Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234372e302f32342d3234203d3e20323639373339.roa
File:                     34352e3138312e3234372e302f32342d3234203d3e20323639373339.roa (raw, json)
Hash identifier:          4lXh3ibayo5Zi7kdTmOX1ne3FDtkN83ShXfAptaccdo=
Subject key identifier:   69:FA:99:9F:A6:05:5C:D7:BB:A0:2D:6B:E3:DE:3A:C7:A3:B0:39:3D
Certificate issuer:       /CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
Certificate serial:       6C6D15280C9527C1ADE40F659BC5397711E33787
Authority key identifier: CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234372e302f32342d3234203d3e20323639373339.roa
Signing time:             Tue 18 Feb 2025 14:10:05 +0000
ROA not before:           Tue 18 Feb 2025 14:05:05 +0000
ROA not after:            Tue 17 Feb 2026 14:10:05 +0000
asID:                     269739
IP address blocks:        45.181.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:6d:15:28:0c:95:27:c1:ad:e4:0f:65:9b:c5:39:77:11:e3:37:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A
        Validity
            Not Before: Feb 18 14:05:05 2025 GMT
            Not After : Feb 17 14:10:05 2026 GMT
        Subject: CN=69FA999FA6055CD7BBA02D6BE3DE3AC7A3B0393D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:37:0c:97:b9:82:47:9a:77:19:c9:27:e9:
                    18:ce:03:bd:10:1a:9c:db:f7:ea:48:e2:c0:b3:b6:
                    25:34:99:64:e3:a8:f9:a0:b1:66:c9:ec:43:39:40:
                    80:ca:b2:ce:35:20:6d:45:17:12:68:d0:90:00:f5:
                    9a:a0:7c:31:aa:3b:31:f7:62:5f:68:45:54:05:a6:
                    70:f0:4c:b2:77:95:16:06:d3:d8:35:ad:b0:e8:22:
                    21:fb:57:72:f3:35:6b:61:c6:19:88:3e:db:d3:ae:
                    f9:b4:e5:59:2c:96:c9:e4:2b:7c:75:24:04:62:5d:
                    f5:20:e0:af:61:2d:0d:f8:56:ec:c4:d0:94:f7:76:
                    ae:85:a9:e0:a1:b0:0a:d0:55:1c:62:3c:72:18:76:
                    83:5b:e0:64:68:73:db:16:8a:32:19:97:e2:1f:2b:
                    5a:96:3b:11:0d:5e:a6:f4:04:38:26:bb:c5:1a:8d:
                    11:a2:ec:a3:ab:f2:32:95:56:de:5c:6f:00:f1:9e:
                    31:eb:ba:7f:11:32:9b:57:fd:e5:1f:47:c6:3d:6c:
                    b8:cc:ef:8e:c7:10:6b:56:a9:51:2a:12:c2:50:3b:
                    4f:ce:45:40:7e:45:e1:d6:07:79:55:7c:ef:33:5a:
                    01:34:14:74:8f:8b:a5:c0:2b:51:dc:af:22:e6:86:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FA:99:9F:A6:05:5C:D7:BB:A0:2D:6B:E3:DE:3A:C7:A3:B0:39:3D
            X509v3 Authority Key Identifier:
                keyid:CE:69:26:43:8E:72:F9:52:AA:3A:9B:44:F5:FB:CC:DD:24:4E:0D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE6926438E72F952AA3A9B44F5FBCCDD244E0D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A45CE9467DA807641A24A6C58AFB736361A89519DED1AD6CAA0A2DECA52875E/0/34352e3138312e3234372e302f32342d3234203d3e20323639373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:c4:c4:9f:ad:9f:cb:d2:31:a5:7d:ca:59:d2:c7:d1:37:0f:
         ba:ba:6c:83:b4:01:c5:e5:23:87:e6:13:90:32:7d:4c:38:7a:
         7a:a3:37:d5:a4:58:1f:75:b6:9b:db:18:eb:d8:70:83:ce:19:
         68:5f:1e:d1:75:71:45:94:e6:3f:7b:19:82:1c:b7:94:1d:4f:
         36:a6:4b:27:81:2f:62:18:fc:bf:e5:77:84:1a:cd:a7:92:e9:
         44:0e:9c:2b:4d:b8:b1:fb:eb:d4:dc:01:01:18:aa:ab:b1:b4:
         76:63:bc:d2:a0:7b:d0:a3:23:78:6b:c9:aa:e8:12:d7:ad:c7:
         ec:39:cc:19:8d:5e:9a:a3:26:63:e0:46:f0:98:9f:e5:1e:4a:
         e9:7c:82:34:7b:1c:9d:12:30:aa:76:7f:37:d5:72:4c:e8:fd:
         ee:05:2c:0a:7b:7c:00:ea:14:12:b9:91:3d:37:fd:ed:49:a8:
         19:ef:d1:5f:7c:29:ed:16:24:44:d1:d8:05:b1:97:36:88:f0:
         07:f7:c8:1d:fc:c3:61:9c:fc:c3:be:65:99:2d:41:9a:be:d9:
         b4:27:60:ed:9d:97:3d:0a:43:9b:97:85:64:54:84:69:68:d2:
         7d:18:5a:af:4b:5c:a3:3a:c4:5f:c6:8d:2f:9f:70:20:5a:f1:
         88:ea:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:38 2025 by rpki-client