Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa
File:                     34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa (raw, json)
Hash identifier:          5cYCUUgBQsmpRe7amADkVe2XO/kHZ/veFdLmxaeBUMU=
Subject key identifier:   53:0F:B6:4D:6F:46:C7:A0:DA:5A:0B:EE:37:51:AF:15:01:87:13:EA
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       3B05E61B85DEC3948ABAC9EC6AD391790AB04A60
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa
Signing time:             Tue 04 Feb 2025 18:21:50 +0000
ROA not before:           Tue 04 Feb 2025 18:16:50 +0000
ROA not after:            Tue 03 Feb 2026 18:21:50 +0000
asID:                     267919
IP address blocks:        45.179.203.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:05:e6:1b:85:de:c3:94:8a:ba:c9:ec:6a:d3:91:79:0a:b0:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Feb  4 18:16:50 2025 GMT
            Not After : Feb  3 18:21:50 2026 GMT
        Subject: CN=530FB64D6F46C7A0DA5A0BEE3751AF15018713EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:03:04:b5:64:1d:20:64:0d:45:4e:97:07:
                    3b:94:3c:4b:e5:fd:ff:12:bf:ef:26:92:3e:bc:01:
                    e5:75:69:de:40:8d:cc:3e:77:f6:8f:ca:43:aa:02:
                    b0:24:23:b1:42:a8:95:16:3c:cb:9a:e5:04:99:7a:
                    16:f5:c5:c0:f8:a8:e2:38:7d:80:a5:59:cb:7b:d0:
                    6a:c2:87:09:e0:e5:63:6d:a2:72:5e:3f:54:49:2f:
                    33:8a:02:2b:86:ae:93:f0:3a:47:9e:cb:b7:2e:6c:
                    25:9a:16:61:c3:8f:c7:84:33:82:89:75:90:66:ca:
                    79:88:d9:b1:b2:51:3f:84:10:b9:92:5f:b9:b1:4e:
                    b9:08:c4:28:b5:fc:0a:17:0d:8b:6d:71:c9:8f:12:
                    80:81:e7:5b:ed:2f:2d:84:d4:3d:ff:31:13:44:7f:
                    4b:f5:e2:76:f4:db:cd:85:3a:af:25:c9:46:89:e3:
                    5c:2a:a2:80:41:17:e6:47:36:04:ad:60:db:94:84:
                    6b:b9:61:30:8a:cc:9c:31:8b:ba:ea:29:ea:03:f3:
                    4b:2b:91:5b:03:dd:80:44:cd:f9:f4:7e:96:6a:06:
                    f7:ef:3f:c0:88:93:1f:a3:bc:29:57:01:67:18:67:
                    a0:aa:df:d7:65:1c:46:79:c7:85:fe:3a:e9:65:3b:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:B6:4D:6F:46:C7:A0:DA:5A:0B:EE:37:51:AF:15:01:87:13:EA
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230332e302f32342d3234203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:41:29:ff:d5:37:9b:6a:8d:7c:1a:86:61:2a:12:ee:18:
         9c:86:44:58:5f:35:b3:7a:46:7c:20:8c:4d:47:83:8e:38:5b:
         32:8c:d0:19:87:bd:56:33:45:22:1d:d9:e7:42:8c:f6:5f:b9:
         33:b8:40:12:0a:1d:c3:85:14:e9:7f:f3:46:a1:98:c6:32:a0:
         e3:f0:ed:b1:a3:2d:60:6c:7c:52:87:bb:fa:4a:70:28:39:84:
         b3:c2:a6:c3:67:07:f1:de:c1:63:fa:5b:0a:64:1c:dd:4c:be:
         d9:2f:a9:f1:5c:52:42:3d:80:2d:03:31:ea:18:65:0c:49:6a:
         d0:f7:7f:de:37:0e:6b:49:68:9d:99:60:8b:df:df:13:42:50:
         e6:16:cb:c2:ce:97:6f:2a:3f:e5:15:77:e2:84:7d:dc:5c:11:
         2e:30:5f:21:a4:ed:48:3e:f0:03:8a:60:fe:17:32:6f:2e:ff:
         61:cc:65:d2:b1:10:ab:d6:36:b9:a2:9b:02:05:d9:4b:17:f1:
         87:e1:fd:73:e0:1e:9c:1a:61:d4:43:08:8c:97:47:52:c0:5a:
         d9:cc:22:31:17:20:16:38:32:d8:04:d1:e9:96:5b:af:58:25:
         17:9a:02:1b:ac:16:43:e6:52:93:1b:1d:10:61:4c:a3:b8:a3:
         e1:e9:dc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:28:12 2025 by rpki-client