Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa
File:                     34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa (raw, json)
Hash identifier:          eYjlEDlAaJZeCGgCzi6A8zz4hJEz4a3yYk48SegSTBw=
Subject key identifier:   59:1E:40:F6:EC:2D:89:08:00:A4:E0:E2:15:23:FF:A1:BD:0D:1A:95
Certificate issuer:       /CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
Certificate serial:       17D6F5C1174C25438D917A19668E080AB1B41537
Authority key identifier: B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa
Signing time:             Tue 04 Feb 2025 18:02:28 +0000
ROA not before:           Tue 04 Feb 2025 17:57:28 +0000
ROA not after:            Tue 03 Feb 2026 18:02:28 +0000
asID:                     269768
IP address blocks:        45.182.220.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d6:f5:c1:17:4c:25:43:8d:91:7a:19:66:8e:08:0a:b1:b4:15:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7
        Validity
            Not Before: Feb  4 17:57:28 2025 GMT
            Not After : Feb  3 18:02:28 2026 GMT
        Subject: CN=591E40F6EC2D890800A4E0E21523FFA1BD0D1A95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:83:38:e6:51:11:e5:b6:e5:a7:78:20:1e:
                    9d:bc:f3:2a:68:44:b4:4e:2b:e4:4a:b6:14:05:e8:
                    6e:a1:36:d0:51:b8:ea:68:b8:ac:d1:c1:28:8b:28:
                    f0:04:9b:d2:b7:19:18:04:87:19:66:5f:54:6c:2b:
                    d3:f5:d4:1d:e9:36:8c:ea:f2:19:99:06:ad:f3:d6:
                    80:07:5e:ea:60:70:62:1e:64:7d:b1:20:8e:9b:b6:
                    a5:ae:c6:8f:ae:3a:76:eb:b4:84:1d:e1:49:47:75:
                    b3:63:64:82:22:41:00:34:bd:e0:14:55:89:20:2a:
                    d2:d1:19:41:2a:c9:5d:87:71:59:d3:5a:73:07:69:
                    1d:94:01:87:d1:b0:95:16:89:47:2d:70:7a:a6:3d:
                    d0:62:d1:23:33:92:82:99:c3:1f:f8:b5:2a:d8:b4:
                    8a:2a:a6:88:82:eb:30:8d:44:b1:80:eb:75:71:5f:
                    ba:51:9b:4f:ec:67:54:7b:1e:d1:11:af:62:92:98:
                    1f:69:a0:18:3d:ca:72:b3:ca:8c:90:12:05:ea:0b:
                    0a:76:da:9b:b2:4a:93:70:0a:82:97:21:ef:e7:d5:
                    4c:99:13:2d:d0:be:8a:2e:fc:e4:56:8a:c6:1d:8f:
                    1d:bd:ad:da:2a:14:b8:07:20:e7:c7:be:9b:a4:e2:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1E:40:F6:EC:2D:89:08:00:A4:E0:E2:15:23:FF:A1:BD:0D:1A:95
            X509v3 Authority Key Identifier:
                keyid:B8:A6:24:FD:3C:BB:CD:AF:F9:A6:F2:B0:99:91:CC:D2:77:2A:B2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B8A624FD3CBBCDAFF9A6F2B09991CCD2772AB2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456356633A62F5150F89E95D20438DCF8BFB0957254B9FA93E9FBF0A0D97DD97/0/34352e3138322e3232302e302f32322d3234203d3e20323639373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:f9:bd:8d:9a:af:61:66:92:3f:2f:2b:ce:be:d4:55:bd:02:
         6b:11:39:fe:95:06:f7:ba:b3:0a:95:84:2b:10:a9:34:e9:57:
         84:4e:58:58:e2:6f:b3:39:a4:ba:d5:80:ef:3b:4a:47:2e:c0:
         cc:49:bd:54:80:36:5f:50:70:42:35:a3:9a:27:83:9c:0e:bd:
         96:08:43:76:41:62:57:aa:1c:fb:01:d9:cd:ae:ca:da:94:47:
         66:2d:1d:ab:6e:8c:a6:e8:c3:fc:19:a5:2a:72:bd:2f:a2:df:
         dc:a0:d5:0f:99:ec:6d:fb:eb:6f:34:ce:1f:c0:d8:f1:22:fb:
         d8:e5:a9:c9:ff:35:19:71:c9:5b:05:fe:7e:2f:93:62:e9:1f:
         21:fe:5e:cc:03:63:07:28:13:cc:15:e1:b4:05:25:ed:39:d9:
         6c:87:04:06:19:66:83:db:a3:2b:fa:e3:52:df:e6:60:d7:51:
         ca:d4:aa:58:c9:b1:1f:6f:6b:d3:e5:44:13:9c:22:ce:e4:f3:
         af:51:b5:72:56:ef:a6:dc:85:ff:ca:52:8b:08:2d:c3:17:70:
         8f:e0:f3:d9:68:ec:0f:27:1b:31:d3:f2:95:11:26:68:89:12:
         6c:f8:ad:43:33:ea:d0:0c:b2:fb:51:b0:c9:45:de:f0:21:78:
         11:ac:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:41 2025 by rpki-client