Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33382e302f32332d3234203d3e20323632313931.roa
File:                     34352e3136392e33382e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          Avc8OJu14H5hrpaHpWIZVxITq23BbD8bYrxhYkHUXGI=
Subject key identifier:   18:68:EA:DE:3F:62:C9:B0:FD:CF:76:8F:80:E0:E7:5D:C7:1E:9A:CB
Certificate issuer:       /CN=99A57CEBEE8726CF20BD670F637543047A024742
Certificate serial:       291118D21A509374906E37845C569CDE5AF1284E
Authority key identifier: 99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33382e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:53:14 +0000
ROA not before:           Tue 04 Feb 2025 18:48:14 +0000
ROA not after:            Tue 03 Feb 2026 18:53:14 +0000
asID:                     262191
IP address blocks:        45.169.38.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:11:18:d2:1a:50:93:74:90:6e:37:84:5c:56:9c:de:5a:f1:28:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A57CEBEE8726CF20BD670F637543047A024742
        Validity
            Not Before: Feb  4 18:48:14 2025 GMT
            Not After : Feb  3 18:53:14 2026 GMT
        Subject: CN=1868EADE3F62C9B0FDCF768F80E0E75DC71E9ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:26:43:3c:b9:3c:67:e4:90:34:89:5c:14:94:
                    99:3b:41:95:dd:c2:b6:c2:9d:ea:80:85:2e:ea:70:
                    0c:8c:90:c6:79:78:79:27:5c:c4:77:b9:1f:34:4c:
                    73:c1:33:34:63:07:66:7f:c0:d0:ea:a0:7d:11:39:
                    50:2b:85:0b:b8:72:70:89:a3:e6:4b:5f:d8:88:4e:
                    17:a3:a3:45:e2:95:0b:c1:e9:f3:5e:e9:82:9f:0d:
                    ce:4c:4c:d5:8c:e2:2d:8a:0d:47:ab:15:de:63:96:
                    12:bd:40:81:42:89:92:54:46:7b:e3:ac:20:d7:5c:
                    a3:ca:23:fb:88:47:7d:03:12:a6:96:ab:ab:e5:9f:
                    a0:89:6f:e6:f0:4e:a2:2b:f1:71:a4:48:8a:9c:bc:
                    6c:a5:c3:b5:b2:62:57:e5:f4:66:30:47:87:8f:92:
                    c5:dc:00:52:9f:a0:1a:95:10:16:80:5a:5d:3a:20:
                    6b:60:f1:57:28:88:ca:96:ce:d8:58:13:b6:08:be:
                    ed:8b:e9:06:88:d8:49:56:eb:9c:8e:38:68:ab:41:
                    76:8d:95:9f:d4:1e:ae:2f:3f:ce:71:e0:4e:b1:63:
                    50:b6:05:b5:e9:a0:bf:69:0f:a2:de:3e:44:95:98:
                    09:d5:7d:4d:71:e2:21:73:89:f1:2c:44:b4:92:10:
                    95:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:68:EA:DE:3F:62:C9:B0:FD:CF:76:8F:80:E0:E7:5D:C7:1E:9A:CB
            X509v3 Authority Key Identifier:
                keyid:99:A5:7C:EB:EE:87:26:CF:20:BD:67:0F:63:75:43:04:7A:02:47:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/99A57CEBEE8726CF20BD670F637543047A024742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A57CEBEE8726CF20BD670F637543047A024742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25721E26AC8BF5AA7637EA5F0F671CBE8F30557CA2152ADEBCBB1C23E7B3D5AA/0/34352e3136392e33382e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:7f:53:30:1d:b4:d2:57:05:eb:9f:34:35:96:2e:43:5b:
         25:60:54:4d:92:4c:f0:e6:e4:ad:f0:c2:f7:f3:ce:78:c3:08:
         61:45:20:84:2a:95:24:8b:14:1f:08:2f:83:31:e8:1c:2e:5b:
         75:ed:64:d1:5a:40:ff:77:58:0a:17:2a:76:d8:ef:c4:96:a0:
         7d:6b:90:d6:f1:c8:d7:17:e6:ca:94:38:39:bd:8c:83:ce:26:
         c0:58:41:64:23:db:d2:46:c2:b9:5b:05:ed:38:4f:b2:8c:7c:
         a4:3e:8a:4a:88:82:9d:bb:b0:28:a9:1a:e4:af:e0:99:1b:e7:
         b8:99:c7:87:36:bd:b1:90:a8:0d:9f:d6:26:f3:97:5f:86:df:
         96:9c:63:1c:98:7c:0f:0c:4a:fa:ea:da:dc:5b:52:3c:ed:6e:
         8c:e9:1a:44:4c:d0:4b:7b:86:ee:03:39:ab:a1:dd:0e:aa:b4:
         df:a6:0b:c5:39:81:57:a2:13:2d:17:7e:e1:cb:19:9c:a5:f5:
         1d:ca:bb:34:d5:57:26:d3:19:6d:f4:da:44:48:db:bd:10:8f:
         69:37:f1:e3:44:b6:59:73:f0:7a:1e:dd:e9:a3:66:9d:24:c8:
         cf:fc:9c:8d:5d:b2:90:ab:e1:b1:e8:c9:66:1e:d9:1c:e8:d3:
         69:0a:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:12 2025 by rpki-client