Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234362e302f32342d3234203d3e20323639373339.roa
File:                     34352e3138312e3234362e302f32342d3234203d3e20323639373339.roa (raw, json)
Hash identifier:          sNOaI6puDBQMhjeLoZjxWf9sHdl7AO+OX2bwEcw4i/4=
Subject key identifier:   6A:A3:6F:CF:CC:12:0E:D7:B2:40:B9:8B:33:15:8A:AA:EF:D4:17:7E
Certificate issuer:       /CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
Certificate serial:       18248D526A3EDB7F709287D72E6B317203C605E3
Authority key identifier: CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234362e302f32342d3234203d3e20323639373339.roa
Signing time:             Tue 18 Feb 2025 14:10:04 +0000
ROA not before:           Tue 18 Feb 2025 14:05:04 +0000
ROA not after:            Tue 17 Feb 2026 14:10:04 +0000
asID:                     269739
IP address blocks:        45.181.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:24:8d:52:6a:3e:db:7f:70:92:87:d7:2e:6b:31:72:03:c6:05:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
        Validity
            Not Before: Feb 18 14:05:04 2025 GMT
            Not After : Feb 17 14:10:04 2026 GMT
        Subject: CN=6AA36FCFCC120ED7B240B98B33158AAAEFD4177E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:ea:e4:37:8e:63:84:33:ec:e9:ad:71:05:
                    4c:3b:97:83:c8:91:0a:85:45:ac:6f:fc:bd:6f:36:
                    18:6d:69:2c:27:ab:ce:57:52:bd:13:2f:9f:ac:92:
                    d1:38:5e:f9:90:92:72:fd:42:1c:93:38:c1:f4:7b:
                    cc:0e:f1:32:9d:0d:7c:44:62:dc:70:36:7c:24:d9:
                    f3:b6:21:7b:77:88:78:c7:70:ee:1a:8f:71:cc:c3:
                    1f:30:6a:b6:68:d5:7d:76:ac:27:58:05:66:be:d0:
                    af:0c:d2:89:d5:5c:92:95:dd:b2:3a:a9:69:42:72:
                    bc:1c:ec:cc:9b:11:58:73:2a:25:23:e8:ed:fe:9e:
                    27:fd:0e:b6:ed:1e:02:85:72:16:e0:8d:5e:fa:ca:
                    1c:b8:b0:42:e7:65:7e:6f:75:94:95:52:e6:c3:bc:
                    55:a9:98:3b:ed:36:6e:cd:7d:39:79:23:8a:b7:99:
                    29:eb:5c:ed:3b:d3:b1:4f:65:3a:f6:47:60:47:c8:
                    bd:e9:3f:34:c4:58:f2:02:ca:e3:ec:f5:81:ba:22:
                    50:69:10:c2:84:ef:ce:86:9f:e9:2d:7f:39:54:6c:
                    ce:1d:d3:f8:4b:6f:a5:bf:66:93:a3:87:0c:af:da:
                    ec:ba:c7:e3:be:3b:81:a3:82:e0:af:0c:c3:18:5e:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A3:6F:CF:CC:12:0E:D7:B2:40:B9:8B:33:15:8A:AA:EF:D4:17:7E
            X509v3 Authority Key Identifier:
                keyid:CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234362e302f32342d3234203d3e20323639373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ae:36:6b:c0:80:a8:3b:99:f9:0f:53:a2:a6:ea:80:0e:2e:
         e8:9b:53:ca:8a:90:9e:f2:b8:2e:3f:a5:10:f3:af:d7:7d:27:
         23:45:cd:9f:6f:e1:74:2d:08:8d:83:b2:83:33:84:2e:41:71:
         1b:18:7e:6f:d1:e6:d6:df:8e:cf:93:38:09:37:c7:98:7e:43:
         9e:61:bd:80:90:b4:8f:f6:eb:17:0f:bd:ff:f1:b7:68:df:9d:
         92:7e:b4:2c:22:51:c4:62:67:11:1f:77:5a:10:59:35:f1:f3:
         80:50:72:f3:66:c4:bc:70:31:a8:03:6d:bf:5c:d1:65:1e:cf:
         ac:de:db:be:4c:23:7a:4e:48:88:b6:34:8a:e1:25:42:3c:12:
         13:5d:e7:58:f3:57:72:e0:a1:c0:f3:3c:78:82:73:72:c3:d6:
         b2:44:a8:87:b0:48:02:97:d0:6b:01:45:04:d6:e5:4c:79:b0:
         42:7b:bf:77:94:fb:e6:6c:a2:cf:b8:d5:66:80:f2:69:33:a2:
         e2:ca:36:0e:c1:d9:3a:b6:70:e0:2f:29:03:eb:11:cf:bb:4b:
         72:e6:07:73:af:f1:cc:bc:ab:77:02:98:23:e5:0d:a7:29:ea:
         d4:62:b3:b0:02:93:97:76:da:5d:99:e1:43:f0:64:6e:0a:28:
         56:2c:15:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:10:10 2025 by rpki-client