Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36322e302f32342d3234203d3e20323732383734.roa
File:                     34352e3233342e36322e302f32342d3234203d3e20323732383734.roa (raw, json)
Hash identifier:          TFsSO8lYTeumyWh7ZMtNgFaTV3YMN/1Hmm8GTxSxyO4=
Subject key identifier:   D6:FF:2A:BF:BF:F1:29:38:9C:FB:6E:81:F5:60:55:83:7D:D4:39:6E
Certificate issuer:       /CN=17C10DFC65DA73892644268270EF974D3E2D31A0
Certificate serial:       151C740791ABDB1E77BE39F06FF08E8E1B7E0DB3
Authority key identifier: 17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36322e302f32342d3234203d3e20323732383734.roa
Signing time:             Fri 24 Jan 2025 13:45:00 +0000
ROA not before:           Fri 24 Jan 2025 13:40:00 +0000
ROA not after:            Fri 23 Jan 2026 13:45:00 +0000
asID:                     272874
IP address blocks:        45.234.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1c:74:07:91:ab:db:1e:77:be:39:f0:6f:f0:8e:8e:1b:7e:0d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C10DFC65DA73892644268270EF974D3E2D31A0
        Validity
            Not Before: Jan 24 13:40:00 2025 GMT
            Not After : Jan 23 13:45:00 2026 GMT
        Subject: CN=D6FF2ABFBFF129389CFB6E81F56055837DD4396E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:8e:8e:6a:17:59:4a:8a:cd:aa:ab:fa:7b:
                    70:b0:67:91:ca:83:85:f3:34:05:37:c6:78:ba:50:
                    20:94:7c:45:72:c2:72:d0:a7:fb:78:59:bb:06:15:
                    8d:4a:1b:4a:1e:da:26:73:14:e6:40:d9:70:12:56:
                    88:8c:90:6d:36:80:4b:50:21:92:8c:01:4b:f7:70:
                    56:55:65:98:44:9e:d2:38:5b:a9:6c:e7:de:7d:68:
                    88:84:38:e4:b1:a9:9a:36:82:74:26:24:2b:88:0b:
                    40:c6:cf:6c:1b:67:55:9b:60:6f:f0:cf:6d:3d:47:
                    41:f5:c0:82:21:1c:a6:e8:76:f1:7b:cc:a8:2e:cb:
                    b0:cf:ec:7d:c9:f1:15:b4:78:bf:ed:94:ca:43:3e:
                    c0:3f:fc:b2:20:5e:8d:12:8a:9e:87:dc:8e:72:65:
                    63:78:33:4e:0a:6c:f1:00:4c:0f:5c:a6:62:09:2f:
                    16:35:97:11:7d:12:23:7f:98:d1:c7:46:32:77:b8:
                    51:9d:ca:a1:3c:90:b2:80:60:12:f0:cc:f1:86:f6:
                    bb:18:f2:52:e4:e3:7e:ab:25:dc:88:01:31:40:cb:
                    23:8f:0b:7b:38:c4:17:a1:84:67:eb:b1:06:a8:7b:
                    56:b0:d3:17:42:22:cd:fb:1b:0c:58:30:48:33:4a:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FF:2A:BF:BF:F1:29:38:9C:FB:6E:81:F5:60:55:83:7D:D4:39:6E
            X509v3 Authority Key Identifier:
                keyid:17:C1:0D:FC:65:DA:73:89:26:44:26:82:70:EF:97:4D:3E:2D:31:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/17C10DFC65DA73892644268270EF974D3E2D31A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17C10DFC65DA73892644268270EF974D3E2D31A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/278CE4202A5B481402854A38AE15B09C400F577D93CADE8CC514F442CEA14279/0/34352e3233342e36322e302f32342d3234203d3e20323732383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ca:6e:cb:9b:45:7c:a6:89:54:97:89:f6:cf:ac:05:20:a1:
         f2:83:3c:53:2f:68:ce:8f:9e:28:13:4a:1f:8f:6c:98:2a:70:
         30:d9:e8:cd:75:c8:e1:25:4b:29:62:38:a4:71:94:95:33:c3:
         ad:fb:49:58:e9:fb:c7:09:c5:2c:7d:38:f5:8d:30:d4:c4:b9:
         f5:66:b6:f2:c7:4d:ac:8a:44:6b:22:a2:e4:a4:fe:75:6c:40:
         c7:a1:35:ae:1b:e3:ac:bd:0b:6c:61:f4:ae:58:b4:c0:02:86:
         d5:84:af:5f:ca:46:35:11:b2:95:d5:e7:e2:a8:2d:5b:f5:ba:
         9c:2a:31:a0:ea:9f:d0:aa:83:82:f6:cb:38:46:96:a2:df:98:
         b2:af:1e:8a:7a:06:be:71:d6:ac:99:b9:c3:11:88:9d:b7:04:
         a5:d7:39:18:a0:3c:74:d6:05:a7:75:77:6f:fd:9a:f8:fe:13:
         a0:5b:d0:c2:bb:9b:0b:98:d2:05:e6:3f:4b:8b:03:05:9d:26:
         4b:86:4a:9f:14:54:4b:63:aa:40:6c:62:5a:ce:36:4a:2c:e0:
         e4:db:08:1d:75:b2:78:4d:62:b5:7f:12:1b:b5:26:ed:25:63:
         d5:71:59:75:e1:e9:09:e0:0f:b0:17:33:9d:8f:36:34:7e:b5:
         fb:94:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:01 2025 by rpki-client