Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32342d3234203d3e20323634373538.roa
File:                     34352e3137382e36382e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          /nB9ca5qaYFEZ0cnm31ssTfmc3g5DRMWdHRQyoem04k=
Subject key identifier:   51:6B:60:0A:CF:91:31:3A:75:88:F4:48:12:91:76:47:3E:FC:4D:50
Certificate issuer:       /CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
Certificate serial:       3083C6780FE4EEB66AAB17CEAF904366B18DFD87
Authority key identifier: DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 04 Feb 2025 18:33:56 +0000
ROA not before:           Tue 04 Feb 2025 18:28:56 +0000
ROA not after:            Tue 03 Feb 2026 18:33:56 +0000
asID:                     264758
IP address blocks:        45.178.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:83:c6:78:0f:e4:ee:b6:6a:ab:17:ce:af:90:43:66:b1:8d:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB636261E4B370BE1ABAE7E5B50921E00A6D5979
        Validity
            Not Before: Feb  4 18:28:56 2025 GMT
            Not After : Feb  3 18:33:56 2026 GMT
        Subject: CN=516B600ACF91313A7588F448129176473EFC4D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:da:03:89:bf:b5:82:33:58:5a:49:c2:ac:
                    34:e8:f2:b0:91:cf:a6:3a:30:19:41:8c:01:14:9b:
                    9f:4a:90:bb:a6:5c:88:89:e3:75:95:fc:2a:b8:bc:
                    2a:40:40:77:a6:ed:2b:22:1a:85:2a:5e:e5:12:d5:
                    0a:8f:43:94:67:70:12:41:10:df:12:9a:93:f9:53:
                    88:3f:96:7f:36:1c:6d:43:90:75:a1:90:9f:d7:9d:
                    9b:44:d4:d6:25:63:c5:a1:34:2e:c1:91:6e:84:b0:
                    6a:29:34:56:e1:15:68:13:5a:2b:9f:2e:98:31:1d:
                    44:3e:47:d4:12:99:1e:be:2e:ea:85:38:05:7c:31:
                    75:cb:14:62:f8:90:39:9a:7c:0a:e6:70:73:25:cc:
                    dc:f2:b4:a2:2d:e0:e0:3b:47:94:cc:c4:dd:56:07:
                    26:79:7f:36:78:ca:9d:02:6e:26:b7:de:9e:4a:69:
                    c5:7a:09:05:93:ab:3f:bf:6c:b2:0d:21:b4:78:36:
                    27:30:8f:58:c5:bb:a7:7d:d6:3a:b3:5c:fd:b2:09:
                    e6:d2:2e:9f:61:4a:ee:f7:a1:71:8c:e9:a4:c1:1f:
                    ea:45:7c:7e:03:f8:f9:8a:dc:42:96:7f:a1:4b:74:
                    b6:0d:78:36:e8:01:95:e6:8b:67:c6:63:e2:4a:24:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6B:60:0A:CF:91:31:3A:75:88:F4:48:12:91:76:47:3E:FC:4D:50
            X509v3 Authority Key Identifier:
                keyid:DB:63:62:61:E4:B3:70:BE:1A:BA:E7:E5:B5:09:21:E0:0A:6D:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB636261E4B370BE1ABAE7E5B50921E00A6D5979.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DF10705730A1E4D8C493F2790B6F69D6C13A14D111E91284DF88FABABEA2E82/0/34352e3137382e36382e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:59:90:94:16:4c:66:af:9b:69:38:dc:19:34:7a:05:a6:6b:
         c1:b4:79:19:ae:00:85:42:75:06:fa:ed:4c:6b:4b:bd:8f:41:
         8a:9f:93:1e:a4:5c:90:4a:0f:2d:38:e3:93:53:f6:b2:bc:be:
         f9:8d:c1:8b:66:18:30:dc:08:5b:09:31:01:5c:0f:da:9b:44:
         ca:ab:33:f7:e8:be:58:d6:ec:33:91:81:6e:f5:e9:99:fb:b6:
         94:50:0c:e0:93:f7:2f:c2:19:0c:0d:a1:34:07:54:c2:b4:15:
         17:7a:71:8f:32:46:f3:df:13:7c:5d:b3:66:06:6f:a0:6a:d4:
         4d:63:cf:2e:6f:f3:9a:d7:2a:cb:3b:e4:77:57:f6:21:22:93:
         d3:cc:20:8a:b0:4c:88:39:7f:87:e8:50:00:d1:f1:11:56:2f:
         48:8b:6e:5d:fe:02:2b:b7:9b:04:30:1b:86:22:ed:68:a8:03:
         5c:0e:3c:ec:4b:4b:cc:05:c9:66:76:46:de:20:12:22:be:bf:
         0e:e9:36:2d:90:a6:b1:dc:33:38:7c:04:79:c8:b4:10:b4:f9:
         bb:07:b3:01:7d:d3:45:2b:4d:74:df:8a:3e:d8:01:59:f2:f7:
         9e:ba:a8:93:1b:dd:2a:17:4d:c3:e2:a5:d2:c8:4f:ac:c8:81:
         a1:0b:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:10 2025 by rpki-client