Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa
File:                     34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa (raw, json)
Hash identifier:          LSJUx7LGRd1WZGtVnWkKP8/uHlbhmul4c9mNn5+q0uA=
Subject key identifier:   6A:EB:DB:C7:64:62:2B:32:38:2D:E7:EE:B5:A6:AA:9B:DC:B6:09:36
Certificate issuer:       /CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
Certificate serial:       251702C961B75DCF4A94F73F785F5FB7A4DE4D4E
Authority key identifier: E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa
Signing time:             Tue 04 Feb 2025 18:48:50 +0000
ROA not before:           Tue 04 Feb 2025 18:43:50 +0000
ROA not after:            Tue 03 Feb 2026 18:48:50 +0000
asID:                     271843
IP address blocks:        45.162.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:17:02:c9:61:b7:5d:cf:4a:94:f7:3f:78:5f:5f:b7:a4:de:4d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
        Validity
            Not Before: Feb  4 18:43:50 2025 GMT
            Not After : Feb  3 18:48:50 2026 GMT
        Subject: CN=6AEBDBC764622B32382DE7EEB5A6AA9BDCB60936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:a7:81:ec:28:0a:30:cd:b4:57:d6:5e:9a:
                    d1:a3:f9:09:71:9e:e4:59:80:c2:e0:c8:d4:8f:80:
                    bd:85:69:68:0f:f4:a2:0d:52:6c:c0:ba:4c:69:e4:
                    f4:ef:ce:37:a1:9d:08:95:22:94:73:5c:10:35:fe:
                    6f:d6:0a:9f:5b:62:12:28:fc:bd:34:83:b3:c2:be:
                    c1:aa:c9:c5:63:a7:2e:46:f5:a5:85:fc:b7:4b:54:
                    25:22:b0:41:d8:96:2d:d9:87:04:26:50:73:8f:77:
                    84:83:ae:ea:ee:6e:59:86:8a:c3:1e:d9:89:ad:0f:
                    f8:10:ce:9b:f6:df:3d:0c:33:64:45:72:76:f6:e5:
                    40:66:5b:51:cc:67:48:25:cb:27:c3:d6:5a:d1:9d:
                    67:d8:52:ab:70:64:e6:8f:70:ca:86:d0:78:8c:2c:
                    57:5b:ba:cf:bd:d9:20:0d:9e:4d:28:74:3f:bd:2e:
                    4b:ac:c3:e0:b7:03:28:1c:92:2e:43:cb:da:5a:48:
                    96:d7:da:31:3b:31:27:1e:07:d6:6a:0a:af:fc:77:
                    3b:1e:35:5c:f0:1c:2a:e3:79:1f:a4:4d:a1:fd:f6:
                    1f:0d:bd:d3:b0:89:21:a5:a4:fa:ba:f2:3f:6c:c5:
                    14:78:b2:b0:ae:f5:e2:7f:11:bf:43:e9:03:06:10:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EB:DB:C7:64:62:2B:32:38:2D:E7:EE:B5:A6:AA:9B:DC:B6:09:36
            X509v3 Authority Key Identifier:
                keyid:E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133332e302f32342d3234203d3e20323731383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:93:c3:c6:e8:62:bc:97:7a:d4:65:47:ed:28:72:3a:4e:1c:
         55:95:a2:b4:65:31:ef:d9:87:a8:49:3e:dd:f1:dd:44:ef:df:
         98:f9:96:d9:a2:19:85:49:14:29:2c:46:25:00:85:2e:e1:98:
         f2:c6:31:14:7a:74:78:90:1f:06:54:c4:40:87:09:40:2c:39:
         7d:39:37:9e:c7:50:24:fb:18:18:3e:f7:ed:b1:88:08:17:80:
         c1:41:eb:63:d8:bb:f7:ac:02:67:73:4a:9c:12:a9:3a:90:55:
         59:5e:c8:02:39:5c:f6:29:4a:9b:92:9e:5b:4f:df:a3:c9:e7:
         a9:34:ac:66:67:18:7d:a2:3e:15:15:4f:19:6c:bc:e3:40:db:
         20:b3:5e:c3:f5:a8:f0:07:1f:77:23:72:df:ad:5a:68:3a:93:
         27:d4:1d:8e:c4:bd:3d:a9:e5:d5:40:23:e6:2b:93:3b:83:47:
         26:b4:30:75:3a:91:4a:dc:9c:0e:18:6f:7e:6a:65:04:60:8b:
         ab:fa:c7:d0:16:fa:fb:9f:44:70:33:fb:18:d3:f7:23:60:b1:
         f0:c8:34:ea:dc:ce:87:9a:06:41:ae:b7:cf:b5:1e:78:43:ad:
         e2:d5:58:c7:34:b9:0f:4b:0c:1f:66:7a:03:04:c5:dd:9a:5b:
         b3:a0:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:14 2025 by rpki-client