Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32342d3234203d3e20323639373832.roa
File:                     34352e3138342e3235302e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          BcPEh3eBWWOFRiDMMkNHsPjNCEW+4bQMavrEwsavWvQ=
Subject key identifier:   DB:49:BF:51:DF:5C:25:3C:08:F1:2D:D0:11:01:27:1E:50:44:FF:31
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       38C42801D0B6ED8CB895870303B854C078857F02
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32342d3234203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:52 +0000
ROA not before:           Tue 04 Feb 2025 18:10:52 +0000
ROA not after:            Tue 03 Feb 2026 18:15:52 +0000
asID:                     269782
IP address blocks:        45.184.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c4:28:01:d0:b6:ed:8c:b8:95:87:03:03:b8:54:c0:78:85:7f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:52 2025 GMT
            Not After : Feb  3 18:15:52 2026 GMT
        Subject: CN=DB49BF51DF5C253C08F12DD01101271E5044FF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5e:ca:e2:0a:e7:ba:7e:f1:21:16:f7:48:17:
                    15:b0:ba:de:a7:b0:08:ec:66:46:8b:e7:4f:b5:af:
                    6c:05:b2:b8:95:d4:89:e7:de:1a:42:85:9d:3e:f6:
                    f0:96:fb:94:b6:03:f1:53:65:56:61:e6:26:29:8e:
                    9f:82:b3:9a:37:64:21:46:5c:d6:da:05:9a:81:37:
                    2a:1a:d7:67:18:fe:54:51:e7:16:b4:ec:db:46:aa:
                    65:da:cc:92:2b:28:9f:3e:0d:b2:49:dd:b5:1c:b5:
                    ca:e1:a3:75:2f:c6:cc:70:f5:28:39:c3:15:f5:34:
                    bc:94:41:b4:30:34:ef:65:a7:74:c1:c3:72:57:06:
                    99:2e:e2:3b:c4:00:f7:10:2a:e4:76:6c:60:31:12:
                    8f:bd:fd:1e:d7:f7:69:34:cf:69:a9:7b:7b:82:19:
                    c8:07:f7:ad:53:4d:78:de:3d:2e:6f:0a:c9:99:33:
                    0a:e7:5e:22:9a:64:e8:f6:51:0b:4e:76:ea:f0:d4:
                    65:75:bf:e2:27:c8:0b:64:43:04:52:5c:99:0f:e8:
                    84:8e:6b:1b:8c:76:f3:ea:02:4b:69:11:aa:d6:fd:
                    e5:b5:74:0c:c1:8d:e6:28:2b:cd:79:75:10:5f:e3:
                    a5:b6:13:63:b7:20:28:6b:e7:6b:b6:ff:43:97:2f:
                    a9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:49:BF:51:DF:5C:25:3C:08:F1:2D:D0:11:01:27:1E:50:44:FF:31
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3235302e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:70:55:b3:d8:30:7c:53:ff:df:f9:49:8f:f4:fb:05:d2:
         fe:c3:87:f9:dd:4f:a0:79:69:89:e7:38:11:ee:07:4f:21:14:
         9f:74:d3:e6:65:a4:a5:92:64:5c:62:dd:9a:19:88:85:25:c1:
         6c:e3:b7:b2:c5:32:15:8a:17:04:20:6e:8a:31:e4:fd:04:d8:
         d0:3e:b6:79:10:bd:71:f3:0d:cc:c2:5d:9d:ab:65:26:5d:f7:
         a7:64:9f:4f:e9:7b:2b:93:c8:7a:70:b6:39:e0:79:c3:1a:48:
         54:02:78:3e:7a:c2:a2:65:a2:4d:96:7d:6e:7f:01:07:bd:92:
         21:18:8f:0e:10:16:fa:21:21:b4:be:31:d7:43:29:24:06:ef:
         79:65:31:3e:91:15:1a:e2:2d:d2:d3:38:1d:af:7d:12:11:84:
         2f:63:6e:15:bb:43:f3:8a:77:dc:46:31:8b:a7:ff:7c:92:dc:
         f1:f0:8c:68:67:19:91:30:50:66:68:2f:89:16:44:24:9e:1a:
         06:17:99:2b:d4:d4:09:13:b2:2d:1f:a9:fb:37:8e:a2:da:5e:
         1f:f1:e7:c3:44:0e:1f:c1:17:40:35:ea:e6:22:9f:1d:79:19:
         aa:fe:2f:7a:0a:60:13:b3:db:cc:ff:bc:c8:55:83:97:0c:d7:
         39:d9:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:55:05 2025 by rpki-client