Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/34352e3137332e3131322e302f32322d3234203d3e20323634383236.roa
File:                     34352e3137332e3131322e302f32322d3234203d3e20323634383236.roa (raw, json)
Hash identifier:          mnN106+moP6pCkAifE25VzN+xiLbEdGxnp7Dq/51I9o=
Subject key identifier:   1C:53:58:C4:E8:27:27:EC:BE:85:F0:92:C0:AD:CC:7F:2C:B3:0F:12
Certificate issuer:       /CN=6862C98DB7C68668B89154477FE7C411837434D3
Certificate serial:       023F32F5165FC2CA9534A93C7FBBD32EB4C9AB79
Authority key identifier: 68:62:C9:8D:B7:C6:86:68:B8:91:54:47:7F:E7:C4:11:83:74:34:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6862C98DB7C68668B89154477FE7C411837434D3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/34352e3137332e3131322e302f32322d3234203d3e20323634383236.roa
Signing time:             Tue 04 Feb 2025 18:53:22 +0000
ROA not before:           Tue 04 Feb 2025 18:48:22 +0000
ROA not after:            Tue 03 Feb 2026 18:53:22 +0000
asID:                     264826
IP address blocks:        45.173.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3f:32:f5:16:5f:c2:ca:95:34:a9:3c:7f:bb:d3:2e:b4:c9:ab:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6862C98DB7C68668B89154477FE7C411837434D3
        Validity
            Not Before: Feb  4 18:48:22 2025 GMT
            Not After : Feb  3 18:53:22 2026 GMT
        Subject: CN=1C5358C4E82727ECBE85F092C0ADCC7F2CB30F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:32:ab:1e:21:2c:a9:49:29:6c:08:43:97:
                    bc:4a:3a:e3:7d:72:65:f9:29:09:f4:1c:0f:eb:ca:
                    85:ba:f8:a4:02:3c:d5:b7:60:f7:92:b8:74:cf:cd:
                    70:3d:90:a0:0d:55:0c:c8:5c:d0:19:9f:e3:9b:71:
                    42:74:36:4f:ea:2b:60:2b:df:ae:86:1a:40:48:79:
                    73:9c:a9:54:e3:a7:f4:a4:3b:b0:c6:69:99:d3:db:
                    ca:0a:ec:b8:b7:98:85:99:50:4f:43:07:d2:bc:7e:
                    c6:85:d6:d4:72:c0:5f:83:16:8f:a7:e0:ac:f8:af:
                    0f:89:9b:b6:fb:57:c8:7f:4c:9e:8b:aa:40:32:ec:
                    62:8e:48:ed:ef:e3:2a:1a:fa:bf:00:e2:02:ab:cf:
                    ec:51:16:04:d4:f3:7a:80:ba:22:51:70:4e:d3:94:
                    f9:4e:28:58:f5:7d:5f:2a:73:f8:e7:8d:1f:e2:83:
                    b9:95:6f:33:89:1c:5c:b5:04:45:32:75:e6:87:62:
                    93:e3:3d:0e:f8:1e:8c:8a:91:49:79:e4:59:55:35:
                    2a:97:7d:6d:02:6a:79:3a:54:82:4b:6c:41:72:68:
                    44:d4:05:f4:c7:cf:61:d5:8b:63:55:f4:15:67:e2:
                    cb:2a:c2:ac:3a:cf:65:ce:5c:e2:ba:8a:2e:c9:d0:
                    af:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:53:58:C4:E8:27:27:EC:BE:85:F0:92:C0:AD:CC:7F:2C:B3:0F:12
            X509v3 Authority Key Identifier:
                keyid:68:62:C9:8D:B7:C6:86:68:B8:91:54:47:7F:E7:C4:11:83:74:34:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/6862C98DB7C68668B89154477FE7C411837434D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6862C98DB7C68668B89154477FE7C411837434D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33E5E1E07AF42CF32825E2DE5FFAF60850775BF8D9261C5B47FEEE532E0ADF35/0/34352e3137332e3131322e302f32322d3234203d3e20323634383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:c8:f8:11:e3:95:4f:1e:a4:bf:91:70:45:c7:af:59:22:3a:
         bb:f6:b1:ef:63:26:59:53:99:25:75:e4:ee:d4:cc:5e:89:e7:
         58:2c:c3:09:af:b8:ec:f8:c9:71:8b:56:7c:40:43:9d:3b:c7:
         8d:9c:54:59:6a:b3:71:25:af:a8:c8:2c:d2:0a:75:1a:48:6b:
         52:5e:3a:71:3c:70:2d:9e:cd:2a:33:65:7d:ef:4f:af:99:4f:
         14:0e:94:58:75:dd:71:fd:70:21:3e:df:92:3d:83:04:ed:8a:
         78:f3:87:fb:20:7c:1d:27:ba:9d:2e:39:6e:95:bb:71:b5:91:
         e7:ef:7a:0a:ea:5b:7d:90:1c:af:b4:89:2d:a8:09:22:38:8b:
         48:34:ec:41:79:e2:dc:fc:13:5a:b0:2c:78:fa:4f:dd:1a:59:
         c4:62:0e:fa:ea:03:58:fc:ef:91:9c:06:92:ad:8a:8c:86:5d:
         22:43:79:47:dd:16:df:d8:cb:89:94:3e:b9:8e:e7:78:68:83:
         7a:c3:92:2b:35:cf:a1:da:d6:d6:16:3a:6d:2e:9b:9b:18:3e:
         5f:76:90:27:2b:42:18:3b:ea:92:aa:4c:17:0c:f8:33:20:e6:
         48:a6:b2:1b:fa:9d:bc:b0:a0:20:e2:7b:7e:8c:47:ec:52:75:
         2b:4a:aa:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:56 2025 by rpki-client