Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133342e302f32342d3234203d3e20323731383433.roa
File:                     34352e3136322e3133342e302f32342d3234203d3e20323731383433.roa (raw, json)
Hash identifier:          Lc97mJnhNLS3K21RkYWSnnX6UmCj12zPqcqSY7Q9VKI=
Subject key identifier:   1D:3C:AA:FC:95:E5:68:B1:C8:F1:74:BA:FF:FE:DF:08:50:FD:44:A1
Certificate issuer:       /CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
Certificate serial:       3F2541675C3325F7DFCDB6E008F3E24EC62A9EC8
Authority key identifier: E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133342e302f32342d3234203d3e20323731383433.roa
Signing time:             Tue 04 Feb 2025 18:48:49 +0000
ROA not before:           Tue 04 Feb 2025 18:43:49 +0000
ROA not after:            Tue 03 Feb 2026 18:48:49 +0000
asID:                     271843
IP address blocks:        45.162.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:25:41:67:5c:33:25:f7:df:cd:b6:e0:08:f3:e2:4e:c6:2a:9e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045
        Validity
            Not Before: Feb  4 18:43:49 2025 GMT
            Not After : Feb  3 18:48:49 2026 GMT
        Subject: CN=1D3CAAFC95E568B1C8F174BAFFFEDF0850FD44A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:b2:4d:d0:b7:dd:c5:4a:b4:7f:a7:0d:65:
                    72:d7:27:9d:52:c6:d3:d9:c8:c9:72:74:32:7c:67:
                    ee:2b:69:76:c5:72:6f:94:25:0b:a8:95:74:c2:f8:
                    37:ad:dd:53:86:c8:11:8b:dc:37:dc:d7:52:2a:28:
                    55:e8:ed:b1:75:8d:26:f1:c5:9a:a2:f1:20:cd:c8:
                    94:63:67:34:5f:d7:bc:88:f6:2c:12:d7:bc:f7:79:
                    d4:d8:ee:95:1e:ba:79:5a:49:bf:25:a4:04:a6:ff:
                    13:32:4e:cd:b3:7a:2f:53:fd:70:01:8e:4d:bf:70:
                    40:16:69:0e:bb:7e:2c:d7:e9:23:28:d7:50:5a:a1:
                    47:6f:7e:33:8f:11:b0:9e:08:07:b0:ab:ca:fc:95:
                    bd:89:4e:51:01:1c:7a:fc:19:9c:c6:27:cd:cf:bc:
                    26:bf:08:aa:5b:47:79:3d:80:6a:43:c8:7f:0a:0b:
                    76:34:3d:74:40:b1:f4:2e:98:4f:bd:f7:e1:c2:78:
                    70:17:6c:c6:d8:88:8d:f5:2b:2f:e0:99:fa:61:c8:
                    51:dd:1d:3a:e4:f6:d1:6c:fa:39:5a:ec:7a:f9:19:
                    10:e7:27:ae:3d:91:9b:b6:c4:2a:f8:31:9e:01:17:
                    ac:4f:e3:a1:59:f5:10:4e:3d:b9:f9:9e:88:79:11:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:AA:FC:95:E5:68:B1:C8:F1:74:BA:FF:FE:DF:08:50:FD:44:A1
            X509v3 Authority Key Identifier:
                keyid:E0:55:7D:76:2D:9B:F6:F3:F2:5F:DA:DD:CC:2E:ED:EA:21:1E:90:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0557D762D9BF6F3F25FDADDCC2EEDEA211E9045.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EBCD159B3CAED0BD208843A9F4E72551FB1DBF37D522C204511D232B3B9FDA/0/34352e3136322e3133342e302f32342d3234203d3e20323731383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:21:f4:0e:b4:68:06:d3:29:c4:24:b1:e3:10:dc:40:de:
         ba:67:d2:c0:6f:a2:27:c6:31:ec:8b:ba:84:ce:90:cd:6a:78:
         3d:cc:b3:f7:9c:d7:a6:83:68:b8:d0:b0:fe:64:0f:23:ee:c0:
         75:50:18:19:c9:d8:15:0b:bc:dc:40:5d:59:47:7a:06:fc:c3:
         c6:f4:33:c9:37:87:6c:46:10:d3:7e:8f:0a:a9:a4:20:15:b2:
         0f:22:8f:f1:07:e7:77:97:0e:1c:4f:9a:97:1b:85:44:5e:6a:
         f7:29:b7:46:4c:fa:06:55:ea:51:a5:fb:fa:61:a5:f9:f4:38:
         53:3c:3f:04:c2:81:7b:04:6d:42:90:fb:58:83:cf:70:45:93:
         2c:41:88:aa:2e:d6:89:d0:0e:93:7b:31:32:c1:bd:cf:06:bc:
         18:b7:36:c6:9d:03:4f:91:d0:a4:f3:0d:ad:17:26:24:20:3c:
         86:e5:42:8e:ed:bd:42:4c:73:41:3a:27:56:dc:9d:f1:37:31:
         22:08:3d:d0:aa:11:21:79:42:e7:68:8f:e7:bd:6c:fb:f2:22:
         24:41:39:ef:36:83:6e:4f:69:cc:08:fe:db:7e:38:1b:af:7c:
         56:79:1b:48:11:53:d8:4a:dc:cc:4b:f6:ce:0c:d3:e5:b3:ae:
         09:0a:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:12 2025 by rpki-client