Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa
File:                     34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa (raw, json)
Hash identifier:          dRUIFi4GFV5bo8iY7lMIU1PpHsaqIxOgPQ7f35P3dyY=
Subject key identifier:   F3:67:DA:8F:E1:EA:70:99:AA:6C:2A:6B:AD:7A:EB:02:C6:2B:02:DC
Certificate issuer:       /CN=54D7EE69523D3779807321281B145BDDA5C28116
Certificate serial:       02C38C5DFE9F8A744D62C6C354EF985CF8E00AF5
Authority key identifier: 54:D7:EE:69:52:3D:37:79:80:73:21:28:1B:14:5B:DD:A5:C2:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa
Signing time:             Tue 04 Feb 2025 18:19:57 +0000
ROA not before:           Tue 04 Feb 2025 18:14:57 +0000
ROA not after:            Tue 03 Feb 2026 18:19:57 +0000
asID:                     2667733
IP address blocks:        45.167.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:8c:5d:fe:9f:8a:74:4d:62:c6:c3:54:ef:98:5c:f8:e0:0a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54D7EE69523D3779807321281B145BDDA5C28116
        Validity
            Not Before: Feb  4 18:14:57 2025 GMT
            Not After : Feb  3 18:19:57 2026 GMT
        Subject: CN=F367DA8FE1EA7099AA6C2A6BAD7AEB02C62B02DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ba:04:24:a3:9f:c5:e6:5a:b6:54:69:19:4e:
                    a7:d8:ab:40:0c:10:51:81:96:6c:bc:13:15:96:6f:
                    2e:d7:c5:2b:36:26:7a:e1:44:a0:c0:ce:2f:d0:b3:
                    a6:21:0f:79:a8:e2:a9:5d:71:f4:a3:15:c8:f2:55:
                    6e:28:57:84:a5:8c:0e:7f:83:8b:e8:e1:ad:74:e8:
                    ce:ed:62:5b:b6:da:f0:74:0c:11:38:17:9c:d5:04:
                    cf:18:c3:1b:41:64:cd:4b:d2:ac:75:ac:5a:cb:da:
                    f0:cb:09:8e:97:46:28:92:70:92:3d:00:ee:ae:99:
                    1e:6f:8f:ef:ed:a0:3c:c2:ca:8d:7a:e1:e8:34:5a:
                    37:e2:f1:a5:2f:c5:3f:ee:8b:5e:e4:89:96:dd:91:
                    bf:72:86:fb:68:18:ba:27:4b:7c:d5:83:bd:18:7b:
                    e7:22:c7:6a:5f:ed:6a:17:45:a4:71:03:d5:a6:3f:
                    f8:65:db:ec:6a:f4:0d:54:b8:5a:b8:08:3f:fb:ce:
                    12:0a:85:35:f3:6e:f5:fe:5c:ff:49:2a:ba:a6:72:
                    a0:e6:4e:06:2b:b5:06:5a:66:0d:fc:69:92:4b:9e:
                    ed:81:be:da:f5:87:c0:6f:d3:91:8a:e4:a0:c8:b8:
                    0f:d6:da:04:9c:0f:ac:51:26:39:8d:cc:79:e3:a5:
                    25:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:67:DA:8F:E1:EA:70:99:AA:6C:2A:6B:AD:7A:EB:02:C6:2B:02:DC
            X509v3 Authority Key Identifier:
                keyid:54:D7:EE:69:52:3D:37:79:80:73:21:28:1B:14:5B:DD:A5:C2:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/54D7EE69523D3779807321281B145BDDA5C28116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54D7EE69523D3779807321281B145BDDA5C28116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5300C1D7EFC4F90E837112EB8840378D0A2CA3AEDCA5E111144BACD61C144A92/0/34352e3136372e3139322e302f32322d3232203d3e2032363637373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:32:f0:32:6b:bd:10:ef:40:e9:8c:10:4a:0a:43:54:b1:
         3d:c4:7f:f2:35:84:dd:16:a7:f6:b6:35:93:09:c1:3d:3a:c1:
         e2:48:2f:dd:18:c4:cf:a8:7d:90:75:36:bc:f4:04:95:fc:42:
         42:02:46:70:a1:22:14:3e:31:99:54:a9:1f:9b:8c:ea:75:c7:
         49:bd:b3:8d:84:a6:89:cd:2d:a2:0e:19:fc:06:00:37:fc:54:
         44:bf:58:23:51:d1:93:8d:bb:77:0c:51:56:62:ef:75:e7:ef:
         81:c8:d9:d1:be:e3:79:0a:ac:6c:c1:6b:d2:60:5b:5c:88:ab:
         9a:4d:5e:31:20:6f:68:13:55:4e:b4:f7:6d:7d:64:59:4f:3f:
         98:bb:0c:cb:97:20:4b:6c:ea:bf:a5:2b:38:6a:4d:55:5f:6b:
         8c:ad:3c:65:f5:cd:c8:f1:10:58:27:60:fb:af:79:bc:19:9e:
         cb:a2:f2:7f:b0:43:16:dc:b8:88:76:3a:9b:c6:fd:0d:fc:0a:
         95:19:4f:63:8a:fd:ff:aa:55:8e:81:33:a0:09:80:c1:69:74:
         03:de:7b:eb:98:89:7b:52:cc:6e:89:69:37:d8:ac:10:40:60:
         36:32:94:43:09:e4:19:62:f4:55:e1:da:b9:ce:1d:fd:2e:a4:
         17:2c:b5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:51:24 2025 by rpki-client