Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32342d3234203d3e20323637373330.roa
File:                     34352e3136362e3137362e302f32342d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          x2fLoH5lYH0GGz2fgAo5yloGS8diO2Drx0TDPnBBluw=
Subject key identifier:   EA:4F:84:2D:4C:BA:52:E2:03:D5:DC:D1:7B:1F:0F:0F:DA:FF:87:6E
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       6D5F1491A1608A0DE3D002A121DDD2867F6184C7
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32342d3234203d3e20323637373330.roa
Signing time:             Tue 04 Feb 2025 18:10:06 +0000
ROA not before:           Tue 04 Feb 2025 18:05:06 +0000
ROA not after:            Tue 03 Feb 2026 18:10:06 +0000
asID:                     267730
IP address blocks:        45.166.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5f:14:91:a1:60:8a:0d:e3:d0:02:a1:21:dd:d2:86:7f:61:84:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Feb  4 18:05:06 2025 GMT
            Not After : Feb  3 18:10:06 2026 GMT
        Subject: CN=EA4F842D4CBA52E203D5DCD17B1F0F0FDAFF876E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:b0:04:3f:5e:13:6c:06:2e:e4:f8:21:7d:
                    e0:61:4b:89:ce:52:db:ff:f1:ec:3b:2b:82:43:60:
                    5d:23:a8:00:ae:9a:68:ab:9f:7e:1b:cd:15:61:89:
                    df:84:34:81:44:e1:f1:5f:6c:35:87:83:95:d9:07:
                    f7:59:cb:06:d1:4e:c7:b8:9f:be:b2:d1:3a:c1:d2:
                    e9:7c:50:a7:f8:0c:ad:0a:df:ec:fe:7f:81:35:00:
                    15:fc:7c:c3:17:ef:9e:24:70:53:d9:79:14:ce:71:
                    3e:0f:27:d7:39:29:23:72:32:ce:74:47:9a:89:fa:
                    c8:ee:e2:ac:f5:b1:47:6a:96:ac:ce:35:e9:bd:a1:
                    09:82:61:41:04:18:9b:b5:59:f4:98:f8:69:3c:81:
                    6a:18:02:48:1d:a5:fd:1c:5f:53:17:95:30:3a:f9:
                    f8:68:0a:72:a7:cc:6c:a5:e8:ae:60:4e:5d:af:6a:
                    9b:50:76:90:46:41:5a:f9:32:1e:49:0b:05:6c:dc:
                    28:f0:2c:c2:b6:59:c1:63:aa:12:5b:5f:5c:07:b6:
                    03:ae:06:91:40:dc:de:d9:55:17:2d:fd:7d:b8:28:
                    a2:2f:6b:f3:0b:9f:a8:91:ae:7d:20:1a:f8:04:47:
                    79:c6:8d:09:de:f6:d7:6e:e5:26:43:8d:95:25:b8:
                    03:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4F:84:2D:4C:BA:52:E2:03:D5:DC:D1:7B:1F:0F:0F:DA:FF:87:6E
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137362e302f32342d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:41:5a:8d:27:48:8e:8e:cc:62:63:be:37:98:17:e8:57:15:
         0d:0d:02:19:82:8d:a7:a6:95:43:a4:00:a1:f6:39:1c:53:19:
         5c:15:00:82:fd:41:90:c1:04:5d:11:1a:bd:af:42:70:d4:e2:
         c5:fe:fd:73:8b:c4:48:0d:d1:fa:54:84:ae:e7:f2:5c:cc:c7:
         c5:9e:bf:f2:82:13:63:7f:0b:65:5f:c3:eb:67:49:65:e9:41:
         dc:67:01:30:74:72:e6:fa:4b:69:c3:cd:3e:7c:b3:a6:ce:30:
         59:f7:3b:25:91:50:69:8e:c8:58:d4:3a:3c:1a:4d:de:da:dd:
         8a:cf:f5:9d:16:98:81:d9:3b:7c:f3:36:d1:6e:7e:c2:5b:ab:
         0c:43:dd:af:a1:40:88:78:78:99:b0:40:a4:a0:89:a8:44:6b:
         47:41:37:5a:68:82:f7:38:56:55:fe:f2:66:6d:06:b7:2e:b3:
         30:04:57:8d:82:c8:62:e5:50:3b:14:a4:39:f6:12:46:03:d4:
         86:5b:0e:2f:ca:ff:1d:3b:5e:c5:33:25:be:94:91:30:0c:4c:
         4f:75:a0:73:9f:11:44:e6:e3:f1:88:bc:49:11:23:55:9c:21:
         33:d6:5b:d0:18:83:c1:70:27:ea:d2:6a:64:27:7e:b3:16:16:
         77:df:01:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:26 2025 by rpki-client