Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32342d3234203d3e20323635363035.roa
File:                     34352e3138382e3136342e302f32342d3234203d3e20323635363035.roa (raw, json)
Hash identifier:          rE/CyVz2OoxABXQ6bSaivkMXK8LYMwKJTPCy4X5ADzw=
Subject key identifier:   1F:90:73:12:76:53:90:E3:89:F9:43:4C:0D:88:0C:27:E7:74:C0:B3
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       4845149983BEF6CCB922AF3D47D0A2F4EC4F6F5C
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32342d3234203d3e20323635363035.roa
Signing time:             Tue 04 Feb 2025 18:20:29 +0000
ROA not before:           Tue 04 Feb 2025 18:15:29 +0000
ROA not after:            Tue 03 Feb 2026 18:20:29 +0000
asID:                     265605
IP address blocks:        45.188.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:45:14:99:83:be:f6:cc:b9:22:af:3d:47:d0:a2:f4:ec:4f:6f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  4 18:15:29 2025 GMT
            Not After : Feb  3 18:20:29 2026 GMT
        Subject: CN=1F907312765390E389F9434C0D880C27E774C0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4c:56:d8:92:02:4e:3a:ff:a5:f4:0b:4f:67:
                    d2:c1:de:2b:6d:fa:5c:81:2e:8d:a9:6d:41:aa:c0:
                    51:49:fd:44:12:bb:39:5c:b2:96:ec:a7:dc:7d:a5:
                    dc:f4:40:f4:4a:60:4d:5e:cc:26:10:d4:dd:55:69:
                    fe:46:01:e2:7f:63:05:3a:97:b8:aa:98:20:bc:91:
                    99:e1:df:c6:fc:a1:ba:df:04:17:33:fc:b9:fe:01:
                    3f:2d:d5:e8:78:d7:c4:ea:62:e0:fa:4d:c1:c8:98:
                    e7:c5:ee:2c:f7:be:9c:5c:59:d0:06:a3:81:e8:b7:
                    0c:ff:89:d2:34:02:0c:ac:66:7f:18:13:9e:8e:27:
                    a2:f3:0c:8b:3c:0c:8f:67:bb:18:98:81:6c:35:98:
                    5d:59:71:a6:a2:24:7c:1f:7a:33:38:57:3b:d3:ac:
                    e1:74:3e:a4:e0:6f:2f:3a:da:a0:45:87:19:d1:b9:
                    dc:ac:fb:07:43:cb:f5:42:3e:6e:e1:59:89:7c:76:
                    77:72:1d:25:12:a0:28:15:3a:ce:2a:3f:05:ab:ce:
                    6e:7e:be:87:22:20:97:4f:12:89:50:c3:64:4d:06:
                    04:f1:28:3e:16:dc:8b:73:d7:92:ca:ab:76:49:04:
                    85:54:df:09:b2:f3:4b:b8:f3:1c:59:c2:8c:d2:96:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:73:12:76:53:90:E3:89:F9:43:4C:0D:88:0C:27:E7:74:C0:B3
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136342e302f32342d3234203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:16:8d:d6:04:19:1f:fb:d3:10:15:68:7d:c1:09:a6:6f:
         bf:b6:95:63:1f:d3:a8:72:df:35:7e:6b:77:4a:5b:b3:b5:4b:
         6d:c0:fe:06:d9:80:4e:58:08:12:a4:3c:c9:f7:7f:f0:e3:6c:
         22:cb:4e:aa:72:ed:5b:7f:b9:f3:c5:44:60:31:bf:85:7a:c8:
         2a:16:7f:57:b6:df:a4:90:00:43:ed:19:6d:ef:f0:60:78:3d:
         91:5d:cf:55:24:13:b0:64:d3:ae:7b:0e:90:39:1a:a4:bb:90:
         aa:4a:a0:71:e8:0e:22:0b:c2:8b:34:10:e3:66:32:2d:c3:1e:
         76:01:c5:5b:00:f3:56:35:9f:90:03:58:10:27:4e:7b:22:55:
         b4:4e:08:79:0b:1e:bd:23:50:ed:15:cf:bd:b1:4f:75:c7:bb:
         a4:2b:00:87:9d:40:16:d2:09:8b:f5:34:58:8f:bb:c9:89:87:
         7a:be:d0:c4:ba:e7:3b:4e:52:db:30:b0:f9:e2:a9:11:71:42:
         ed:06:b5:35:9c:25:12:94:c0:49:9a:42:eb:cb:43:b5:c8:81:
         5f:3d:47:2d:1e:67:1a:16:c0:28:55:b9:8f:0c:95:81:66:79:
         af:21:e8:e9:f9:47:89:ae:29:ef:a4:55:89:da:a7:62:7e:ae:
         19:ee:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:59 2025 by rpki-client