Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234342e302f32342d3234203d3e20323639373339.roa
File:                     34352e3138312e3234342e302f32342d3234203d3e20323639373339.roa (raw, json)
Hash identifier:          +i/Mot5gNcLwJVOwWVTbwFr6B3JlJSwzq9Nw6MePvas=
Subject key identifier:   42:68:E3:A4:23:23:84:22:94:D9:D3:B8:F1:47:50:D4:92:1A:BA:B1
Certificate issuer:       /CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
Certificate serial:       1692EF92EA53570919C04AC367ACE7232BB087E1
Authority key identifier: CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234342e302f32342d3234203d3e20323639373339.roa
Signing time:             Tue 18 Feb 2025 14:10:04 +0000
ROA not before:           Tue 18 Feb 2025 14:05:04 +0000
ROA not after:            Tue 17 Feb 2026 14:10:04 +0000
asID:                     269739
IP address blocks:        45.181.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:92:ef:92:ea:53:57:09:19:c0:4a:c3:67:ac:e7:23:2b:b0:87:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
        Validity
            Not Before: Feb 18 14:05:04 2025 GMT
            Not After : Feb 17 14:10:04 2026 GMT
        Subject: CN=4268E3A42323842294D9D3B8F14750D4921ABAB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7b:d3:be:c3:d8:13:a3:f8:4a:e9:30:76:ef:
                    d2:61:0d:6c:6d:3f:2a:86:33:0d:81:55:04:53:2c:
                    19:4c:ce:a1:7c:b4:1c:a1:5b:30:ff:bb:70:35:dc:
                    ec:58:1c:b1:55:cf:1e:11:db:86:99:fe:99:07:60:
                    1d:38:2d:5a:3c:7e:e8:c5:75:0b:aa:25:83:f8:dd:
                    f1:05:7c:0d:48:72:17:eb:c3:69:7c:d5:40:75:90:
                    58:a0:08:65:37:13:2f:15:8f:e2:3d:ec:c3:ed:91:
                    c4:70:d2:42:8f:0d:c5:aa:3a:22:84:8d:3d:70:7d:
                    14:a4:65:a9:a6:59:e0:2d:44:ac:cc:95:1a:d4:9e:
                    1d:6a:d9:53:27:f2:de:e4:87:78:d0:9c:88:27:cb:
                    0d:c3:69:1b:5a:05:65:b3:4d:b3:6d:46:94:a5:d1:
                    1a:3c:27:e1:7d:2e:70:a0:83:8c:c1:23:46:d6:93:
                    47:05:44:1c:e2:1c:22:0b:e5:94:7a:a4:fd:f3:c1:
                    d9:2a:0a:3c:07:0e:cc:7b:3d:59:61:c2:0d:c4:01:
                    e4:a6:a4:44:e2:1b:b9:c2:9e:00:89:c5:e3:a3:1e:
                    b1:79:66:22:70:c1:c4:3f:c8:f4:ae:c4:9d:81:ad:
                    10:97:7f:2e:50:dd:87:d2:eb:1d:f0:89:af:a4:b3:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:68:E3:A4:23:23:84:22:94:D9:D3:B8:F1:47:50:D4:92:1A:BA:B1
            X509v3 Authority Key Identifier:
                keyid:CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234342e302f32342d3234203d3e20323639373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:d8:08:7c:6b:7e:99:39:1b:2f:d1:c9:30:34:52:95:95:
         79:86:9a:0e:fb:66:6e:20:b6:ce:5c:3d:bd:33:14:6a:5b:e1:
         e8:81:f5:bd:91:18:2a:1b:5e:31:f6:df:ee:49:cb:f3:0e:56:
         e9:a8:c9:e3:3e:25:25:8e:1b:8f:e8:0b:e1:31:86:11:1a:3a:
         ef:2b:1a:c8:ff:eb:4f:1f:12:4e:c6:cb:0c:b3:7f:41:11:08:
         7b:68:25:7a:6f:53:85:21:b9:d1:d5:33:86:f0:9a:dd:98:52:
         1c:4f:2b:8d:43:96:c7:94:31:33:ac:a3:21:dd:50:2a:09:55:
         00:04:9e:0c:b9:7e:c7:9d:69:0a:74:45:e6:21:87:07:d3:8c:
         3f:1d:cf:06:1f:3e:10:93:bb:c5:d2:a4:1c:15:2a:9e:a8:77:
         14:2e:44:f2:f8:08:52:b8:08:9e:6a:c6:26:fe:26:23:53:29:
         b6:7f:d9:5d:a5:ee:cf:da:2d:36:a4:94:b1:ae:56:e1:fd:b8:
         53:23:6c:e0:e6:50:c8:69:56:c1:a7:2c:6e:fa:3f:da:0a:0e:
         5c:f8:eb:f6:1b:a3:51:e0:a7:26:fc:22:e3:44:a3:80:e0:74:
         83:f0:5b:92:80:d5:72:54:20:e1:be:a0:90:fa:e4:c8:a4:a2:
         fb:b4:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:05:08 2025 by rpki-client