Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa
File:                     34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa (raw, json)
Hash identifier:          d4qiS9XUVOy3CSFP5QuMbl2KPCMepXSME0eE6iUeHVI=
Subject key identifier:   13:C0:0E:3B:CC:51:8D:6C:7A:03:28:1D:E1:16:71:5F:84:92:C8:75
Certificate issuer:       /CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
Certificate serial:       33C3D9CB17FA197DD713393717FECB431B7FF763
Authority key identifier: C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa
Signing time:             Tue 04 Feb 2025 17:59:24 +0000
ROA not before:           Tue 04 Feb 2025 17:54:24 +0000
ROA not after:            Tue 03 Feb 2026 17:59:24 +0000
asID:                     267883
IP address blocks:        45.177.204.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c3:d9:cb:17:fa:19:7d:d7:13:39:37:17:fe:cb:43:1b:7f:f7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EBB304AA656048790F91CC028ECE21EEA1DFC5
        Validity
            Not Before: Feb  4 17:54:24 2025 GMT
            Not After : Feb  3 17:59:24 2026 GMT
        Subject: CN=13C00E3BCC518D6C7A03281DE116715F8492C875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:1a:a2:94:af:41:70:d4:fc:18:7d:e7:7a:
                    b6:71:e6:55:c4:75:b5:bd:d4:ae:d0:16:8a:aa:5d:
                    92:a9:b4:85:e8:f1:5d:48:28:74:7f:46:cd:8c:8b:
                    87:6f:9c:31:fc:34:70:c7:63:ec:08:68:44:91:74:
                    ba:6e:d0:5d:f4:e6:44:88:c1:60:4b:8a:6a:0d:29:
                    85:8b:8d:e5:be:92:78:49:19:89:47:86:54:aa:a8:
                    a8:04:e0:20:24:06:6f:a5:28:36:dd:0a:d6:f0:64:
                    71:ff:a3:a4:7e:12:db:4a:e5:18:42:9c:8c:27:c0:
                    2b:0d:5c:b6:05:ce:90:be:6a:10:5d:34:ac:3f:59:
                    88:99:aa:71:c7:63:6e:19:7d:c0:a9:ac:11:02:7b:
                    8a:72:97:44:b6:ae:14:73:26:30:70:08:ac:79:29:
                    e8:2f:03:87:40:22:11:12:26:7c:53:6d:5f:6a:7a:
                    32:9d:71:08:1d:ae:cc:8e:6f:46:a5:b4:7d:2a:28:
                    0e:5a:a7:02:3a:47:8d:f0:9a:58:c7:b7:ed:b2:bc:
                    cb:55:be:aa:23:5f:31:72:ea:6c:b0:e0:3c:8c:a5:
                    52:ee:2e:e4:b3:87:da:ec:df:d1:5f:85:36:72:67:
                    0e:83:12:ff:68:46:6b:44:34:d0:f1:ee:66:0a:de:
                    a2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:0E:3B:CC:51:8D:6C:7A:03:28:1D:E1:16:71:5F:84:92:C8:75
            X509v3 Authority Key Identifier:
                keyid:C0:EB:B3:04:AA:65:60:48:79:0F:91:CC:02:8E:CE:21:EE:A1:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0EBB304AA656048790F91CC028ECE21EEA1DFC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/360A18F35D7305330B49C4254B0B2DF8B029B4345CBDEE5585FFF3BA00462C07/0/34352e3137372e3230342e302f32322d3234203d3e20323637383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:8a:2f:a0:d9:37:5b:c7:2c:e7:85:73:62:e8:51:bc:d4:46:
         b1:8e:35:6a:6c:0d:bf:8e:0b:66:aa:86:bf:68:83:77:0a:7a:
         e5:dc:5b:2e:a9:ab:95:8b:a4:67:06:6f:bf:e4:63:c2:2d:3e:
         e6:64:10:a6:5e:22:16:2c:d5:f5:83:8e:54:4b:27:13:70:6f:
         5c:42:8d:fd:5b:d9:11:57:f8:d1:5f:e1:c2:dc:7e:73:0b:cc:
         a7:d5:7c:08:ed:9f:74:43:31:d0:a4:28:b2:91:47:b0:2c:17:
         0b:8d:f9:71:9a:35:fe:c8:3d:b1:b1:68:56:8a:e5:9f:eb:46:
         67:70:5a:01:dc:a2:90:f6:a4:38:f3:1e:c0:3f:21:48:e3:c1:
         f8:e3:45:f1:6e:b2:62:26:86:89:85:64:9c:bb:aa:50:7e:bc:
         07:94:e8:2b:e4:b8:bc:57:ea:bd:9b:47:c2:0c:83:10:1d:64:
         0d:60:46:41:61:9f:68:38:a6:d6:05:dd:ca:88:b2:dc:6d:da:
         ff:3e:51:62:aa:ca:7d:24:f4:8e:d6:eb:07:aa:39:22:0a:45:
         dc:f5:ea:7d:d9:43:fc:65:45:90:ac:4c:d0:30:65:10:1b:6d:
         4d:2a:a1:fd:e3:67:8d:78:94:ff:e1:15:ff:c7:d1:c3:cf:c6:
         f6:7e:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:10:30 2025 by rpki-client