Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138302e302f32322d3234203d3e20323636383630.roa
File:                     34352e3233382e3138302e302f32322d3234203d3e20323636383630.roa (raw, json)
Hash identifier:          HdNCTw5lHvatgaDwX1+r5OfWxfh2csBdTHmWfACsqKE=
Subject key identifier:   06:6F:49:B4:E1:3A:7F:F5:C0:94:0A:16:3B:7E:0F:7F:BD:E7:EF:7F
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       501101ED82488FB9F6E1B043C67DA60F2E865F2A
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138302e302f32322d3234203d3e20323636383630.roa
Signing time:             Tue 04 Feb 2025 18:49:15 +0000
ROA not before:           Tue 04 Feb 2025 18:44:15 +0000
ROA not after:            Tue 03 Feb 2026 18:49:15 +0000
asID:                     266860
IP address blocks:        45.238.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:11:01:ed:82:48:8f:b9:f6:e1:b0:43:c6:7d:a6:0f:2e:86:5f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Feb  4 18:44:15 2025 GMT
            Not After : Feb  3 18:49:15 2026 GMT
        Subject: CN=066F49B4E13A7FF5C0940A163B7E0F7FBDE7EF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:41:15:3b:5f:20:5a:b3:72:63:99:d2:e4:
                    69:e5:5f:bc:81:7b:c8:f5:8b:e4:37:52:04:97:60:
                    d2:51:63:82:81:aa:5f:25:d0:dc:5f:ce:85:88:7e:
                    13:96:af:db:33:23:dc:c2:92:02:ab:08:75:f8:e4:
                    13:8c:78:16:ac:c8:8b:66:6d:ca:35:dc:16:17:0b:
                    fc:3b:47:9c:86:24:b1:3f:a4:5e:5d:3f:90:85:d7:
                    e0:c4:13:a6:fe:f3:fe:9f:f1:5e:25:52:ef:a5:48:
                    ce:f1:d2:ef:14:1a:38:b4:b2:58:84:76:bb:fb:ab:
                    4d:d2:62:f7:6a:91:5b:a4:bf:64:c6:be:41:0f:ad:
                    d3:bb:4a:0e:dd:8c:12:c6:63:91:68:f8:a2:29:0a:
                    92:83:37:6f:0c:e4:3e:09:13:73:4b:5e:8c:59:23:
                    19:1f:3b:13:24:d5:6a:af:2e:32:45:1d:c8:3d:c6:
                    87:78:eb:1d:cf:11:5a:7c:85:c2:24:4d:de:58:81:
                    56:27:75:2f:c4:a8:68:19:d8:c7:1b:50:5e:29:d6:
                    a3:3f:29:18:5b:8a:ac:65:3c:bb:82:9a:60:8c:9b:
                    c8:bf:ba:91:81:46:08:fd:f8:f0:d2:f0:a2:d2:f7:
                    ab:9b:6c:64:eb:be:e8:d7:91:f9:40:f3:f3:81:7b:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:49:B4:E1:3A:7F:F5:C0:94:0A:16:3B:7E:0F:7F:BD:E7:EF:7F
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/34352e3233382e3138302e302f32322d3234203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:48:63:98:ca:27:5c:42:2b:ff:87:16:09:c1:98:49:ac:
         23:4f:70:06:6b:7f:f0:ce:da:d1:0c:00:55:de:08:75:4c:a8:
         87:85:bb:09:75:67:58:7b:d7:8d:c2:d3:3b:01:4d:c3:8d:f9:
         25:db:9b:bf:7f:7a:60:43:b8:15:78:4d:8d:b1:c8:f0:1e:4c:
         67:f2:c9:1e:cb:3c:7c:28:9a:0f:cf:61:04:a3:88:9e:ec:b4:
         16:8f:33:a5:10:5f:39:a2:e5:4e:c0:37:77:cc:2f:3f:e6:6c:
         48:9e:8b:a6:b4:f7:c9:58:aa:58:6b:b7:49:e3:11:c4:c1:b0:
         34:7c:12:d6:60:b8:f4:66:cd:5c:cd:ed:a8:69:cf:ee:6a:14:
         a2:00:fb:42:42:20:0f:f7:6d:34:d0:17:da:78:d7:f6:de:0e:
         e3:d0:60:24:c8:08:07:86:88:d3:c4:74:ef:81:ec:ff:a8:c9:
         f6:01:b2:c7:46:43:7b:9f:2b:ba:37:69:9e:3c:24:a0:cc:4e:
         11:59:79:2b:a3:07:0c:67:2a:e3:2b:2c:6c:d6:a9:bf:89:0b:
         63:45:c0:b7:e5:5a:3c:f8:39:e0:a4:c9:d1:12:31:06:81:25:
         d7:83:99:15:71:a4:b8:ca:3a:c4:78:61:3d:73:fe:1f:09:af:
         19:b9:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client