Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32322d3234203d3e20323731393333.roa
File:                     34352e37302e31322e302f32322d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          O5++wbwgyknZQ+Qo5pfxUL3bDRK3pVLfYxG5eIwbo/M=
Subject key identifier:   A6:71:50:9E:7D:E4:C0:18:11:B7:28:BD:CC:1F:EA:7D:48:1A:E2:83
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       63E1D00102C25E18907CAB5A0B65AEACD9BD5884
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32322d3234203d3e20323731393333.roa
Signing time:             Tue 04 Feb 2025 18:07:53 +0000
ROA not before:           Tue 04 Feb 2025 18:02:53 +0000
ROA not after:            Tue 03 Feb 2026 18:07:53 +0000
asID:                     271933
IP address blocks:        45.70.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e1:d0:01:02:c2:5e:18:90:7c:ab:5a:0b:65:ae:ac:d9:bd:58:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Feb  4 18:02:53 2025 GMT
            Not After : Feb  3 18:07:53 2026 GMT
        Subject: CN=A671509E7DE4C01811B728BDCC1FEA7D481AE283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b7:c2:5b:4b:20:07:02:9f:b0:61:e5:89:e0:
                    23:01:e0:97:6e:e4:1c:27:3f:31:e0:83:59:1a:e1:
                    e2:0b:93:76:ea:92:5e:93:32:6d:d1:5d:9e:2b:31:
                    65:4f:87:2b:64:3e:6b:a6:4a:b8:a3:0a:d1:df:68:
                    25:32:77:80:d7:b7:94:ec:69:3f:76:e0:9d:3f:ef:
                    06:03:34:46:53:cd:59:8e:48:4c:45:29:92:81:df:
                    a3:6c:53:9e:7b:34:ce:1e:8a:4b:03:06:0e:0c:82:
                    56:4a:8e:14:45:4e:73:d5:47:fc:b9:8a:ca:19:f0:
                    fb:ca:e2:e9:ba:be:8e:a6:a4:7b:8f:c9:a9:32:dd:
                    08:c6:e6:ba:ea:f7:9b:12:09:3d:49:3a:08:8a:99:
                    f0:95:ed:a9:ca:32:23:a5:f7:a4:3d:61:d8:30:af:
                    9b:36:36:80:db:8e:72:d8:a4:25:3d:3c:20:2c:08:
                    e4:bd:8a:51:a7:94:de:99:60:cf:e9:92:78:69:9f:
                    a4:ba:d1:da:d9:e5:4f:40:fe:eb:46:70:d1:1d:9f:
                    75:d5:75:43:0c:ef:4e:c3:08:fa:7b:cb:80:e0:57:
                    60:83:89:2b:96:03:99:2f:f6:e1:ed:6f:53:11:56:
                    f4:ec:ee:ea:48:ea:0e:77:9b:b4:87:08:54:3d:06:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:71:50:9E:7D:E4:C0:18:11:B7:28:BD:CC:1F:EA:7D:48:1A:E2:83
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31322e302f32322d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:f1:37:f1:81:64:cf:94:9d:d7:69:9e:97:82:0e:4d:bf:f2:
         b5:ce:91:97:a4:4b:92:11:ee:58:3f:4f:0c:7e:b6:90:3f:93:
         da:71:ab:38:70:4a:b5:87:ab:15:ae:75:ab:36:db:44:2b:65:
         66:e1:a4:97:15:6e:4d:2c:9e:14:72:51:e2:89:dc:9c:9c:16:
         49:06:e7:3d:1f:87:74:f6:9d:cb:ab:06:9f:7b:5c:2f:bb:70:
         f3:f5:4c:d0:97:87:11:2a:48:f0:e8:09:24:2a:a4:dd:b4:e7:
         34:28:95:70:15:22:f8:72:d6:9d:44:da:a5:33:5e:17:b1:5c:
         52:6d:4a:29:28:d6:20:03:71:38:97:8a:03:a1:bb:62:71:a8:
         a2:01:ab:80:66:03:7d:d6:82:aa:f0:ad:00:b1:bd:6d:db:40:
         60:d2:92:55:fa:61:3f:76:0b:04:09:cc:b1:be:d7:03:31:91:
         90:cc:3c:7b:4c:de:1f:de:6f:e9:02:ef:f9:11:c1:d9:56:0f:
         39:fd:e0:c5:b8:4c:e1:7a:5e:22:a5:49:d7:d7:de:de:32:b5:
         0c:1b:aa:c2:14:0a:87:24:a6:5b:eb:46:51:59:7b:34:57:ce:
         55:71:08:24:c1:80:ab:89:f3:49:cd:5f:19:ee:40:7e:32:37:
         67:2e:08:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:21:35 2025 by rpki-client