Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa
File:                     34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa (raw, json)
Hash identifier:          r4eYMPaGDK5ST3tu0a1OzPOrlYG5fo7lba0q8ta+JpY=
Subject key identifier:   55:7E:0D:00:2E:83:93:20:DB:76:15:CE:62:96:46:94:30:CC:BC:DE
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       16B3CB9C39CEA5DD66DB2AD259709146C388076D
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:49 +0000
ROA not before:           Tue 04 Feb 2025 18:10:49 +0000
ROA not after:            Tue 03 Feb 2026 18:15:49 +0000
asID:                     269782
IP address blocks:        45.184.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b3:cb:9c:39:ce:a5:dd:66:db:2a:d2:59:70:91:46:c3:88:07:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:49 2025 GMT
            Not After : Feb  3 18:15:49 2026 GMT
        Subject: CN=557E0D002E839320DB7615CE6296469430CCBCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:35:06:07:76:03:92:6f:92:a8:a4:85:c9:bb:
                    e9:64:4a:2a:06:10:bc:c3:4d:11:c3:ff:cb:8a:49:
                    84:7e:4a:28:88:6b:41:4b:8c:a8:fc:ff:b9:27:f0:
                    16:47:31:0b:57:ff:cc:19:1e:32:c3:d0:3c:0a:9d:
                    97:47:8b:a1:43:8d:4c:77:44:cb:18:f5:64:06:19:
                    8d:ce:9c:aa:c7:2a:a6:f5:f6:14:b1:2f:e1:01:be:
                    e1:ea:b0:b3:5d:91:d2:de:f6:31:d8:dd:87:d2:dc:
                    ff:56:55:ea:34:d1:77:53:35:21:e5:d4:f4:6b:77:
                    7e:8b:ac:56:3b:e1:c5:a4:f6:51:06:f4:eb:d8:ec:
                    11:02:73:ae:74:5d:32:e9:d9:42:f1:69:08:79:79:
                    a0:31:ab:df:66:8e:4a:2a:6d:be:37:c0:fb:6f:a1:
                    bd:0b:9d:ec:7f:ac:28:9e:91:98:af:7a:9c:30:6d:
                    e6:0c:38:0c:ac:79:9b:17:fb:2f:c9:bb:8c:95:d0:
                    c5:a8:c5:8d:3e:c3:2a:bc:fa:94:f6:74:de:4b:fc:
                    71:dd:e2:2e:d6:19:15:2a:c6:c7:71:16:50:61:69:
                    a3:a8:81:45:a6:81:26:03:d6:9e:ab:45:f9:a6:8e:
                    83:4c:d3:48:3a:60:8d:3c:78:1d:a0:04:65:4d:f5:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7E:0D:00:2E:83:93:20:DB:76:15:CE:62:96:46:94:30:CC:BC:DE
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32332d3233203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:54:f9:f8:ff:ff:87:59:fa:1e:02:6e:6c:de:54:28:f3:52:
         c2:fd:06:c6:e6:65:a7:7d:9a:5b:03:89:df:01:1e:b7:08:73:
         1b:e2:7a:ee:3c:d7:72:b4:5a:d9:62:6a:ee:7c:f7:9a:8c:fb:
         74:a1:68:8f:79:02:d8:91:14:f1:04:7c:67:50:d4:93:7c:5a:
         2b:9c:77:3c:c3:3c:f4:71:f6:49:c9:4d:bc:d7:8d:c4:10:45:
         6d:6c:5a:1c:c1:02:f7:9e:9d:36:26:0f:bd:7f:98:9a:aa:a9:
         db:1f:2a:ef:c8:c0:af:c0:8c:39:a0:b3:9b:7e:08:3b:e6:d8:
         7b:3e:ff:3f:ec:0f:93:a2:f3:cf:9f:08:a9:0b:1f:c1:61:60:
         84:39:8b:23:3b:27:c9:64:78:29:e7:e5:b3:47:16:0d:27:80:
         d2:eb:0f:62:96:4f:17:48:fc:15:4a:72:4c:79:a3:eb:bf:80:
         10:9d:f8:0f:b1:ec:19:da:f5:7d:eb:34:c8:f7:7c:3f:91:8f:
         fe:c8:c3:4c:8a:34:49:96:43:14:5b:f9:b6:22:75:88:ef:0d:
         e0:63:4d:97:70:12:9d:04:42:8c:1d:c9:5b:9c:c5:65:85:85:
         21:bf:43:32:88:78:cc:c9:55:42:70:7b:61:9c:3f:67:3e:3a:
         8c:b0:f3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:38 2025 by rpki-client