Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa
File:                     34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa (raw, json)
Hash identifier:          Pqfmlry/NR+VN4+r1siQAd73iLJVw/zrroYkk0Zyafc=
Subject key identifier:   6D:39:26:DE:51:80:F2:C5:8F:01:77:A4:68:DA:3C:DD:C9:DB:DA:86
Certificate issuer:       /CN=C097077D00F9B394156695ADC73EFDCF74721DB1
Certificate serial:       6CF1CC6ECC8C13E87F8ACA5DBB841ADFDAF9834C
Authority key identifier: C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa
Signing time:             Tue 04 Feb 2025 18:26:31 +0000
ROA not before:           Tue 04 Feb 2025 18:21:31 +0000
ROA not after:            Tue 03 Feb 2026 18:26:31 +0000
asID:                     266765
IP address blocks:        45.234.224.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f1:cc:6e:cc:8c:13:e8:7f:8a:ca:5d:bb:84:1a:df:da:f9:83:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C097077D00F9B394156695ADC73EFDCF74721DB1
        Validity
            Not Before: Feb  4 18:21:31 2025 GMT
            Not After : Feb  3 18:26:31 2026 GMT
        Subject: CN=6D3926DE5180F2C58F0177A468DA3CDDC9DBDA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:b9:da:9b:a7:f7:4c:e1:f8:b2:33:96:98:
                    f8:b0:39:9f:91:3f:df:5a:87:3e:63:c8:ab:f2:28:
                    d3:c0:4a:38:7e:c4:ac:cd:d8:c3:aa:89:e0:85:a0:
                    21:a5:c2:37:10:a8:ff:a5:69:da:e9:2a:d5:e4:59:
                    bf:e0:76:11:1f:ea:9a:bf:7d:2f:92:d4:33:50:85:
                    57:4c:40:b5:72:f0:20:d5:fb:c7:0b:e2:ba:6a:c1:
                    de:8e:50:cf:0e:f2:e9:5b:21:7b:bf:71:46:21:f0:
                    c2:67:a3:a3:d2:f5:8e:cc:b5:22:49:96:9e:b5:a1:
                    00:95:d9:86:8b:d6:be:dd:74:3f:9b:2b:a5:7a:73:
                    31:db:75:63:81:c0:ec:83:4c:ae:31:e6:84:39:76:
                    0a:99:34:a2:f7:eb:9c:09:b7:dd:d4:1b:8f:97:07:
                    71:9b:1d:46:78:2a:f6:16:d8:32:70:76:19:f0:bd:
                    42:e7:6e:e8:60:d8:c8:89:93:99:72:9a:dd:c1:aa:
                    57:c6:e2:d4:dc:3a:c9:c3:85:b6:7b:64:5e:a6:37:
                    0a:e7:d6:a2:61:25:af:26:b8:2c:84:64:1d:67:99:
                    96:e5:cc:c5:68:99:bd:b7:fe:d4:98:cb:0c:9c:6f:
                    e1:aa:6e:e0:a4:28:f5:5e:46:cd:f3:2e:f1:47:de:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:39:26:DE:51:80:F2:C5:8F:01:77:A4:68:DA:3C:DD:C9:DB:DA:86
            X509v3 Authority Key Identifier:
                keyid:C0:97:07:7D:00:F9:B3:94:15:66:95:AD:C7:3E:FD:CF:74:72:1D:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/C097077D00F9B394156695ADC73EFDCF74721DB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C097077D00F9B394156695ADC73EFDCF74721DB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BC6142BB1ABE279DDB1A84DC4371A301A1329848C31986B1F86C9B1228436B9/0/34352e3233342e3232342e302f32322d3232203d3e20323636373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:67:e3:c6:91:74:64:f7:01:81:07:35:8e:bd:c7:be:45:14:
         90:0c:02:88:0c:70:0e:e9:e8:f3:35:41:1c:eb:1e:85:b5:b9:
         e3:ef:1c:c9:78:82:e0:68:b7:19:48:0f:26:b2:07:19:e2:36:
         6e:8c:8a:0d:f9:fc:93:57:a9:38:89:72:1a:e5:b5:d3:e8:8e:
         87:2a:55:4f:c3:15:70:71:20:3c:a4:e7:52:4a:22:82:81:27:
         c1:1e:4f:7d:e1:da:4c:65:c6:cd:68:fc:44:a2:63:6b:b3:7d:
         a8:80:86:55:dd:6e:cb:ae:3f:e4:2a:5b:14:3a:62:a0:d4:bd:
         89:89:a0:ce:2b:d5:59:87:04:da:98:81:6f:65:a4:ce:ea:28:
         47:7d:70:e3:bf:66:cb:14:a6:f4:95:8c:2f:48:e9:0d:31:11:
         46:9e:95:17:c2:3a:82:be:b9:54:d1:48:45:9f:15:eb:ad:3a:
         14:e7:19:94:0d:05:c5:2f:23:6a:9e:57:78:e7:ac:30:b9:cb:
         29:1c:25:ea:b4:0c:7b:7a:67:8f:a3:0b:30:f7:ed:26:e9:c1:
         dc:31:de:6e:ea:49:44:c4:5a:e8:5f:d2:67:48:1c:29:72:34:
         40:f6:2c:a2:37:5e:00:d9:f4:aa:75:7b:e1:bb:ba:18:ad:c1:
         84:f7:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:27:50 2025 by rpki-client