Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa
File:                     34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa (raw, json)
Hash identifier:          R8I0vq7xgTz7p2ysBjUWIpSdGg9ed1wmrwpojCn0oP0=
Subject key identifier:   09:BF:1B:95:B8:DE:65:4A:5B:68:F1:D3:A9:46:31:F0:56:41:9B:BE
Certificate issuer:       /CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
Certificate serial:       35A5DE4D67FD2A77624F499399F66B59FA3D4C45
Authority key identifier: 7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa
Signing time:             Tue 04 Feb 2025 18:20:27 +0000
ROA not before:           Tue 04 Feb 2025 18:15:27 +0000
ROA not after:            Tue 03 Feb 2026 18:20:27 +0000
asID:                     265605
IP address blocks:        45.188.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a5:de:4d:67:fd:2a:77:62:4f:49:93:99:f6:6b:59:fa:3d:4c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B8D1E41D1D8FC27FF1149A21AD707656C827936
        Validity
            Not Before: Feb  4 18:15:27 2025 GMT
            Not After : Feb  3 18:20:27 2026 GMT
        Subject: CN=09BF1B95B8DE654A5B68F1D3A94631F056419BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:12:e3:e9:13:5d:47:66:53:c9:de:d1:ae:
                    d2:de:0b:e2:ff:a9:d5:fd:cc:40:ab:02:ff:e4:fe:
                    0b:cc:6b:d5:6e:32:eb:b2:27:81:1c:22:e3:b2:4f:
                    3c:cd:0f:c3:a5:b1:9e:9b:05:31:03:53:88:84:5d:
                    4b:37:51:c3:1f:cb:40:9e:29:66:3b:c9:e6:a9:55:
                    c6:49:d2:43:36:94:00:23:e5:b4:2d:7d:d0:91:0f:
                    49:90:28:dc:92:6f:69:92:0f:09:72:0f:08:52:03:
                    f6:be:d6:6c:f9:8d:23:7e:bb:63:27:af:17:a3:0e:
                    e5:55:e1:b2:92:1a:0b:d2:c3:c4:3a:78:d5:a0:78:
                    11:b4:de:1c:b1:1a:c1:d1:63:21:4f:76:8c:3c:68:
                    44:56:f1:7f:e1:03:dd:af:16:4e:70:e0:69:41:9e:
                    ef:1c:ad:24:ea:09:96:f7:3e:74:20:53:03:47:aa:
                    61:00:bb:56:7b:b4:ab:67:96:cb:fc:a4:33:3c:8d:
                    d8:ab:2f:39:f0:10:94:db:78:dd:b3:7e:08:57:a9:
                    cd:29:dd:65:db:0f:20:f3:47:65:ad:91:96:58:1b:
                    b3:ec:b8:97:07:96:bd:53:87:ad:97:78:fd:06:ed:
                    45:56:a0:6f:63:12:bc:2d:8c:bf:5c:a1:ec:1c:4d:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BF:1B:95:B8:DE:65:4A:5B:68:F1:D3:A9:46:31:F0:56:41:9B:BE
            X509v3 Authority Key Identifier:
                keyid:7B:8D:1E:41:D1:D8:FC:27:FF:11:49:A2:1A:D7:07:65:6C:82:79:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B8D1E41D1D8FC27FF1149A21AD707656C827936.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/722022CBA6688BDBC0CCB34281CBB15A84D76B2CF5E2815DF7E9F14EE1662F70/0/34352e3138382e3136362e302f32342d3234203d3e20323635363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:45:93:63:8e:4f:62:1d:78:d2:2f:34:46:33:0e:2a:49:16:
         0c:a5:5b:08:7d:33:a7:4e:29:eb:80:8e:ec:03:47:1c:61:ce:
         25:f9:9a:18:9a:47:f5:f1:c7:94:62:bc:00:c6:c2:19:a4:9b:
         43:5f:ca:d1:e2:7b:84:61:f1:89:a1:e3:df:bc:d1:8a:69:53:
         52:6f:df:a1:a3:21:9b:e6:0f:a6:c3:5f:f8:6b:be:8b:91:02:
         db:c4:1b:b2:77:b2:18:8e:88:b7:49:3f:47:54:03:05:ef:ba:
         fd:4a:49:56:21:d8:62:7d:7d:de:c6:8b:4a:1a:d7:41:ed:64:
         97:3e:79:6b:01:ec:96:9a:9f:e2:65:4c:39:18:90:3f:2e:6e:
         2e:10:29:6b:76:f1:76:cb:7a:af:91:53:53:4a:ac:87:5f:2b:
         bc:14:31:f1:a5:a7:b8:80:13:fd:7a:e0:07:34:15:34:10:c8:
         d9:b8:6f:36:12:14:8e:09:aa:dc:83:ae:69:b5:db:63:7f:84:
         86:84:79:79:67:25:a3:ab:98:00:81:4a:82:8b:c8:64:98:a5:
         31:b3:e5:6a:24:23:c2:6d:26:e4:84:64:93:dd:09:43:81:c6:
         19:1b:1e:a0:ec:c3:30:0e:ff:8c:4d:79:4a:7f:74:af:bb:46:
         bc:f3:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:06:53 2025 by rpki-client