Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa
File:                     34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa (raw, json)
Hash identifier:          7nH0gF/3qIU4z+8N2hbea51io2XFtqBxs1/Fn9S5wm8=
Subject key identifier:   5D:FE:85:14:87:28:41:35:B6:25:CB:58:E6:C8:72:38:0D:4C:70:BF
Certificate issuer:       /CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
Certificate serial:       496173AB027134F874AC020F441E8567FC290FF2
Authority key identifier: 09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa
Signing time:             Tue 04 Feb 2025 18:31:02 +0000
ROA not before:           Tue 04 Feb 2025 18:26:02 +0000
ROA not after:            Tue 03 Feb 2026 18:31:02 +0000
asID:                     267900
IP address blocks:        45.178.192.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:61:73:ab:02:71:34:f8:74:ac:02:0f:44:1e:85:67:fc:29:0f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0918EDFA09C0F51BF9F8F32C7D833032AED84DC7
        Validity
            Not Before: Feb  4 18:26:02 2025 GMT
            Not After : Feb  3 18:31:02 2026 GMT
        Subject: CN=5DFE851487284135B625CB58E6C872380D4C70BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:1b:b2:c1:e9:9a:6d:4a:8f:a9:0e:13:00:
                    95:ff:c6:89:12:d4:b2:d9:1e:3e:00:b7:0e:b6:a8:
                    45:e7:2a:14:84:be:09:94:00:75:e5:7c:fc:fb:93:
                    3c:b9:d7:97:36:df:b7:f3:d4:82:33:0c:1a:8e:be:
                    ca:f3:af:4d:98:e7:33:c5:a1:05:6f:c1:29:52:f3:
                    4a:b4:58:f9:9c:26:d9:6b:9b:f4:ad:6b:27:cb:fb:
                    51:0d:d5:1a:9d:17:76:8a:31:a5:1d:07:f6:20:ed:
                    90:1f:a6:c8:44:7a:6a:31:9e:9f:1e:4b:3e:66:af:
                    1f:f6:b7:b2:29:18:64:c9:2f:ef:0b:c5:0f:20:f0:
                    0c:31:08:c3:2e:29:81:f9:08:c3:45:d7:96:a7:83:
                    c6:86:f7:4d:89:d7:cf:94:22:a2:47:be:9e:31:be:
                    24:4c:01:77:d6:8b:6e:6c:73:6b:1e:82:26:3c:79:
                    53:17:58:16:7b:6c:b6:41:38:c2:e9:ce:a0:94:14:
                    48:21:7b:3a:de:39:c4:18:1d:ae:47:c5:8e:4d:bc:
                    76:2a:8e:a8:a8:43:b3:f6:41:d1:ed:34:a9:3c:28:
                    4b:4a:4d:c2:3c:99:13:41:65:97:66:3c:37:f4:11:
                    40:ac:72:32:57:8d:5c:40:5a:4f:d5:78:34:6e:6c:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FE:85:14:87:28:41:35:B6:25:CB:58:E6:C8:72:38:0D:4C:70:BF
            X509v3 Authority Key Identifier:
                keyid:09:18:ED:FA:09:C0:F5:1B:F9:F8:F3:2C:7D:83:30:32:AE:D8:4D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0918EDFA09C0F51BF9F8F32C7D833032AED84DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/766506B0E1BE55793114D7A55CE065B3F144AACB131F6E44522A772A199DA6B9/0/34352e3137382e3139322e302f32322d3234203d3e20323637393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:7d:8f:73:4b:c9:c7:58:9a:68:01:ad:98:ec:6f:98:52:0f:
         03:b4:0b:37:a2:db:50:29:7b:97:ba:37:cc:7c:ee:9b:4c:91:
         6f:81:a7:2a:9f:e5:d2:b9:91:b7:00:5a:c6:fb:54:53:25:82:
         2e:95:ff:a0:68:94:d3:37:60:01:91:ef:e8:98:52:ab:1b:f9:
         7f:b9:e6:8b:80:53:a3:ca:ca:12:29:b8:25:a4:40:b0:01:5c:
         95:d4:0a:4f:34:49:25:ad:b7:c7:00:de:22:54:e3:db:21:8d:
         5b:c4:ab:fe:92:aa:f7:22:3a:c3:1a:b4:fe:3a:6a:b2:9a:9d:
         bc:20:65:1e:7c:85:70:c0:fe:8e:86:89:6f:9a:0a:17:a1:5e:
         0c:02:97:b7:98:0c:ab:83:52:9e:58:cb:54:2f:8f:78:a0:25:
         41:22:38:ef:09:96:06:f9:18:0f:c8:90:18:a3:f0:a7:48:b3:
         35:82:37:db:0e:25:09:8d:a2:82:43:80:b1:5d:2b:fc:51:13:
         8f:0f:0f:e1:f5:6f:02:1c:3c:51:f8:00:34:b7:df:7e:58:4c:
         f1:d7:70:95:30:e6:95:94:65:d5:b3:f4:de:29:7b:b2:0c:25:
         d5:dd:d7:08:7f:84:a9:29:b2:c7:3e:5a:bc:5f:b0:e1:f7:b8:
         9f:89:f9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:25 2025 by rpki-client