Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135302e302f32342d3234203d3e20323635373135.roa
File:                     34352e36352e3135302e302f32342d3234203d3e20323635373135.roa (raw, json)
Hash identifier:          KTRChOmH8if8DF3FhJ3S0SXie/qSgShP1NaP6RWa1tU=
Subject key identifier:   88:D6:3C:2A:61:43:61:66:F9:67:2F:9A:E7:57:2E:53:6B:E8:05:CF
Certificate issuer:       /CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
Certificate serial:       3E0E99FEFB13DBEF043F7B48F28B6D46205ACE19
Authority key identifier: 59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135302e302f32342d3234203d3e20323635373135.roa
Signing time:             Tue 04 Feb 2025 18:44:52 +0000
ROA not before:           Tue 04 Feb 2025 18:39:52 +0000
ROA not after:            Tue 03 Feb 2026 18:44:52 +0000
asID:                     265715
IP address blocks:        45.65.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0e:99:fe:fb:13:db:ef:04:3f:7b:48:f2:8b:6d:46:20:5a:ce:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5998B120B3E73E1A83319F353329C3ABD0E1E67C
        Validity
            Not Before: Feb  4 18:39:52 2025 GMT
            Not After : Feb  3 18:44:52 2026 GMT
        Subject: CN=88D63C2A61436166F9672F9AE7572E536BE805CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:06:62:50:f4:90:94:86:f4:f5:1f:0f:d6:
                    7d:f3:bc:ee:af:15:d3:6c:a9:c7:52:cc:5e:34:3a:
                    38:f4:fc:97:ff:6c:82:84:78:c3:c6:8b:a5:7e:97:
                    36:9b:6e:85:92:48:39:c1:62:70:5c:cb:8c:b2:a7:
                    71:c3:9b:01:6e:bb:40:19:8f:62:bf:47:eb:a7:57:
                    40:3b:6b:3d:31:2f:c7:5f:b2:b6:77:2d:c1:f1:21:
                    3f:e8:a1:3b:ed:da:ff:9f:2d:a0:f8:46:2e:d3:e5:
                    54:c8:4c:d5:49:d3:3c:0c:a7:d0:58:82:45:78:f7:
                    dd:53:de:1e:08:2e:94:2c:28:09:2b:97:a7:3c:2e:
                    2b:c5:af:12:e5:7c:23:19:11:fe:3e:bc:0f:6c:8e:
                    40:38:d9:ae:c3:12:53:fa:25:7f:2f:1d:6b:60:29:
                    1b:ac:91:5f:29:5e:d2:e8:a9:2e:b2:88:05:3d:80:
                    46:1a:75:ca:5b:5e:de:db:f5:98:e8:55:d1:b6:c1:
                    ff:59:7d:0d:5c:43:78:b6:e4:ec:08:2c:d3:9a:31:
                    0d:a8:0a:5a:8d:65:d0:96:0d:f3:85:1f:1f:ab:8e:
                    14:22:57:7d:0e:d6:af:2a:0c:e5:f2:b1:80:d9:b9:
                    98:ba:20:5f:35:76:f7:6d:3c:13:82:89:d6:1f:d5:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D6:3C:2A:61:43:61:66:F9:67:2F:9A:E7:57:2E:53:6B:E8:05:CF
            X509v3 Authority Key Identifier:
                keyid:59:98:B1:20:B3:E7:3E:1A:83:31:9F:35:33:29:C3:AB:D0:E1:E6:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5998B120B3E73E1A83319F353329C3ABD0E1E67C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34171FFEFFD119D3640DAC769DB2DE3BE7308E74A2E551BE8917A5A8D241B031/0/34352e36352e3135302e302f32342d3234203d3e20323635373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:06:09:cc:e2:86:c1:80:01:76:c7:4e:37:28:40:cc:d3:
         09:49:8b:2c:fc:ac:9a:a1:9d:8b:ed:d6:6a:67:14:b0:55:18:
         1a:1b:28:0c:56:93:6c:c5:47:84:11:ee:61:9d:dc:49:c4:10:
         e5:59:81:63:95:d8:c7:e2:61:50:aa:33:c0:ed:1e:68:bd:cd:
         77:a6:95:83:95:59:3d:22:71:3a:5d:ab:e1:76:71:e4:09:ce:
         d4:86:85:1f:24:7e:9a:a3:e4:2f:d5:01:c4:dc:cc:88:7b:4d:
         67:81:77:da:dc:d8:42:40:8a:bf:11:c6:00:c4:8a:59:09:6b:
         1e:b7:4f:e4:39:30:bb:8f:3d:12:ff:02:df:bc:cb:2a:7a:6e:
         5b:3d:4c:a3:50:da:e3:74:b4:f9:e1:7b:a9:44:07:75:ec:46:
         9c:3a:db:ef:b6:85:93:1e:59:78:5d:ef:f8:37:87:65:ff:a6:
         76:c7:9f:61:2f:95:54:30:6b:b7:d5:3c:f3:ce:07:5c:05:7a:
         9c:5f:6e:c1:79:d4:33:97:f7:57:23:74:2b:7f:95:48:17:9b:
         0f:b6:dc:61:c6:7f:dc:5b:8d:09:08:36:41:01:6f:e3:33:d1:
         65:2d:6b:cd:e5:63:db:86:34:ed:17:dc:9c:bc:95:0d:cc:dd:
         c2:20:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:08:39 2025 by rpki-client