Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/34352e3138352e35322e302f32322d3232203d3e20323639383030.roa
File:                     34352e3138352e35322e302f32322d3232203d3e20323639383030.roa (raw, json)
Hash identifier:          cU6PrIrmesrCQN7iRnXpvrOVdUq4iDPoWcnKF+X0V4M=
Subject key identifier:   F9:3D:F7:34:82:51:9B:18:93:C4:C0:40:FA:F1:F7:5B:C3:E7:FA:7F
Certificate issuer:       /CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
Certificate serial:       63445709632D8E3E4B8D0048583286A797C1BCC2
Authority key identifier: 0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/34352e3138352e35322e302f32322d3232203d3e20323639383030.roa
Signing time:             Fri 14 Mar 2025 20:11:52 +0000
ROA not before:           Fri 14 Mar 2025 20:06:52 +0000
ROA not after:            Fri 13 Mar 2026 20:11:52 +0000
asID:                     269800
IP address blocks:        45.185.52.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:44:57:09:63:2d:8e:3e:4b:8d:00:48:58:32:86:a7:97:c1:bc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5
        Validity
            Not Before: Mar 14 20:06:52 2025 GMT
            Not After : Mar 13 20:11:52 2026 GMT
        Subject: CN=F93DF73482519B1893C4C040FAF1F75BC3E7FA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:f9:24:7e:e3:bd:3d:8a:11:a4:1b:6d:84:
                    42:e9:0c:9d:7e:11:2d:79:ce:25:53:14:83:5b:33:
                    f6:3f:1a:0a:e3:ce:06:16:b4:2a:de:1d:01:85:77:
                    e8:42:b3:39:32:ef:d7:53:59:db:fa:5c:67:f6:67:
                    63:bd:0f:44:86:a1:94:5a:e3:a8:69:99:7c:60:1b:
                    18:61:ed:3b:04:4d:58:db:2c:12:16:ce:34:98:50:
                    1c:5d:99:82:f2:d1:7c:f9:81:03:83:c8:96:22:c6:
                    4d:29:da:69:83:4c:65:c5:04:df:d5:3c:67:6d:82:
                    4a:64:2c:c8:05:b5:dd:e4:84:bb:9d:a7:74:df:be:
                    ff:57:ec:cf:8a:c4:ec:e8:23:b8:f3:12:e8:65:01:
                    40:4b:b5:f8:7a:51:55:9e:ec:ef:a9:dd:66:93:18:
                    39:65:48:2c:62:f8:e5:87:82:5f:b6:a2:86:e0:3c:
                    7f:62:fa:c0:3f:6f:40:52:61:dc:91:fb:50:33:b3:
                    1d:59:9a:f2:d4:0a:a4:17:19:b2:c3:bf:a5:f5:a2:
                    f0:6a:76:a3:5d:e0:03:5d:83:cd:18:80:64:cf:3d:
                    37:b5:f1:60:56:2b:72:bb:d8:dd:76:a7:06:47:cd:
                    18:13:8f:64:2c:2d:ab:56:d5:47:27:11:1a:7a:a7:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3D:F7:34:82:51:9B:18:93:C4:C0:40:FA:F1:F7:5B:C3:E7:FA:7F
            X509v3 Authority Key Identifier:
                keyid:0E:D1:F0:08:0B:7C:2A:16:B2:F5:41:D4:4A:42:3C:AC:74:1E:3E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ED1F0080B7C2A16B2F541D44A423CAC741E3EC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41867DE2EB9568100B25D0D46DA757035EAE961DCB4B7FE827A17A0EDE9D93C4/0/34352e3138352e35322e302f32322d3232203d3e20323639383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:bb:2b:33:9b:0d:86:06:94:99:14:c2:d4:d3:e9:cc:11:
         70:27:ab:73:46:87:94:1e:f9:a5:98:ab:30:03:e1:f8:b3:ef:
         2a:39:c4:9b:96:96:7b:5e:4d:45:fc:83:8e:92:9f:75:54:57:
         f5:42:a8:f1:45:36:ce:0b:d2:b1:e4:9a:f6:ac:cb:46:d6:28:
         91:47:f5:be:ac:18:c0:39:47:55:83:90:b2:b1:97:22:9f:ce:
         1f:1c:ba:ff:5d:5d:80:ab:5e:18:f9:9a:ed:7e:2c:aa:ae:a2:
         0f:61:c1:ad:80:e2:35:b5:99:b3:61:be:d9:7f:c1:d6:1f:6f:
         d7:4c:9c:b6:94:18:1d:6e:22:72:8e:13:bc:c9:71:66:82:5f:
         14:34:dc:8a:3f:1d:2c:67:a4:33:7b:ef:bd:b4:3b:6e:6e:3b:
         5c:49:26:80:90:de:aa:8a:df:22:71:37:3f:ae:1a:39:fe:ff:
         63:df:05:f7:6c:3d:33:16:a4:e2:bd:90:84:48:e4:02:01:b9:
         be:e0:58:e4:28:17:90:a5:23:f4:01:61:9b:08:81:60:5c:6a:
         5f:06:09:61:8a:fe:c8:11:b0:3a:45:c6:b2:c7:97:4e:b2:c5:
         4e:50:59:01:ca:70:79:ba:15:64:2e:8b:ba:80:a2:85:69:19:
         a4:bb:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:47 2025 by rpki-client