Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa
File:                     34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa (raw, json)
Hash identifier:          fcQQVwgjwAK65rUiK+6ZAey9cVNaHcmhq1VrdQz9ANQ=
Subject key identifier:   FA:93:0F:16:BB:8F:BC:AF:89:4E:E6:63:08:FD:3C:1A:12:5C:3C:D0
Certificate issuer:       /CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
Certificate serial:       358C740B3654229AFF079E2B7375E46669679624
Authority key identifier: 87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa
Signing time:             Tue 04 Feb 2025 18:27:28 +0000
ROA not before:           Tue 04 Feb 2025 18:22:28 +0000
ROA not after:            Tue 03 Feb 2026 18:27:28 +0000
asID:                     266884
IP address blocks:        45.160.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8c:74:0b:36:54:22:9a:ff:07:9e:2b:73:75:e4:66:69:67:96:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87A91E98C90C25D18222E29A92C4DA9CA00DA421
        Validity
            Not Before: Feb  4 18:22:28 2025 GMT
            Not After : Feb  3 18:27:28 2026 GMT
        Subject: CN=FA930F16BB8FBCAF894EE66308FD3C1A125C3CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:66:ed:19:2b:82:d1:4d:8f:b7:89:28:d7:
                    4d:e7:b5:92:f3:73:73:21:ba:45:f6:11:70:91:cb:
                    fd:90:28:c5:63:41:b3:2a:40:01:e9:0b:f1:4f:63:
                    0d:d4:6a:44:c7:61:aa:24:c1:00:2a:73:b3:36:7d:
                    fb:3a:c0:98:4b:7e:2a:e0:c3:0e:2d:af:44:ea:b2:
                    23:30:99:d1:57:1c:44:31:de:d2:bd:39:09:17:bb:
                    9f:3f:af:af:01:0f:4d:54:c9:39:3e:ce:3e:3f:22:
                    a3:ab:eb:67:57:92:e4:96:25:09:b3:0e:52:46:6f:
                    fd:db:16:b3:e6:fc:76:bb:02:35:f1:71:b9:96:6f:
                    91:55:96:eb:1f:bb:cc:e6:87:63:aa:ec:dc:be:f2:
                    63:d4:1d:b7:37:69:f5:9d:1a:57:90:2c:02:78:59:
                    2d:3d:73:a1:ce:4c:a4:af:f6:27:14:0d:a8:c5:cf:
                    df:0c:3f:7a:34:a7:de:b1:4d:d7:11:35:4d:c0:03:
                    21:24:ae:35:f3:a1:55:60:37:52:e2:99:83:38:54:
                    38:07:47:13:7a:51:5c:35:3b:f4:b4:5b:c9:30:9e:
                    28:52:0f:84:25:6b:56:09:a3:99:75:18:b5:76:a7:
                    aa:e5:98:b5:9a:c9:09:18:b8:4c:7d:8a:90:c5:cd:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:0F:16:BB:8F:BC:AF:89:4E:E6:63:08:FD:3C:1A:12:5C:3C:D0
            X509v3 Authority Key Identifier:
                keyid:87:A9:1E:98:C9:0C:25:D1:82:22:E2:9A:92:C4:DA:9C:A0:0D:A4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87A91E98C90C25D18222E29A92C4DA9CA00DA421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E881F09924393A7B9D8997101B0AED377BBB8D61DD085719E3BA2F38E3737A9/0/34352e3136302e3230322e302f32342d3234203d3e20323636383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:41:83:29:d8:ed:f6:70:14:ea:52:38:cf:4a:bf:21:f6:c0:
         a9:71:38:f9:4f:35:d8:6d:58:08:ff:6b:ff:02:b7:e9:15:ee:
         17:10:63:bc:94:c9:9c:3c:eb:dd:c9:de:e4:dd:95:84:3c:d5:
         43:59:1c:cc:a9:21:f7:0f:f3:31:6a:3c:c5:97:63:57:04:22:
         9a:28:87:04:69:d6:4f:ba:db:a7:8c:45:3f:52:cb:f7:ff:b5:
         09:3a:d3:d0:29:b9:16:a3:82:6c:0c:da:aa:b7:63:cb:8b:62:
         de:3d:ee:b3:3c:01:68:49:8f:91:15:02:f3:7d:ef:2d:bb:6b:
         e4:17:74:cf:82:9a:45:b9:8a:a9:ba:54:f5:c9:29:32:32:f1:
         08:b7:2b:e5:ea:b8:f4:2e:92:95:5f:a7:90:6c:d4:57:cb:24:
         5c:eb:76:0a:b8:71:8c:19:01:9b:98:09:0c:c0:d2:1f:c4:7d:
         c8:c4:95:98:ef:5a:05:9c:ec:d8:28:8f:82:d3:ec:59:3d:c6:
         60:d2:1d:d7:68:77:fe:d9:16:1d:9c:f2:af:7b:2a:64:41:2b:
         28:6b:4b:20:40:27:2f:20:ef:67:65:74:28:05:d5:53:17:8b:
         c7:e5:15:f8:a9:58:22:fd:33:ff:a2:4c:80:c0:1a:cf:be:db:
         65:1e:b1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:00 2025 by rpki-client