Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37362e302f32342d3234203d3e20323635363830.roa
File:                     34352e352e37362e302f32342d3234203d3e20323635363830.roa (raw, json)
Hash identifier:          P4A0kceGLIyTkrx07jLZZ92KlttSUmn56gC5E5J+TZk=
Subject key identifier:   78:95:FA:D9:A3:D7:52:22:89:73:7F:E9:4A:A7:D9:F8:22:6B:B0:2A
Certificate issuer:       /CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
Certificate serial:       6F91070427F9EF93AED1E87823AA3EB0A4A81E80
Authority key identifier: E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37362e302f32342d3234203d3e20323635363830.roa
Signing time:             Tue 04 Feb 2025 18:42:19 +0000
ROA not before:           Tue 04 Feb 2025 18:37:19 +0000
ROA not after:            Tue 03 Feb 2026 18:42:19 +0000
asID:                     265680
IP address blocks:        45.5.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:91:07:04:27:f9:ef:93:ae:d1:e8:78:23:aa:3e:b0:a4:a8:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80A8AB689AB034F3F64DE7FFC596924B02BA842
        Validity
            Not Before: Feb  4 18:37:19 2025 GMT
            Not After : Feb  3 18:42:19 2026 GMT
        Subject: CN=7895FAD9A3D7522289737FE94AA7D9F8226BB02A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d2:bc:1f:c6:9c:25:47:35:c1:9e:a7:eb:42:
                    84:ff:26:29:e8:00:f2:1d:d8:b4:0e:7c:e0:58:d3:
                    9a:a8:78:a2:68:fd:81:69:60:08:f6:ae:3f:76:18:
                    53:96:bb:2c:a5:a2:9c:67:c1:87:2f:64:e8:ea:ff:
                    a2:e5:40:26:5f:96:7d:cc:30:34:5c:8f:d7:b2:db:
                    17:f2:17:7e:67:35:73:65:f4:38:87:15:d3:64:a2:
                    a6:d6:73:8c:4d:2d:d5:7f:0e:d0:66:b2:d4:1e:fa:
                    bf:dd:64:e1:cd:10:48:04:69:25:6c:fe:9b:b1:9f:
                    da:8e:57:9a:16:b7:35:ad:30:5b:c4:00:da:d3:3a:
                    be:52:14:ed:10:af:79:16:00:f4:8e:97:72:7b:46:
                    30:7a:80:88:c7:aa:d3:06:82:ae:db:4d:29:56:84:
                    6c:b2:87:42:d9:89:d5:5a:c5:09:7b:69:52:0a:cd:
                    9e:ab:80:c4:e6:f1:0d:da:84:b2:05:8b:56:39:ba:
                    bc:47:e7:1f:56:72:e4:d9:5b:65:33:11:ba:e4:7c:
                    e8:5b:82:f2:70:ad:e2:43:c3:75:ad:79:0f:a8:9e:
                    ca:c3:85:91:79:40:5f:ed:08:be:7f:04:33:7f:b6:
                    30:47:ed:b8:78:1d:2e:9b:2b:59:4d:2b:4c:11:c6:
                    db:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:95:FA:D9:A3:D7:52:22:89:73:7F:E9:4A:A7:D9:F8:22:6B:B0:2A
            X509v3 Authority Key Identifier:
                keyid:E8:0A:8A:B6:89:AB:03:4F:3F:64:DE:7F:FC:59:69:24:B0:2B:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80A8AB689AB034F3F64DE7FFC596924B02BA842.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/259B7A4A6BF7FADB2C5E38124645C110FFFB6004B82A97BDE19A2CBB2B95ECAC/0/34352e352e37362e302f32342d3234203d3e20323635363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:38:7f:86:c1:ee:ec:34:1d:db:11:f8:a2:ac:7f:21:93:
         45:12:5b:e2:cf:90:a1:5a:a4:61:ef:7e:3d:f5:d5:de:a0:61:
         55:77:1d:14:91:d4:0c:47:e0:8f:e3:61:69:34:7e:c0:64:05:
         00:0f:71:19:03:b2:bd:66:f0:7f:3d:e8:49:0c:0a:a7:cd:3c:
         bf:bc:ba:a8:4d:2e:11:8c:45:2c:a0:01:03:3f:94:95:b2:5e:
         47:a7:ee:5e:fc:d7:ae:35:ac:ec:c2:d9:7d:df:45:2a:7f:ab:
         8a:09:62:23:b2:be:d2:51:fb:20:be:45:b2:c5:08:31:52:03:
         ce:30:7c:69:f6:7c:19:f5:64:4b:8f:5c:a0:45:37:bc:69:8e:
         66:fa:88:7c:e6:05:a2:56:9e:99:3c:65:0e:8c:7d:c1:a3:80:
         65:c6:d9:a4:7d:2f:b4:67:d0:6d:40:a9:01:3f:ef:91:35:9c:
         e3:4b:02:dc:79:8b:48:f0:dd:d7:44:77:a0:b6:cd:f0:bd:74:
         2f:18:37:43:15:88:6b:b5:f9:a6:ce:24:3e:18:87:a3:ea:fd:
         e9:8c:ff:da:29:f7:88:11:be:15:72:e7:92:60:d3:6e:af:84:
         48:81:c5:c9:06:56:d1:1a:1e:e1:50:1b:7f:24:a2:e8:ac:2c:
         da:4d:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:40 2025 by rpki-client