Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/34352e3138322e3138362e302f32332d3234203d3e20323639373537.roa
File:                     34352e3138322e3138362e302f32332d3234203d3e20323639373537.roa (raw, json)
Hash identifier:          Vu+EWf61PZ+4927NbWu0hlo2ors2I3Q8s6MWiiEVzKM=
Subject key identifier:   D1:2E:9F:D3:A2:21:CA:33:24:93:95:F7:A7:4F:4D:0C:F5:EE:4B:ED
Certificate issuer:       /CN=EA855D9931507E4E0EBD377A97305C5BA22DF8FB
Certificate serial:       3E8B787CDB70A924D3220873F4ED467E9F6538A4
Authority key identifier: EA:85:5D:99:31:50:7E:4E:0E:BD:37:7A:97:30:5C:5B:A2:2D:F8:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA855D9931507E4E0EBD377A97305C5BA22DF8FB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/34352e3138322e3138362e302f32332d3234203d3e20323639373537.roa
Signing time:             Tue 04 Feb 2025 18:02:00 +0000
ROA not before:           Tue 04 Feb 2025 17:57:00 +0000
ROA not after:            Tue 03 Feb 2026 18:02:00 +0000
asID:                     269757
IP address blocks:        45.182.186.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8b:78:7c:db:70:a9:24:d3:22:08:73:f4:ed:46:7e:9f:65:38:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA855D9931507E4E0EBD377A97305C5BA22DF8FB
        Validity
            Not Before: Feb  4 17:57:00 2025 GMT
            Not After : Feb  3 18:02:00 2026 GMT
        Subject: CN=D12E9FD3A221CA33249395F7A74F4D0CF5EE4BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:06:58:7a:13:02:83:63:2a:02:50:ca:b4:31:
                    ff:bc:25:92:7a:8c:71:d2:0b:68:d5:8d:6c:7a:4f:
                    73:a9:1c:c3:38:28:45:c9:e1:ef:af:b1:11:74:b1:
                    7b:71:40:82:9e:cd:3e:7b:c2:d8:0c:64:a2:c4:6f:
                    1a:99:f4:0c:4d:d4:5f:c1:fe:a2:a6:1f:97:24:84:
                    58:fc:71:12:da:74:ad:91:11:58:fb:cb:da:32:de:
                    80:cf:7b:49:df:71:87:a0:ca:a5:32:61:87:43:4f:
                    5d:6c:62:d3:7f:32:cc:ea:69:3a:48:08:a6:85:ad:
                    7e:51:95:dc:0a:c7:0d:9d:b0:b5:ef:e4:de:83:20:
                    73:b5:19:bc:a1:78:45:de:47:e2:4e:73:0b:e8:a3:
                    2f:07:52:00:46:5f:07:50:28:f8:aa:dc:90:a9:f0:
                    f3:e4:72:24:8b:f9:dc:73:25:d4:56:ac:45:b9:30:
                    15:6d:b8:23:1d:ae:ae:78:48:34:a2:25:9a:e5:6f:
                    37:fc:87:ac:69:42:c0:eb:0d:b3:b5:f4:1c:59:47:
                    68:95:84:80:d6:e5:76:a3:81:22:e9:57:7a:c3:f3:
                    2f:ff:de:8c:b9:b5:18:7a:ad:ce:a1:62:a8:45:24:
                    ff:88:0d:49:9f:3b:88:d6:75:01:44:65:cd:88:de:
                    15:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2E:9F:D3:A2:21:CA:33:24:93:95:F7:A7:4F:4D:0C:F5:EE:4B:ED
            X509v3 Authority Key Identifier:
                keyid:EA:85:5D:99:31:50:7E:4E:0E:BD:37:7A:97:30:5C:5B:A2:2D:F8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/EA855D9931507E4E0EBD377A97305C5BA22DF8FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA855D9931507E4E0EBD377A97305C5BA22DF8FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/60EA12844DF7570521B8417BDDA222A294DBB9A75BBB07ADCCFEBF6A504CE63B/0/34352e3138322e3138362e302f32332d3234203d3e20323639373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:41:71:ab:2c:61:06:3d:af:a0:ed:97:2f:91:27:a3:40:11:
         36:90:75:81:3d:35:bd:4e:82:39:f6:03:07:fc:14:cf:18:f1:
         a5:d9:e5:46:fd:df:d3:a9:6a:e7:9c:14:f0:67:1a:4e:f5:22:
         5d:33:c9:36:28:a3:04:4d:61:d8:9c:d6:47:f9:72:13:97:6a:
         16:7d:e1:9b:b6:8f:ca:f6:2f:18:9f:3c:33:89:45:09:9c:f6:
         95:c4:57:e2:aa:b3:ec:01:ce:f7:bc:65:9b:cf:b9:f1:47:e4:
         92:41:72:48:b2:a6:37:75:72:b9:67:ff:74:e2:70:e8:94:0f:
         81:f8:f7:3a:67:f3:71:a5:77:c8:d9:3d:4e:fc:58:7e:e1:ac:
         b1:17:f9:2b:ea:e0:9c:2d:f4:56:28:3c:3b:4b:5d:96:ee:ae:
         bc:82:2e:6f:94:c3:f4:6e:0f:2a:cf:05:7b:ab:e0:04:ee:41:
         3c:ee:d4:62:b7:a3:a4:38:b8:44:25:22:b8:74:7c:0a:c3:20:
         02:9c:03:37:51:59:51:a2:be:73:66:f1:a1:0e:b7:bd:2f:60:
         3d:57:97:10:1f:f2:62:94:3d:83:76:ac:e3:e7:e2:ff:52:c1:
         25:20:74:e2:d4:e8:b7:80:a8:b1:f7:c7:b1:d7:4d:83:c5:93:
         44:b5:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:51 2025 by rpki-client