Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138302e302f32332d3233203d3e203130373533.roa
File:                     34352e352e3138302e302f32332d3233203d3e203130373533.roa (raw, json)
Hash identifier:          BzCVV3KWVLkixFymL6JLfxAs3Si7a58xtGSmZvf2BPE=
Subject key identifier:   1B:AA:1A:66:CB:02:B0:CB:08:85:CF:02:9C:75:87:F6:13:B9:56:BF
Certificate issuer:       /CN=D418292B880E84CA0C2BFDA04321A946B3478A05
Certificate serial:       7D6F8FE8F52D473AB87B2F35C6DC30644D7596BD
Authority key identifier: D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138302e302f32332d3233203d3e203130373533.roa
Signing time:             Thu 27 Mar 2025 01:35:00 +0000
ROA not before:           Thu 27 Mar 2025 01:30:00 +0000
ROA not after:            Thu 26 Mar 2026 01:35:00 +0000
asID:                     10753
IP address blocks:        45.5.180.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6f:8f:e8:f5:2d:47:3a:b8:7b:2f:35:c6:dc:30:64:4d:75:96:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D418292B880E84CA0C2BFDA04321A946B3478A05
        Validity
            Not Before: Mar 27 01:30:00 2025 GMT
            Not After : Mar 26 01:35:00 2026 GMT
        Subject: CN=1BAA1A66CB02B0CB0885CF029C7587F613B956BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:6a:8f:80:ca:29:c3:f0:72:e0:8e:70:16:
                    d8:6b:55:44:cf:43:8c:aa:19:1b:e5:89:e6:a8:d4:
                    ea:84:69:01:1a:aa:55:7c:af:58:12:ab:cf:3c:8a:
                    45:a5:a0:61:e7:17:de:d3:2d:7c:ea:a6:9e:2d:72:
                    82:1d:b9:35:91:3b:7e:36:4c:8e:19:c9:9e:20:d8:
                    c5:30:2e:60:6a:b0:df:a0:94:8f:10:44:d0:3f:78:
                    55:d3:10:10:50:42:7f:a7:c6:37:65:ab:54:e8:7a:
                    2b:5b:fc:a5:3d:6d:e4:8e:d4:f2:07:7c:6f:e6:11:
                    ec:e2:36:74:a6:3b:56:33:41:bb:02:d2:9e:70:3f:
                    13:16:d6:67:8a:62:7f:60:5e:24:52:55:9f:92:a0:
                    6c:7c:45:66:20:27:bd:05:25:bd:3a:ae:2f:6e:56:
                    a5:86:d4:ec:11:a7:ec:04:23:09:b1:78:7c:a6:8e:
                    85:0a:74:3a:2b:58:63:e5:73:b9:f5:69:27:70:44:
                    dd:47:dc:f6:34:47:0f:85:3b:1c:9a:c1:1f:21:cb:
                    5e:f2:ee:11:65:cf:58:44:b7:40:94:97:df:2b:1f:
                    47:4a:5f:48:7d:8c:70:4a:9a:bb:0d:66:9d:ae:45:
                    32:ee:53:7a:e8:b2:da:49:72:4d:bd:72:23:2d:5e:
                    1f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AA:1A:66:CB:02:B0:CB:08:85:CF:02:9C:75:87:F6:13:B9:56:BF
            X509v3 Authority Key Identifier:
                keyid:D4:18:29:2B:88:0E:84:CA:0C:2B:FD:A0:43:21:A9:46:B3:47:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/D418292B880E84CA0C2BFDA04321A946B3478A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D418292B880E84CA0C2BFDA04321A946B3478A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FA55DCCC6CEEA9D9F6E306EB7C587EDD34BB2C860B9A0544DE19A7BA62B2D21/0/34352e352e3138302e302f32332d3233203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:1c:b6:85:0f:2f:10:74:6b:56:a5:bc:7b:1f:43:a8:0d:
         ce:5e:83:e7:43:5c:35:e7:a2:45:67:a8:d4:12:27:bd:b5:c3:
         23:cf:d7:eb:cc:7f:ea:db:6b:36:2b:5a:87:f4:1c:8c:6b:d2:
         af:d8:65:62:0a:15:d2:15:06:39:f6:2d:a8:49:b8:68:48:1f:
         31:a0:f5:18:46:64:5f:55:2d:88:5a:7f:84:a7:a3:77:18:98:
         da:f8:7f:7c:a7:77:97:63:7e:59:38:f0:96:49:b1:39:5e:27:
         52:13:5c:f9:71:48:cc:be:01:20:a4:1a:13:1d:6b:02:cb:ef:
         72:fa:fb:08:98:bc:a4:b3:e9:2f:5a:f1:42:da:23:2f:2e:87:
         6b:e1:56:c4:0e:cb:ff:7d:55:25:16:57:e6:06:92:16:d4:31:
         d2:c4:f4:68:60:6a:84:5c:64:d4:ab:f2:dc:93:37:82:6c:c5:
         7c:80:2b:16:8f:f8:ef:76:07:fa:bd:6c:47:05:93:fa:d7:0c:
         d8:0c:f7:b0:a5:ce:8a:47:8b:68:0e:e9:06:98:9e:b5:ec:13:
         29:f2:26:c5:a6:61:55:36:11:83:4c:db:c9:b8:4f:03:30:45:
         3b:23:82:f0:f6:98:ce:f8:97:18:0b:9d:55:5e:07:c6:7d:a7:
         50:10:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:27:56 2025 by rpki-client