Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31392e302f32342d3234203d3e20323634363139.roa
File:                     34352e3137322e31392e302f32342d3234203d3e20323634363139.roa (raw, json)
Hash identifier:          cdHeZiBJzDTgo5856Jb9k+uNAb/rnnyY7r1d32JYQ64=
Subject key identifier:   AA:F2:44:9D:63:B6:70:90:15:F1:0B:49:67:AC:F1:7F:A2:6E:C4:83
Certificate issuer:       /CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
Certificate serial:       6681AC4FDCE23A6939CDD78BF8853A4E04E2850C
Authority key identifier: C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31392e302f32342d3234203d3e20323634363139.roa
Signing time:             Tue 04 Feb 2025 20:05:03 +0000
ROA not before:           Tue 04 Feb 2025 20:00:03 +0000
ROA not after:            Tue 03 Feb 2026 20:05:03 +0000
asID:                     264619
IP address blocks:        45.172.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:81:ac:4f:dc:e2:3a:69:39:cd:d7:8b:f8:85:3a:4e:04:e2:85:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C71137D78DD5CBCAB50F867000F510F0B3587F9A
        Validity
            Not Before: Feb  4 20:00:03 2025 GMT
            Not After : Feb  3 20:05:03 2026 GMT
        Subject: CN=AAF2449D63B6709015F10B4967ACF17FA26EC483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ac:bd:01:ef:d7:53:54:0d:42:45:74:94:a7:
                    ce:3f:a4:cb:a9:e8:7e:de:37:99:89:bc:74:35:da:
                    a3:eb:37:2e:15:2b:7d:9a:33:b9:fe:76:c1:57:71:
                    47:5a:ec:a3:57:2b:a7:81:ef:77:cd:d1:4c:54:68:
                    7e:1a:e6:4a:f5:7b:4c:9d:84:69:33:2c:65:a8:a7:
                    25:65:dd:7f:c2:00:7f:be:9e:fe:3d:61:f8:cf:f8:
                    f5:f4:cf:6e:1b:f0:99:cf:68:b5:0e:44:04:70:25:
                    af:7a:c5:1b:c6:04:bd:eb:92:ae:72:31:b2:64:c8:
                    2f:5c:e0:bc:b9:23:b7:79:e7:fb:b9:80:57:83:c1:
                    cd:44:28:d1:81:67:11:ba:18:56:01:e4:96:18:c4:
                    9d:44:7c:a8:e6:3a:9e:87:66:54:c0:ad:0a:f6:41:
                    f1:51:3e:a5:48:a0:fa:08:bb:ca:d0:3c:4f:7c:e9:
                    60:83:57:18:49:23:93:ca:20:1a:f5:97:d2:93:78:
                    0c:88:4c:c3:46:39:97:92:eb:25:0c:c2:3c:33:00:
                    33:fb:a5:f1:24:d4:75:54:6e:d5:57:30:9a:6c:4a:
                    7e:6d:97:6e:d4:51:14:c9:58:cb:1c:29:03:10:f9:
                    95:cd:7d:68:e0:09:16:f2:01:65:e7:8f:ae:c1:dd:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:44:9D:63:B6:70:90:15:F1:0B:49:67:AC:F1:7F:A2:6E:C4:83
            X509v3 Authority Key Identifier:
                keyid:C7:11:37:D7:8D:D5:CB:CA:B5:0F:86:70:00:F5:10:F0:B3:58:7F:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C71137D78DD5CBCAB50F867000F510F0B3587F9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7D0F8891D78DAA1F8C582A7D8BB5DD24295B24E567453B8F0E2BDDAB224D8CA5/0/34352e3137322e31392e302f32342d3234203d3e20323634363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:4e:7e:e1:b9:00:e6:c9:2c:62:2e:df:f7:c6:22:b5:b8:46:
         9f:7c:11:35:d1:00:4a:c5:4e:de:2b:f9:98:4f:e3:52:4f:f2:
         84:64:34:d0:0c:9f:43:ae:53:0d:7c:06:f3:53:2a:ea:ce:42:
         e0:bd:e4:23:e6:f8:0d:9d:e2:da:ff:cc:d2:b1:49:5a:98:51:
         1c:ac:54:ad:ae:ba:ed:cb:01:e3:aa:80:ce:0a:27:88:64:43:
         88:b3:e2:ff:3e:da:d7:e8:fd:c7:31:11:67:a7:8c:3f:6c:42:
         a6:e1:30:de:4d:a9:5d:8b:c5:de:a2:52:aa:07:d7:7f:f3:b4:
         84:9a:00:8f:5b:c9:12:65:94:2b:74:0f:e0:a2:fb:be:07:71:
         3f:b0:51:96:60:4d:2d:8f:b1:c2:34:41:dd:af:b1:3a:5d:05:
         0d:25:b0:0a:93:35:c9:bd:38:11:6f:3c:6a:61:be:89:d1:e5:
         f9:32:9e:64:45:71:7e:8f:8e:6d:93:94:bb:5c:bd:f4:fe:60:
         8e:fd:7f:70:62:45:4e:70:d0:92:6d:32:83:33:cf:04:9e:33:
         a9:67:6e:61:02:07:28:9f:79:8f:b7:c6:fe:ed:65:15:9c:c7:
         e9:11:c5:be:5e:92:1e:a6:8d:1f:95:d4:a2:c2:ab:76:53:43:
         b4:2d:8a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:40 2025 by rpki-client