Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/34352e3138342e3135362e302f32322d3234203d3e20323639373934.roa
File:                     34352e3138342e3135362e302f32322d3234203d3e20323639373934.roa (raw, json)
Hash identifier:          8sVwKbcvhAkbwvsHl8Oe2UZtyNnXnmtpSmxi/sf5WOQ=
Subject key identifier:   4A:E8:DF:4C:31:BD:C3:69:18:43:AC:9F:41:98:83:65:89:25:A1:8D
Certificate issuer:       /CN=5443AD9524CE360F9B33C4BE7285C62CCC9E8F65
Certificate serial:       17A71A2B208EEE270EE3AB1F476479ECE3C41EF4
Authority key identifier: 54:43:AD:95:24:CE:36:0F:9B:33:C4:BE:72:85:C6:2C:CC:9E:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/34352e3138342e3135362e302f32322d3234203d3e20323639373934.roa
Signing time:             Tue 04 Feb 2025 18:30:49 +0000
ROA not before:           Tue 04 Feb 2025 18:25:49 +0000
ROA not after:            Tue 03 Feb 2026 18:30:49 +0000
asID:                     269794
IP address blocks:        45.184.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a7:1a:2b:20:8e:ee:27:0e:e3:ab:1f:47:64:79:ec:e3:c4:1e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5443AD9524CE360F9B33C4BE7285C62CCC9E8F65
        Validity
            Not Before: Feb  4 18:25:49 2025 GMT
            Not After : Feb  3 18:30:49 2026 GMT
        Subject: CN=4AE8DF4C31BDC3691843AC9F419883658925A18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:ff:4b:d8:e9:0e:d7:a0:4a:80:3e:d2:38:
                    e1:03:2e:73:9e:a3:f3:1a:24:34:d0:7f:61:20:cd:
                    7d:2a:2b:57:5e:4c:4f:0e:20:89:e0:9f:74:7b:90:
                    ae:95:1e:c8:d6:68:dd:6e:b3:a9:aa:63:90:3d:d2:
                    6b:ae:d5:cd:11:ad:eb:bd:ba:a9:b0:cb:10:00:32:
                    1f:35:2c:70:62:64:9f:79:b5:2c:80:c6:22:36:8d:
                    69:d3:86:bf:78:a5:83:83:4e:db:a3:b3:e1:3d:90:
                    c4:43:86:2a:ec:57:94:d9:55:7a:cc:65:d0:31:af:
                    f8:28:8a:25:c6:ee:4c:7c:9d:43:ce:bf:3e:e7:61:
                    06:83:b1:ef:97:19:87:ec:21:22:24:87:61:5c:93:
                    48:1f:8e:6c:e8:8a:8e:b9:56:94:36:a3:bf:b1:06:
                    0e:0f:64:d2:79:37:8e:63:8b:1c:03:50:53:8c:25:
                    80:6a:0d:54:dc:3e:47:74:ac:9d:d1:3e:e9:40:8d:
                    ce:ce:51:f9:e2:9e:81:57:15:be:20:e8:5b:71:f3:
                    28:47:14:ec:b6:ee:e9:ff:c8:69:05:75:9b:a6:b9:
                    0d:d7:ff:6f:a5:3b:ce:55:00:fe:bb:e9:3d:73:9e:
                    11:72:62:0a:b5:5b:68:1f:95:26:ab:93:6d:f9:87:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:DF:4C:31:BD:C3:69:18:43:AC:9F:41:98:83:65:89:25:A1:8D
            X509v3 Authority Key Identifier:
                keyid:54:43:AD:95:24:CE:36:0F:9B:33:C4:BE:72:85:C6:2C:CC:9E:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5443AD9524CE360F9B33C4BE7285C62CCC9E8F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62674DC29A839A80762D48C4CF6F8F2E42C55E1701859C29C6DD670D051BF3C7/0/34352e3138342e3135362e302f32322d3234203d3e20323639373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:37:0c:30:e9:a0:6b:14:fb:c2:85:80:bd:34:6b:2a:44:35:
         aa:f1:b7:68:0e:b0:3d:6d:49:1f:75:e7:ad:9b:85:31:8f:0e:
         b3:dc:a3:18:78:8a:fb:1d:8e:04:33:b1:1e:44:5f:b3:d8:0f:
         09:ca:5a:a6:a0:28:4a:e2:cc:21:d3:d6:49:da:96:f2:c5:72:
         a0:cc:1d:5b:ee:68:d4:cd:2c:2d:43:22:f4:e1:92:ec:76:f1:
         f2:97:be:31:6e:c3:24:b2:bf:ca:65:26:f2:98:f9:b2:70:fc:
         c9:1c:94:21:ea:2b:e7:42:49:1c:46:a7:88:5d:39:11:cf:08:
         50:7a:ba:96:7f:ee:24:d8:09:4c:36:16:ce:cb:60:67:39:28:
         c2:ce:bf:5f:e8:31:a2:33:5f:c1:b2:31:b7:a4:79:52:81:52:
         dd:bf:26:0a:87:f3:07:29:f3:fd:f5:3b:45:24:ab:23:12:53:
         d4:9a:86:88:05:74:c6:04:43:35:9d:7f:5e:c6:a2:ef:48:03:
         22:c9:c8:12:59:d0:50:a5:b8:3d:40:9f:f0:23:d7:c0:eb:c3:
         02:85:18:3c:05:da:e9:58:c3:7e:52:6d:f6:55:a0:d2:f2:23:
         99:5b:84:77:04:87:fe:45:88:b5:26:fb:78:f0:a8:18:1f:ef:
         51:1c:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:53 2025 by rpki-client