Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3136382e302e3234342e302f32322d3232203d3e203133343839.roa
File:                     3136382e302e3234342e302f32322d3232203d3e203133343839.roa (raw, json)
Hash identifier:          dNCKpWb1W+yrDmOaSnejeABNy81dQj6QOTi9w9y1lGs=
Subject key identifier:   46:88:13:AC:9D:1A:0F:AE:B1:57:0E:6E:06:F3:FA:A0:E9:FA:82:31
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       34D4B55FF827E24368A882A1D761F9DCCFC102ED
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3136382e302e3234342e302f32322d3232203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:33:28 +0000
ROA not before:           Tue 04 Feb 2025 18:28:28 +0000
ROA not after:            Tue 03 Feb 2026 18:33:28 +0000
asID:                     13489
IP address blocks:        168.0.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d4:b5:5f:f8:27:e2:43:68:a8:82:a1:d7:61:f9:dc:cf:c1:02:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Feb  4 18:28:28 2025 GMT
            Not After : Feb  3 18:33:28 2026 GMT
        Subject: CN=468813AC9D1A0FAEB1570E6E06F3FAA0E9FA8231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:29:66:73:49:5a:fa:f2:4d:f6:ee:15:02:01:
                    6b:b5:39:5e:cd:1e:95:13:3e:b9:90:5a:3c:5d:68:
                    89:6e:64:87:e7:50:7b:86:53:f7:36:fd:ab:f2:b4:
                    33:96:98:15:64:77:bc:2f:36:80:34:c7:89:00:b3:
                    d6:7f:30:6e:ea:bd:2b:39:b5:64:25:db:8f:7b:47:
                    9e:04:d9:f9:f2:c3:81:2b:81:57:a7:70:f1:e7:10:
                    fb:76:5a:d6:c5:aa:bf:b3:a5:c6:fc:0d:8e:ab:69:
                    05:c0:a1:b4:14:03:d9:0d:cf:19:98:42:4c:55:25:
                    6a:2c:f1:89:93:fd:f1:07:6b:78:bd:47:d5:fd:5a:
                    90:3e:34:0f:be:ab:f8:4d:e3:bc:20:73:17:6b:0c:
                    cf:13:75:3c:a2:d5:b5:2d:28:b8:58:cc:e9:ed:a2:
                    b7:74:f9:97:b6:f1:a5:59:9b:c0:75:2c:25:c8:83:
                    2d:24:2f:82:6d:8f:94:99:d7:75:88:8d:c7:3b:47:
                    26:e3:6e:ad:4a:d7:d7:67:7a:29:f9:41:8f:05:0e:
                    f3:31:8a:3c:75:95:44:cf:72:f1:9c:53:2d:b0:fe:
                    81:11:fe:14:a8:6f:d2:ae:fd:5c:2f:51:77:24:3c:
                    a9:54:1c:98:b8:46:c9:68:3d:fa:a1:ad:77:dd:f6:
                    4e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:88:13:AC:9D:1A:0F:AE:B1:57:0E:6E:06:F3:FA:A0:E9:FA:82:31
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3136382e302e3234342e302f32322d3232203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:0e:42:55:ff:9a:3a:06:0d:87:87:d0:b4:4a:47:5f:81:
         b3:d6:fd:f3:82:91:b1:4e:e8:91:62:71:89:66:59:96:d1:87:
         01:a2:34:de:ce:ee:97:c4:1e:1c:30:37:95:57:3d:1e:0a:b6:
         11:e9:25:a2:c4:78:27:b2:8a:35:26:8a:fb:bd:0f:a1:cf:53:
         6c:be:a9:e4:ea:3a:e8:e8:71:55:5a:96:36:a1:87:23:3d:c0:
         d6:0f:69:67:56:ce:35:9c:98:f0:b8:34:ca:75:75:6e:f1:79:
         c4:1b:80:24:b4:a7:95:6b:ec:58:49:79:e3:45:87:15:de:c9:
         b5:ab:eb:e5:0b:53:2d:ed:b9:98:d3:f2:75:52:2a:f6:14:03:
         5e:b1:86:c7:9b:f1:73:31:f8:f0:75:b6:5e:92:7e:28:46:75:
         1a:f8:b5:37:6e:81:98:70:0b:2f:8a:7d:bb:05:20:9e:9f:05:
         14:70:00:8a:8a:e9:a1:1d:22:25:1b:2d:09:20:55:6e:58:5c:
         17:6b:3f:4d:8d:39:1e:a6:ad:de:96:d1:3c:d1:ab:8e:89:cc:
         de:0b:60:e8:2a:6d:89:70:3b:0a:5c:3b:85:82:47:6e:a4:49:
         e9:51:de:e7:0b:20:09:ab:c2:21:cb:8a:df:b7:0e:11:a3:26:
         9a:95:fd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:11 2025 by rpki-client