Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3234203d3e20323637373133.roa
File:                     34352e3136342e3134382e302f32322d3234203d3e20323637373133.roa (raw, json)
Hash identifier:          IIetavvYRhRuqliO4IP0XaR+7hqr736r/iiyNngBqn4=
Subject key identifier:   7E:D3:A5:05:1B:24:81:14:DD:CB:91:5D:F5:7A:A4:77:AE:3E:30:AA
Certificate issuer:       /CN=616110FCE6833EA1E50974D2E8885CBCD8B7D7B2
Certificate serial:       44851A3ECBD4C41BE0033254DE5C2324C6A10F58
Authority key identifier: 61:61:10:FC:E6:83:3E:A1:E5:09:74:D2:E8:88:5C:BC:D8:B7:D7:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3234203d3e20323637373133.roa
Signing time:             Tue 04 Feb 2025 18:49:22 +0000
ROA not before:           Tue 04 Feb 2025 18:44:22 +0000
ROA not after:            Tue 03 Feb 2026 18:49:22 +0000
asID:                     267713
IP address blocks:        45.164.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:85:1a:3e:cb:d4:c4:1b:e0:03:32:54:de:5c:23:24:c6:a1:0f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616110FCE6833EA1E50974D2E8885CBCD8B7D7B2
        Validity
            Not Before: Feb  4 18:44:22 2025 GMT
            Not After : Feb  3 18:49:22 2026 GMT
        Subject: CN=7ED3A5051B248114DDCB915DF57AA477AE3E30AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:34:8f:ff:39:b6:4d:b8:71:f7:06:dd:25:
                    ab:e7:81:66:b3:f8:48:fc:04:7f:3a:17:4c:07:ba:
                    2d:5e:ed:5d:34:0b:03:7f:2c:3e:e4:c9:ce:47:80:
                    ae:4f:21:98:bb:74:bb:4b:68:88:cc:eb:16:0b:2c:
                    73:9d:53:9e:53:31:e2:d2:38:dc:6a:6e:1d:ee:13:
                    c2:b6:0a:49:4e:8b:9a:4d:c2:90:c7:bd:6d:f7:4d:
                    f7:3d:8d:6e:8a:4e:91:cf:b1:9a:ff:78:b3:58:f7:
                    49:ce:07:14:86:4f:da:24:f4:72:59:52:3d:96:e9:
                    23:52:e8:66:8d:49:13:5c:5b:ed:fd:9d:ee:66:d7:
                    f5:75:b2:ee:95:7b:74:4f:4b:61:3c:a2:b1:f7:60:
                    8d:c8:44:c6:47:4b:80:3f:6a:7b:fc:e6:d7:26:f1:
                    1f:f1:91:a5:a2:4e:b6:f2:df:0a:a5:de:43:ea:3a:
                    ad:f2:ca:89:cc:3a:1e:02:2c:f8:17:ff:3d:78:61:
                    22:12:66:31:f1:4c:b1:dc:28:49:e9:15:fd:f6:22:
                    ea:2b:dd:9a:6a:8d:29:31:41:0a:69:83:bf:bb:1c:
                    94:b8:db:3e:34:cb:5e:28:bd:79:10:57:d4:e8:4d:
                    b4:5c:d4:ae:b5:2d:69:36:ec:45:32:a8:25:7c:66:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D3:A5:05:1B:24:81:14:DD:CB:91:5D:F5:7A:A4:77:AE:3E:30:AA
            X509v3 Authority Key Identifier:
                keyid:61:61:10:FC:E6:83:3E:A1:E5:09:74:D2:E8:88:5C:BC:D8:B7:D7:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/616110FCE6833EA1E50974D2E8885CBCD8B7D7B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3598EFBC89881EDCCDEC18C59917902169C5E32C148AD93498D65BA31FCB7D34/0/34352e3136342e3134382e302f32322d3234203d3e20323637373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:69:da:d7:4c:90:94:96:6e:b2:9c:b9:df:1b:1e:ca:2c:
         86:26:56:68:88:fc:6d:cc:5c:8e:4e:c4:0a:fb:c3:d3:5f:d5:
         c6:32:2a:81:87:62:31:31:94:b7:47:cf:0d:9d:5a:5f:81:af:
         b6:05:17:62:9d:e7:b1:f0:c9:11:4f:c5:ba:2a:67:16:14:28:
         b2:d2:2f:c2:f7:f8:96:2e:40:c4:1f:ac:31:44:b3:35:bc:8d:
         de:06:78:2d:03:e2:36:28:5f:b2:5b:81:bf:c8:4b:38:7f:b2:
         12:57:c0:2f:6d:7d:4e:63:05:11:e0:9d:94:d3:53:2b:07:d1:
         95:a2:11:b9:fc:e3:b1:87:dc:61:a5:b1:77:41:4b:94:e7:04:
         c3:c3:c1:a1:13:d4:bf:fc:a0:50:20:e6:c2:94:79:a3:0a:be:
         b6:b3:25:32:b9:8c:f2:95:56:00:ec:4a:72:37:91:e1:58:c8:
         f1:79:23:9e:b5:af:58:6f:e1:30:55:92:5f:6c:ad:cf:68:4a:
         20:52:f7:0d:8c:b6:ec:8f:29:af:3d:fb:14:60:97:ae:25:ea:
         7c:70:12:bd:62:86:07:b4:ea:65:2f:64:6b:9f:1a:9d:ac:3b:
         aa:4c:07:45:64:c9:5a:f7:d9:b9:6c:30:39:3c:7e:6e:0a:f7:
         74:9a:77:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:52:50 2025 by rpki-client