0:ab:85:7d:d1:2f:17:15:0a:d5:46:41:
                    4a:d8:ad:b7:09:25:1a:29:1a:af:43:2c:a6:c3:dc:
                    ca:52:2b:5d:8e:f7:b4:62:95:76:08:30:1b:10:63:
                    2a:e6:ea:67:d0:dc:a1:57:f0:a8:8d:51:8b:f7:17:
                    f4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:54:C7:34:C9:F6:CE:2F:C0:BF:35:7B:32:54:19:68:1E:D2:49
            X509v3 Authority Key Identifier:
                keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138312e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:41:36:0c:e4:19:e2:e4:8f:a6:ca:2a:8f:ac:a0:d2:58:57:
         8a:6f:ae:88:78:18:58:63:e5:d7:49:d9:e4:03:43:d8:9d:bd:
         26:e6:25:eb:34:7c:fa:6c:6c:02:3d:14:d7:33:98:04:6b:5c:
         82:5b:bc:1c:ff:5c:e5:df:4f:15:be:9b:ea:f7:bf:43:63:d3:
         40:52:dc:b1:1a:b2:ca:3d:a6:2a:88:94:a7:e8:c9:a9:a5:6f:
         98:aa:71:7c:31:11:e5:29:a7:5d:37:8b:61:db:bf:ff:68:da:
         94:b1:49:47:52:db:63:57:3a:c8:74:2d:98:b3:5c:c1:75:e5:
         74:c0:e2:b8:09:3a:32:ec:85:c8:6d:00:7c:90:3e:91:0e:15:
         10:5a:9f:16:55:aa:e3:d8:3e:9d:6a:2d:e3:36:cb:a3:17:c7:
         85:23:32:7f:37:b7:5d:a4:4e:14:c7:df:79:1c:da:c3:cc:1b:
         11:a6:20:69:9d:39:89:8d:20:90:17:96:cf:af:74:0a:fb:45:
         db:36:79:af:07:11:ac:a1:76:34:96:e0:46:a5:86:5b:39:c2:
         cc:ae:48:42:23:5d:0c:9c:18:b5:b0:4f:f8:ac:56:f3:e7:15:
         99:ff:8d:a4:26:4f:88:b2:7d:da:34:2c:de:93:d3:aa:87:41:
         8a:bb:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:50 2025 by rpki-client