Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa
File:                     34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          AnXPIL2R6ZPQq/8ZZd4soNM9BKqUvlrS4OrFG66FXgQ=
Subject key identifier:   62:D7:03:B7:F7:86:9D:10:4D:E7:7C:56:94:EF:9F:B1:D5:40:96:80
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       66333E6A36FF7AB734CE15CDC6917C58BB65C7A0
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa
Signing time:             Tue 04 Feb 2025 18:10:05 +0000
ROA not before:           Tue 04 Feb 2025 18:05:05 +0000
ROA not after:            Tue 03 Feb 2026 18:10:05 +0000
asID:                     267730
IP address blocks:        45.166.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:33:3e:6a:36:ff:7a:b7:34:ce:15:cd:c6:91:7c:58:bb:65:c7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Feb  4 18:05:05 2025 GMT
            Not After : Feb  3 18:10:05 2026 GMT
        Subject: CN=62D703B7F7869D104DE77C5694EF9FB1D5409680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:86:56:ec:89:6e:67:ed:fc:65:4e:5c:9c:
                    13:cb:1f:a9:46:72:b8:20:fb:e4:4f:b7:92:1d:b5:
                    75:bc:0c:ec:1c:5c:49:2b:be:a6:6a:73:38:c7:9e:
                    f6:ef:73:be:f9:e9:d3:96:c9:db:ab:9c:3e:32:0c:
                    b4:dd:4e:b7:99:f0:4f:38:76:fb:c8:02:07:37:2b:
                    bd:4a:0d:70:f0:2d:e9:3d:c9:ea:f0:41:3d:88:5d:
                    e4:8a:1b:51:70:dd:20:3f:bc:b7:fc:73:a2:b8:4f:
                    48:ae:2b:58:58:87:78:e0:84:bb:74:f9:c4:5f:7c:
                    d2:3a:58:9a:1b:e0:ff:66:df:ac:a0:7a:e4:21:3b:
                    5f:f1:29:33:c8:03:a9:c6:27:42:f0:7b:9c:dd:ce:
                    85:c1:26:68:5b:9c:59:7f:b7:0f:c8:a8:03:9a:ff:
                    62:d8:19:8b:53:e3:ea:4f:db:5b:01:65:89:4b:26:
                    a4:3f:ee:47:23:f5:a1:27:2e:01:ea:fe:6a:0e:25:
                    4e:08:77:fe:18:03:33:93:92:ba:b3:4b:b2:aa:ce:
                    73:c9:3b:f6:3d:ad:ee:46:39:a1:67:01:1a:46:36:
                    2a:df:75:fc:3b:36:bc:be:ec:60:9c:e7:70:fe:29:
                    89:9f:86:50:98:40:87:6e:17:82:68:48:fc:aa:c6:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D7:03:B7:F7:86:9D:10:4D:E7:7C:56:94:EF:9F:B1:D5:40:96:80
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137382e302f32342d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:97:43:ec:d7:9b:93:3a:31:f2:0a:81:71:54:76:44:ea:be:
         b7:60:ec:9f:c6:4f:d9:78:c4:e3:53:9d:7e:fc:f9:3c:7c:5d:
         fe:8a:a4:4a:08:fe:f7:25:44:4d:91:61:02:01:de:1d:a2:76:
         62:da:94:4e:cb:3b:a2:91:ca:fd:95:e0:0c:eb:ca:8f:e5:65:
         1d:6e:47:65:02:ab:eb:c8:cc:9c:ef:4b:9f:fa:0a:b6:c8:3b:
         be:f2:dc:47:18:a9:dd:38:05:7f:b8:f9:1d:59:78:4d:25:35:
         07:c5:60:7d:66:95:02:db:95:42:76:18:39:22:d5:5a:98:1d:
         7c:50:76:d8:7b:c7:f0:84:07:d4:2e:09:23:69:ab:7e:af:57:
         b3:66:7a:c6:a1:95:3e:79:16:1f:1f:63:3b:93:77:03:40:1d:
         58:66:e2:23:6a:9d:81:89:b9:1b:c1:bc:fa:c5:8d:44:29:a1:
         5a:6f:3e:a1:49:9d:dd:84:07:bf:d4:db:14:1f:1d:8f:11:a6:
         18:81:a9:e5:04:c8:83:2a:8b:2f:0b:f7:15:c1:b1:bf:54:f4:
         15:c2:49:76:a3:de:ff:bc:4a:42:11:e7:2a:42:51:dc:3d:81:
         46:1d:2e:be:a5:2f:b0:42:6e:4f:40:75:4b:49:1f:e7:7a:06:
         16:0f:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:08 2025 by rpki-client