Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234342e302f32322d3232203d3e20323639373339.roa
File:                     34352e3138312e3234342e302f32322d3232203d3e20323639373339.roa (raw, json)
Hash identifier:          crn7XpzM5rzZSHcOo0MvTI6lgLZMqOEYFsCxBpQwHgM=
Subject key identifier:   F0:8F:8C:42:40:2D:71:4E:AF:7D:03:52:E4:15:E9:60:5F:CD:54:A3
Certificate issuer:       /CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
Certificate serial:       628A7E3FF5E3782AAA000539915D7FA927D8FDE0
Authority key identifier: CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234342e302f32322d3232203d3e20323639373339.roa
Signing time:             Tue 18 Feb 2025 14:10:04 +0000
ROA not before:           Tue 18 Feb 2025 14:05:04 +0000
ROA not after:            Tue 17 Feb 2026 14:10:04 +0000
asID:                     269739
IP address blocks:        45.181.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8a:7e:3f:f5:e3:78:2a:aa:00:05:39:91:5d:7f:a9:27:d8:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
        Validity
            Not Before: Feb 18 14:05:04 2025 GMT
            Not After : Feb 17 14:10:04 2026 GMT
        Subject: CN=F08F8C42402D714EAF7D0352E415E9605FCD54A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:3c:0d:e9:ce:8d:76:f5:26:1d:5a:4e:5c:
                    cb:d9:b4:91:6d:b0:8a:57:03:81:d5:1e:5d:5f:22:
                    6d:df:b0:54:c3:4d:88:6d:a9:db:ad:91:06:02:18:
                    04:45:52:dc:62:d3:fe:6b:04:b7:cc:c0:e5:5d:c4:
                    60:d0:42:9b:ce:42:36:cc:ff:e8:6c:c2:9b:94:aa:
                    bb:0e:9c:df:20:0e:40:c8:0c:71:9c:fb:b1:b9:be:
                    2f:67:69:f9:c6:c7:1b:a2:2f:a7:25:6f:24:3a:f1:
                    1f:24:76:9e:d6:3f:f2:05:89:9f:d3:12:75:2c:7d:
                    28:32:1b:72:44:c5:17:12:d4:a6:bb:6f:ec:dd:13:
                    bb:d5:c2:5f:b0:05:ca:93:59:a2:ed:49:ae:72:0d:
                    12:64:b9:50:4f:1d:2e:7e:f7:a5:70:65:1e:50:b9:
                    dd:3b:44:0c:ac:c7:37:0f:57:40:df:1a:ab:04:a4:
                    da:28:2f:51:eb:07:a7:45:3f:47:d9:a7:2d:ee:c4:
                    c8:62:68:ca:a7:5e:11:76:85:25:db:d1:d2:c5:74:
                    85:e1:3d:a3:e5:26:5a:bb:bc:a1:bf:9a:73:fd:95:
                    c3:84:a2:f5:1b:a9:12:2f:fc:14:0c:e5:25:86:dc:
                    03:0d:08:b4:48:16:cf:98:25:fb:e8:48:46:21:27:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8F:8C:42:40:2D:71:4E:AF:7D:03:52:E4:15:E9:60:5F:CD:54:A3
            X509v3 Authority Key Identifier:
                keyid:CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234342e302f32322d3232203d3e20323639373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:15:49:73:1c:b8:1a:d8:2a:5f:1a:cd:d9:4c:c1:46:a3:d1:
         a4:76:ba:c0:5c:5d:18:f6:88:d0:ab:98:01:65:13:e5:63:6e:
         0e:e2:8d:a0:af:a4:25:af:50:87:b5:05:2e:08:33:9b:ed:48:
         cb:71:2d:85:7e:e6:fc:a1:56:7a:36:c7:9a:9e:54:bc:84:c2:
         fb:ab:4e:53:b2:c1:aa:b3:3b:e7:32:9f:3d:0d:5f:71:8b:c5:
         8c:a1:fd:cf:e3:c5:29:3e:59:3d:0d:c7:1d:eb:d4:fd:b1:22:
         ab:d4:e8:b0:1d:76:22:0a:98:1f:32:80:28:f2:a1:08:75:3c:
         c0:0b:64:ef:f6:80:4c:47:23:52:16:c8:6a:f7:d2:fa:42:03:
         e0:b3:3b:f4:08:f9:00:df:79:0e:fa:d3:1f:6d:b9:1d:ad:bd:
         67:b2:31:c0:a7:b3:c7:91:c3:1a:b0:37:5e:74:6d:6e:e1:51:
         fc:c6:3c:a6:77:a6:6f:c6:36:e4:bd:82:f9:04:fe:8b:c4:c0:
         7f:f2:ba:ec:a5:49:94:6c:55:7c:bd:37:2a:6c:34:34:13:db:
         58:46:7d:ed:7c:53:f7:eb:67:a2:50:17:27:58:f1:3d:f8:eb:
         17:68:ea:bd:d8:6c:08:00:38:be:e9:59:2f:c6:ed:7c:24:bd:
         a3:d9:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:56:33 2025 by rpki-client