Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/34352e3233372e34382e302f32322d3234203d3e20323636383135.roa
File:                     34352e3233372e34382e302f32322d3234203d3e20323636383135.roa (raw, json)
Hash identifier:          +ccbeVDykK4AL+Vi+y1uduTeVpfwdi8jA2wk9sv/cE8=
Subject key identifier:   F5:07:03:A7:08:12:98:A2:D2:F5:94:BD:3B:62:34:14:6A:62:5F:8A
Certificate issuer:       /CN=8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251
Certificate serial:       625777B532C7240AF827ACEBDE9C46D1FB23F982
Authority key identifier: 87:16:FC:C1:EC:12:29:F4:CC:E3:91:7A:8A:D7:E8:FF:AD:D5:62:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/34352e3233372e34382e302f32322d3234203d3e20323636383135.roa
Signing time:             Tue 04 Feb 2025 18:09:01 +0000
ROA not before:           Tue 04 Feb 2025 18:04:01 +0000
ROA not after:            Tue 03 Feb 2026 18:09:01 +0000
asID:                     266815
IP address blocks:        45.237.48.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:77:b5:32:c7:24:0a:f8:27:ac:eb:de:9c:46:d1:fb:23:f9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251
        Validity
            Not Before: Feb  4 18:04:01 2025 GMT
            Not After : Feb  3 18:09:01 2026 GMT
        Subject: CN=F50703A7081298A2D2F594BD3B6234146A625F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:c6:db:13:e5:81:23:db:73:95:2c:28:ea:
                    4f:2b:07:99:f6:16:4d:81:be:4d:ed:4a:7f:9a:f8:
                    d0:42:f2:f4:c5:11:d1:c0:ae:c0:f1:a3:29:92:10:
                    e4:10:e1:85:9b:c8:2f:80:52:83:0f:2f:4e:7a:4f:
                    cd:a7:cd:56:59:80:a0:ad:74:e2:d8:ea:37:1d:5b:
                    57:5b:75:ac:94:00:99:e2:f8:7f:02:4a:da:ec:cb:
                    84:d5:4e:de:09:a1:d3:75:84:62:83:72:69:10:05:
                    9d:0e:5d:09:13:0a:c3:73:be:da:29:32:30:78:7b:
                    9b:9b:fc:39:e3:25:1a:a0:b8:7d:20:8d:aa:91:e2:
                    59:16:47:1e:5e:af:85:b9:56:7d:51:83:7d:be:e0:
                    43:c7:10:4e:14:41:4d:a6:5a:98:d2:b9:8e:64:48:
                    58:47:0f:d8:3a:fb:3f:76:0a:52:90:82:5b:bf:d3:
                    9d:e6:4d:30:27:9e:92:51:e7:b5:e7:38:04:17:75:
                    38:ae:eb:fe:63:bb:30:c6:b2:6b:3e:57:1c:b3:11:
                    0c:cf:d9:21:73:4b:e7:21:64:7c:0d:f6:af:57:53:
                    a1:84:e1:73:93:ce:07:b2:87:2b:64:66:30:4e:e1:
                    53:18:d9:db:a6:60:ff:c2:21:8f:45:b0:e5:e8:51:
                    30:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:07:03:A7:08:12:98:A2:D2:F5:94:BD:3B:62:34:14:6A:62:5F:8A
            X509v3 Authority Key Identifier:
                keyid:87:16:FC:C1:EC:12:29:F4:CC:E3:91:7A:8A:D7:E8:FF:AD:D5:62:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8716FCC1EC1229F4CCE3917A8AD7E8FFADD56251.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449EE8668C68FBDAC914CF246EE62740945B55834FA412693CA4C71FDBDEA07D/0/34352e3233372e34382e302f32322d3234203d3e20323636383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:a4:37:a4:dd:69:0f:00:2a:08:c4:bb:ba:09:fd:0c:70:
         ff:d5:ff:34:d8:d0:3b:af:bc:b0:28:93:7a:4b:80:ec:54:06:
         df:e8:55:05:6b:35:74:eb:07:a2:f6:de:00:e1:8f:ba:17:5c:
         c5:47:99:47:47:cf:39:b6:72:3c:35:26:5e:e6:6f:5d:65:6d:
         82:2b:cd:25:2c:38:a5:68:d7:b2:75:5e:b7:46:b3:56:f5:c3:
         a6:91:2d:f6:ec:55:34:f3:da:16:5b:d9:67:c0:86:5f:3c:20:
         61:c0:33:a6:18:43:51:bb:45:0b:0e:e4:bd:b5:ce:39:e8:61:
         4b:4f:bb:7f:73:33:aa:6a:89:cb:b7:d0:da:6d:42:f5:e7:2a:
         6f:c8:e9:be:f0:b8:fb:a5:81:c9:a9:f5:eb:84:cc:74:d8:f4:
         4d:f2:c6:ca:dd:51:6d:3d:29:e0:56:3e:f7:58:44:79:72:ca:
         27:30:2e:47:82:18:de:b7:79:51:74:1e:0e:fe:d4:ad:01:c0:
         21:72:7a:3a:06:af:98:60:14:23:4e:05:96:2a:c1:fa:d8:6e:
         7a:23:a1:22:b5:17:e5:bd:c7:d8:21:88:7c:0b:73:4a:d4:53:
         75:48:36:9e:e7:7d:ca:45:3c:1f:41:37:e9:6a:ac:ad:0c:ca:
         13:fe:5f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:45 2025 by rpki-client