Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e302e302f32342d3234203d3e20323635363632.roa
File:                     34352e342e302e302f32342d3234203d3e20323635363632.roa (raw, json)
Hash identifier:          lErr9Ybj9fS9RMkww/uZF4KftXl5iYzmRT61IJVO0gk=
Subject key identifier:   6F:05:41:F0:35:98:29:1E:41:07:5B:0B:FB:92:F5:86:6B:77:D1:9F
Certificate issuer:       /CN=80D3550CF73B167B6F22E20047A686FB2D761E88
Certificate serial:       58E15442F7E0743FDEAF711147F8FF4DBD304D88
Authority key identifier: 80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e302e302f32342d3234203d3e20323635363632.roa
Signing time:             Tue 04 Feb 2025 19:57:48 +0000
ROA not before:           Tue 04 Feb 2025 19:52:48 +0000
ROA not after:            Tue 03 Feb 2026 19:57:48 +0000
asID:                     265662
IP address blocks:        45.4.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e1:54:42:f7:e0:74:3f:de:af:71:11:47:f8:ff:4d:bd:30:4d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D3550CF73B167B6F22E20047A686FB2D761E88
        Validity
            Not Before: Feb  4 19:52:48 2025 GMT
            Not After : Feb  3 19:57:48 2026 GMT
        Subject: CN=6F0541F03598291E41075B0BFB92F5866B77D19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b5:96:f2:88:fd:d8:f4:82:c3:aa:ae:6f:48:
                    53:57:ed:a2:a9:c0:57:9e:41:38:c8:4e:ea:18:e9:
                    4d:1c:aa:70:19:15:ee:a6:21:20:61:45:03:ff:07:
                    38:39:f3:ac:54:10:4d:cd:44:0b:9b:ae:a3:4f:27:
                    d7:64:83:dd:61:88:a7:20:6d:32:82:b9:9e:0b:f0:
                    b9:6c:68:74:be:6e:f1:4a:90:f1:ed:f1:50:f0:ce:
                    50:00:fe:bf:30:aa:73:bb:94:56:45:3e:38:57:b8:
                    c5:83:e3:63:21:1a:17:35:d3:51:0a:29:4d:f6:b1:
                    93:43:b6:a5:0d:fb:64:d2:ef:18:25:b3:2b:d9:48:
                    76:e3:59:be:5f:b7:82:35:58:eb:3a:b6:8e:d8:d5:
                    56:80:7b:71:67:c8:42:e1:7c:2a:2a:e1:0d:68:6f:
                    94:d1:8b:19:a0:ca:87:2c:25:03:d7:5e:9f:e8:61:
                    7b:4a:62:d0:20:26:c0:36:9f:7c:22:a5:8a:30:ac:
                    76:5d:c5:fb:b6:1e:c4:8e:2c:68:87:f8:98:12:e9:
                    66:39:6b:cb:d9:a2:cc:95:fe:3b:6e:a4:30:ba:92:
                    06:52:62:31:52:9a:a3:ca:b9:4c:bb:84:41:d0:b1:
                    af:d8:5d:71:cd:e3:36:8c:eb:f1:f8:f5:77:e8:08:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:05:41:F0:35:98:29:1E:41:07:5B:0B:FB:92:F5:86:6B:77:D1:9F
            X509v3 Authority Key Identifier:
                keyid:80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e302e302f32342d3234203d3e20323635363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:7c:a8:f9:82:ee:7e:6f:74:7e:72:b7:b5:d3:5c:ac:53:fd:
         d2:d5:d8:a2:13:7a:e3:4e:b7:d7:9d:70:3d:f5:78:5f:ea:08:
         87:f1:6b:a5:3e:7f:79:a9:a5:81:d1:01:e0:e9:29:bc:07:6f:
         43:2d:44:98:a3:8e:68:65:3f:f9:18:f5:f5:ec:cf:c0:48:af:
         bf:42:f7:df:cf:59:be:d7:be:65:0e:05:2a:b4:e7:58:ec:10:
         8b:36:01:0c:f1:26:98:93:ff:7c:8e:80:0e:ef:56:76:2b:75:
         b6:60:ed:a4:93:1a:14:a7:28:01:68:5a:05:62:8a:7a:7f:7c:
         88:55:57:46:f6:64:8a:6a:f5:7e:e4:07:c8:f2:f6:1c:b6:56:
         fa:fb:89:39:50:36:b0:f1:5f:c9:7d:75:f8:1c:e3:44:8f:a5:
         3b:e3:4d:0f:5f:18:20:b9:20:66:25:a6:c7:44:28:39:4b:57:
         46:9c:a8:39:96:f6:d1:1f:c6:35:4c:7c:4d:6e:79:9c:b0:bd:
         4e:c6:07:63:21:db:5b:47:1e:da:19:2e:1f:44:c2:f3:b5:fd:
         6f:8e:26:64:cb:21:91:c5:e6:39:f4:88:13:b6:9d:9f:21:f7:
         d4:4d:14:26:a6:e0:67:03:46:62:b8:26:61:21:72:22:8f:56:
         88:43:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:44 2025 by rpki-client