Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e312e302f32342d3234203d3e20323635363632.roa
File:                     34352e342e312e302f32342d3234203d3e20323635363632.roa (raw, json)
Hash identifier:          P79478aEdyLapkGGX/p+2SiQdnvEWWKdnKiLva9GXgU=
Subject key identifier:   44:CA:2A:4B:32:D6:C5:B4:70:C4:F4:CC:C7:92:6F:A4:C2:93:4C:09
Certificate issuer:       /CN=80D3550CF73B167B6F22E20047A686FB2D761E88
Certificate serial:       3497F9446FA74400EB2038480AC468E46ECFF7D7
Authority key identifier: 80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e312e302f32342d3234203d3e20323635363632.roa
Signing time:             Tue 04 Feb 2025 19:57:47 +0000
ROA not before:           Tue 04 Feb 2025 19:52:47 +0000
ROA not after:            Tue 03 Feb 2026 19:57:47 +0000
asID:                     265662
IP address blocks:        45.4.1.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:97:f9:44:6f:a7:44:00:eb:20:38:48:0a:c4:68:e4:6e:cf:f7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D3550CF73B167B6F22E20047A686FB2D761E88
        Validity
            Not Before: Feb  4 19:52:47 2025 GMT
            Not After : Feb  3 19:57:47 2026 GMT
        Subject: CN=44CA2A4B32D6C5B470C4F4CCC7926FA4C2934C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:b3:8f:55:79:67:32:fb:7c:f6:e3:8d:29:
                    5c:d3:90:7c:7c:f7:62:7f:86:36:0a:7d:01:27:8e:
                    d4:51:44:69:9f:87:21:0c:a9:af:c8:6f:00:9f:bb:
                    b7:9d:01:05:15:7e:03:70:3a:d5:d2:e4:40:99:ce:
                    5f:49:fb:49:12:37:8a:b2:41:13:00:3d:46:da:a8:
                    3a:8b:92:65:9c:e6:d2:49:9b:09:d5:f0:a7:42:25:
                    7d:19:8b:b3:72:bb:61:ca:af:2c:f1:2a:69:2d:77:
                    7b:b7:0e:c0:7f:09:78:c7:de:fc:0f:fa:8d:14:11:
                    f7:2b:eb:c6:2b:ac:b6:95:53:4e:f1:e2:a0:64:32:
                    59:14:2b:5c:41:42:28:17:61:c7:0f:c6:e6:48:b5:
                    1b:79:8e:8a:48:e1:00:2a:7d:df:14:24:10:02:43:
                    a7:c6:ce:8f:b9:c7:47:6c:7e:f4:9b:53:79:fd:8f:
                    93:47:39:bc:d0:e5:38:c0:0a:ba:26:cc:ed:ed:aa:
                    c1:35:06:29:bb:e9:32:46:2e:31:1c:10:a8:88:8d:
                    72:87:00:c8:9e:66:16:a9:a7:85:68:a7:f7:c2:b0:
                    b8:4c:b5:25:b9:2b:4a:55:9a:56:55:b1:4a:f7:ab:
                    ea:5d:cf:a1:a2:1f:81:22:ba:2b:2b:52:4c:f2:9d:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CA:2A:4B:32:D6:C5:B4:70:C4:F4:CC:C7:92:6F:A4:C2:93:4C:09
            X509v3 Authority Key Identifier:
                keyid:80:D3:55:0C:F7:3B:16:7B:6F:22:E2:00:47:A6:86:FB:2D:76:1E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/80D3550CF73B167B6F22E20047A686FB2D761E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80D3550CF73B167B6F22E20047A686FB2D761E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59DB3731A64C8815CC960DE790EC2C1484712B9C277C8DE9AB610B31AE75487F/0/34352e342e312e302f32342d3234203d3e20323635363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:a3:85:8f:52:f9:54:f5:d7:f7:e8:da:52:8f:59:5a:a2:c0:
         1d:b9:9d:c7:75:95:84:5c:7c:a8:08:69:95:80:d2:0c:3e:4e:
         c7:de:17:0b:e2:55:08:49:06:42:54:36:04:51:f2:a5:a6:91:
         42:66:be:c5:17:1e:5c:86:07:6b:cb:1c:44:78:d4:b2:aa:35:
         2f:e5:a3:ca:b3:d7:3f:5b:30:f1:2c:fd:d1:eb:a2:0c:67:98:
         d0:42:b4:5c:a8:3e:62:cc:dc:04:31:1d:05:bd:00:19:67:19:
         bf:ef:d2:67:83:15:5e:7b:5f:76:b6:f8:b2:f1:33:47:a3:11:
         f7:70:d3:97:35:1a:b5:40:3f:d6:03:d8:f0:08:02:04:13:dd:
         45:bb:1e:97:d5:35:ca:c4:96:96:8e:3a:d4:be:07:a9:d9:e4:
         3b:64:83:26:3f:c6:32:32:39:c4:35:d5:1d:ec:24:8e:87:63:
         8e:c7:e5:09:81:d4:ed:e0:f6:bf:c4:3e:b1:66:ad:c8:e4:d3:
         06:b2:a0:62:f6:ef:e6:34:7b:5e:bd:60:4b:8f:8f:78:1c:4c:
         c9:90:4b:ba:46:1b:0e:44:3a:51:6e:3b:fb:5c:ae:90:06:f7:
         28:0d:e4:0d:8a:08:27:45:7d:68:63:75:67:f7:1b:32:19:d2:
         28:b9:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:46 2025 by rpki-client