Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/34352e37302e3131362e302f32322d3234203d3e20323635383234.roa
File:                     34352e37302e3131362e302f32322d3234203d3e20323635383234.roa (raw, json)
Hash identifier:          GEsbDiQHV0O2ibY7nWpKcgdy9BimV5L79fmwr+SdEik=
Subject key identifier:   B6:23:F7:2F:44:3B:71:88:7C:55:55:82:C7:45:B1:1E:1E:44:63:AE
Certificate issuer:       /CN=E206D248C817DF6A626A543E755E101728608BAB
Certificate serial:       02B3872243B7FA0A4BEF4F5764590B5F87827B0E
Authority key identifier: E2:06:D2:48:C8:17:DF:6A:62:6A:54:3E:75:5E:10:17:28:60:8B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E206D248C817DF6A626A543E755E101728608BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/34352e37302e3131362e302f32322d3234203d3e20323635383234.roa
Signing time:             Tue 04 Feb 2025 18:39:07 +0000
ROA not before:           Tue 04 Feb 2025 18:34:07 +0000
ROA not after:            Tue 03 Feb 2026 18:39:07 +0000
asID:                     265824
IP address blocks:        45.70.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b3:87:22:43:b7:fa:0a:4b:ef:4f:57:64:59:0b:5f:87:82:7b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E206D248C817DF6A626A543E755E101728608BAB
        Validity
            Not Before: Feb  4 18:34:07 2025 GMT
            Not After : Feb  3 18:39:07 2026 GMT
        Subject: CN=B623F72F443B71887C555582C745B11E1E4463AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:00:8a:f4:4a:90:dd:56:ea:4f:6c:93:98:
                    d6:4e:e0:db:ea:f3:19:3e:06:b0:56:24:80:53:49:
                    cb:ef:ba:f8:d0:00:c6:b8:1b:77:56:43:3b:94:2c:
                    45:20:14:28:43:6f:d5:51:f3:50:21:d7:51:b1:9b:
                    85:a4:a8:3f:47:47:25:30:e7:37:67:53:ba:2e:a1:
                    9e:a3:6d:a7:8e:b0:4d:81:93:90:45:b1:8a:60:04:
                    77:33:42:4c:18:e8:c7:91:65:76:c9:4f:d9:c8:7b:
                    0c:81:e7:a9:36:f5:a0:2c:e6:a6:f7:b5:26:26:6d:
                    4d:83:7d:71:f4:89:e8:ca:4e:eb:9f:b0:df:6f:0e:
                    71:47:ec:f4:c8:96:5f:47:14:e7:1a:b8:47:b1:8a:
                    ba:02:b5:87:39:26:ea:33:2d:69:ec:c7:7f:1d:58:
                    3e:bb:af:ec:cc:17:4b:01:c0:de:d8:ae:23:52:3e:
                    80:23:42:91:18:6a:2a:47:e6:48:2a:9d:e1:44:a3:
                    19:34:45:2a:45:91:31:dc:ef:38:00:2a:41:31:ec:
                    3d:7e:49:ef:63:e6:45:ca:30:db:84:0b:6b:c4:a3:
                    4f:fb:d4:a8:a8:cf:2b:58:42:e3:d9:64:cd:f5:76:
                    af:c3:99:13:d5:b6:e6:1a:df:2c:64:50:aa:91:ce:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:F7:2F:44:3B:71:88:7C:55:55:82:C7:45:B1:1E:1E:44:63:AE
            X509v3 Authority Key Identifier:
                keyid:E2:06:D2:48:C8:17:DF:6A:62:6A:54:3E:75:5E:10:17:28:60:8B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/E206D248C817DF6A626A543E755E101728608BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E206D248C817DF6A626A543E755E101728608BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1D8BDEDF2AE011656FE0BBC3A9483C01F382F95E66196BB232023DB3C2B8E827/0/34352e37302e3131362e302f32322d3234203d3e20323635383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:13:68:ba:77:67:da:a8:e8:aa:e5:f1:51:cb:d0:ed:e7:e2:
         bf:25:28:ad:c4:2a:b1:64:af:51:f2:b1:22:d9:ea:dc:f6:5f:
         98:d2:fa:fe:8f:25:9c:de:65:bd:67:98:bf:30:dc:a9:f2:5c:
         96:fb:bc:28:d2:69:f2:b4:f7:b8:4b:fc:37:f3:53:b6:50:56:
         13:e3:58:00:2e:93:1d:79:7c:0b:13:66:65:ac:b6:f5:5d:93:
         b6:36:0c:f9:54:d8:ed:45:d3:75:6b:95:ee:e7:19:c4:9e:2e:
         47:f7:a7:16:f3:6b:25:ec:70:ae:5f:93:d1:54:17:5b:07:1a:
         0b:0f:5e:ea:c9:01:ea:7c:9c:40:11:83:34:b6:10:be:fe:e9:
         9f:33:26:04:a5:b8:03:d2:ec:9a:08:59:f1:20:9a:dc:b8:d7:
         77:1b:03:73:e9:ca:e6:44:25:c7:e8:46:64:95:6a:66:34:02:
         96:9e:8e:b3:9b:4f:73:6d:ba:9d:72:1e:ef:e2:a5:28:76:2a:
         c0:3d:64:43:73:fe:98:37:33:aa:8c:88:94:de:5e:7a:10:b5:
         92:93:24:c9:55:29:91:2a:e1:17:1e:32:a5:62:d8:aa:19:8a:
         0a:bb:3a:90:0c:32:e1:37:3b:d2:70:7c:fa:f5:20:e3:13:b3:
         1d:b8:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:49 2025 by rpki-client