Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa
File:                     34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa (raw, json)
Hash identifier:          pq02RSTUBhGAL4Zn7lLa9UDkyKyvGbSGDc4UOYXqqbI=
Subject key identifier:   A9:7B:CE:E9:22:59:DF:F3:46:17:3D:D4:44:00:88:68:1F:D4:C9:86
Certificate issuer:       /CN=A18333048C43710CA4783E73FD39659E7AC094BD
Certificate serial:       474BAB931F19821C6C5CF7D49494F67355850E8B
Authority key identifier: A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa
Signing time:             Tue 04 Feb 2025 18:19:11 +0000
ROA not before:           Tue 04 Feb 2025 18:14:11 +0000
ROA not after:            Tue 03 Feb 2026 18:19:11 +0000
asID:                     267788
IP address blocks:        45.167.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4b:ab:93:1f:19:82:1c:6c:5c:f7:d4:94:94:f6:73:55:85:0e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A18333048C43710CA4783E73FD39659E7AC094BD
        Validity
            Not Before: Feb  4 18:14:11 2025 GMT
            Not After : Feb  3 18:19:11 2026 GMT
        Subject: CN=A97BCEE92259DFF346173DD4440088681FD4C986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:30:d0:6c:ba:f3:b6:87:cf:93:c8:0f:6d:
                    12:74:cb:8a:c7:85:9b:06:45:fa:c6:7e:d4:e3:fa:
                    3f:3a:64:d9:f4:e8:ed:9c:c1:8f:ca:c4:96:27:fa:
                    2c:a8:af:75:35:eb:7c:dc:28:bd:51:12:54:d2:e8:
                    80:94:d7:75:0d:74:2f:4a:85:af:d5:fc:11:d5:d0:
                    70:29:ea:a0:08:3b:bd:b5:8b:b4:2b:0c:1e:6d:31:
                    47:d4:05:aa:16:a8:6a:e5:8c:12:d3:77:ba:37:a5:
                    48:82:a0:70:27:39:56:16:3a:d2:98:c9:2b:a7:28:
                    1d:6d:c8:bf:83:83:8a:0c:07:2c:6c:67:5c:50:cf:
                    35:98:ba:80:dd:61:9c:e5:91:7b:10:9f:1c:13:69:
                    82:45:7b:e3:ce:d7:e1:25:a2:6a:43:93:66:35:d9:
                    9e:e4:7d:59:91:3e:6b:dd:99:00:dc:bb:14:0e:ea:
                    6b:fe:0e:26:5b:40:eb:35:09:cd:64:5c:7d:4c:56:
                    d5:2e:10:55:c4:b4:99:2d:57:c1:4a:85:df:5f:6b:
                    86:05:fa:b1:cd:e0:02:d7:4f:f3:b7:30:49:7e:fd:
                    05:8f:96:dc:2e:14:6b:14:9a:57:c5:20:1c:32:b7:
                    75:d0:b8:df:55:1e:c7:c4:ab:a2:13:8f:72:cf:35:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7B:CE:E9:22:59:DF:F3:46:17:3D:D4:44:00:88:68:1F:D4:C9:86
            X509v3 Authority Key Identifier:
                keyid:A1:83:33:04:8C:43:71:0C:A4:78:3E:73:FD:39:65:9E:7A:C0:94:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/A18333048C43710CA4783E73FD39659E7AC094BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A18333048C43710CA4783E73FD39659E7AC094BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3550B7AE8DCD874D7FFA3A6D40723D4C1B616BA57DE88EFDDFEF6DCD9DA4FDDB/0/34352e3136372e3234382e302f32322d3234203d3e20323637373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:40:64:d2:b8:b2:e7:ca:3a:73:73:05:84:d2:1c:63:d0:69:
         5f:95:00:a3:47:36:f2:fd:0d:94:94:46:2f:97:b6:a1:e0:a7:
         3f:66:38:ff:eb:72:6e:5d:fe:e2:b6:37:48:30:fb:d9:f1:01:
         a9:9c:7e:c8:88:a5:b4:23:da:28:65:e8:b9:b8:7e:94:30:80:
         58:ce:0d:77:d4:2e:d3:2c:72:3b:a3:f7:6e:65:a0:2a:ab:4f:
         b4:a6:3f:17:e6:18:88:7a:f8:59:14:d8:54:2d:d2:3f:ea:39:
         92:9e:24:79:c3:c6:4a:cd:1b:ca:c1:f2:77:2a:f7:ca:61:17:
         c9:70:d3:52:16:46:90:d0:59:83:14:9b:ef:f8:f0:75:9c:2e:
         e1:be:51:55:9d:66:3c:15:ce:24:59:1f:87:11:74:64:5a:05:
         55:79:a8:4c:3a:d3:b6:c3:32:b0:f9:c8:af:23:bf:2c:28:35:
         e1:44:31:3d:ed:41:08:ed:0d:7d:28:74:76:ed:ed:86:80:d8:
         ca:cf:c7:07:c5:55:23:17:a9:35:61:99:3f:8f:2e:58:b5:3f:
         0c:3f:13:53:29:65:ae:0c:f9:e4:40:6a:d4:de:82:5c:73:78:
         37:cb:60:eb:1e:35:d1:3f:bc:e7:9f:ad:a5:c3:a5:fe:95:10:
         42:f7:58:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:01 2025 by rpki-client