Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa
File:                     34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa (raw, json)
Hash identifier:          rHmhOvBs9z67Itk9kWHAIPH1NsHhHggYArS/lsvdEvI=
Subject key identifier:   FB:35:ED:E8:D9:B3:89:13:FF:12:35:92:9F:D2:B3:C5:44:AD:0A:8C
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       2EB157ADB0AA87D30977E69E5677F72069653F3F
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa
Signing time:             Tue 04 Feb 2025 19:59:33 +0000
ROA not before:           Tue 04 Feb 2025 19:54:33 +0000
ROA not after:            Tue 03 Feb 2026 19:59:33 +0000
asID:                     269848
IP address blocks:        45.182.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:57:ad:b0:aa:87:d3:09:77:e6:9e:56:77:f7:20:69:65:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Feb  4 19:54:33 2025 GMT
            Not After : Feb  3 19:59:33 2026 GMT
        Subject: CN=FB35EDE8D9B38913FF1235929FD2B3C544AD0A8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:49:84:ae:91:95:df:d9:1d:49:54:32:f5:95:
                    e8:3b:95:df:dc:66:74:69:16:c2:36:84:34:ce:d4:
                    d8:64:f0:d1:7f:3e:8b:73:d8:d8:28:9e:ac:fd:53:
                    6a:3e:a8:5c:db:8a:78:4b:4f:1a:ca:b7:b0:b9:a9:
                    4f:42:d6:6e:eb:2c:5a:7b:a2:41:2f:f0:07:56:59:
                    ed:c6:13:dc:71:9b:2b:d5:e4:58:83:92:ce:36:ca:
                    4c:fc:d8:5c:eb:0a:d3:2e:c3:2a:18:c7:90:d7:e2:
                    e2:31:ff:cd:4f:1f:69:53:d2:ac:01:be:55:e9:f0:
                    90:7d:96:46:95:a7:ef:ca:0b:bf:28:16:b8:6c:e2:
                    30:2b:34:82:a7:21:da:a6:1a:1e:c8:b7:bc:19:b4:
                    9b:8e:eb:9f:5b:0e:2e:06:dc:13:bf:70:66:e1:05:
                    da:6e:53:af:b7:0f:5e:76:4a:d4:eb:f0:d5:34:51:
                    6f:eb:10:86:4e:25:f2:f5:70:00:7d:32:6b:4e:df:
                    ad:2b:ba:46:43:82:3b:b9:fd:c6:2d:df:80:b2:01:
                    05:c7:0a:3a:20:03:75:35:f5:68:4b:8c:ee:7f:2f:
                    86:aa:98:0a:f6:08:26:12:a8:26:8c:75:52:59:d6:
                    43:86:1a:b8:68:df:48:a1:9f:df:7b:1c:ff:cc:70:
                    a4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:35:ED:E8:D9:B3:89:13:FF:12:35:92:9F:D2:B3:C5:44:AD:0A:8C
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/34352e3138322e3131372e302f32342d3234203d3e20323639383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5a:51:44:b6:2f:9d:1f:ae:c6:fa:99:a2:6f:96:74:2b:e9:
         ac:a5:4e:db:1c:9e:80:11:13:5c:d3:fe:fa:a9:a8:b9:8f:75:
         46:ea:96:98:e7:a9:03:12:36:75:c1:f7:ec:43:a1:a2:bc:51:
         0e:56:b4:60:78:e7:9d:ea:4a:ca:45:f6:84:87:05:f6:dd:6d:
         5c:e1:65:49:1b:77:c5:be:f9:5a:e0:cb:3f:8f:ba:a5:c8:ec:
         d5:83:6a:ca:ab:1c:0e:26:2c:64:72:37:00:56:55:4c:cd:07:
         ac:17:cc:69:ae:fe:c2:81:22:21:5b:b6:46:7d:7d:9d:28:ff:
         26:6d:1a:08:af:53:f4:5a:16:53:bd:b1:25:4e:06:67:30:f1:
         4d:10:2f:8e:5a:08:13:26:b4:ff:29:0c:da:4e:f8:2d:bf:e5:
         73:9e:09:6c:92:53:8b:77:70:43:95:d6:ad:47:b9:a6:8c:e1:
         93:39:9f:43:d1:6f:45:88:0f:a7:cb:36:f0:4b:f9:04:17:6c:
         fe:61:4b:c2:78:f7:d4:f7:35:28:64:16:68:12:60:9e:ea:f4:
         b7:43:88:c6:61:b6:67:d2:0f:22:57:b0:dc:3d:82:cb:69:9a:
         e5:7c:df:93:93:f9:67:1c:65:a4:7c:05:6a:a7:2d:8b:fc:78:
         28:0d:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:56 2025 by rpki-client