Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31332e302f32342d3234203d3e20323731393333.roa
File:                     34352e37302e31332e302f32342d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          x5Uy/rpzKppK+HY+ArF+CjsqltdqkNt+pq923er23c0=
Subject key identifier:   CC:E1:45:A7:B5:04:2B:94:9D:9E:CC:70:C8:00:A5:AE:F9:66:B5:6C
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       503C4BD932D268C866C56DA9AFC0CEE0DFF7084C
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31332e302f32342d3234203d3e20323731393333.roa
Signing time:             Tue 04 Feb 2025 18:07:51 +0000
ROA not before:           Tue 04 Feb 2025 18:02:51 +0000
ROA not after:            Tue 03 Feb 2026 18:07:51 +0000
asID:                     271933
IP address blocks:        45.70.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3c:4b:d9:32:d2:68:c8:66:c5:6d:a9:af:c0:ce:e0:df:f7:08:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Feb  4 18:02:51 2025 GMT
            Not After : Feb  3 18:07:51 2026 GMT
        Subject: CN=CCE145A7B5042B949D9ECC70C800A5AEF966B56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:7c:b6:89:27:70:ea:08:40:42:91:69:b9:
                    c5:83:f5:be:2c:b9:79:cb:c1:2e:69:ef:67:9f:61:
                    ef:ae:de:60:67:6c:54:5c:f5:56:c9:f5:8d:e3:bb:
                    86:e1:8d:7a:d7:07:52:8e:7b:09:3a:80:a2:48:86:
                    97:aa:60:1b:4f:76:18:dc:5f:2b:3b:a5:a1:91:ad:
                    a5:f9:e3:60:69:5f:8a:77:2c:70:8b:69:50:90:0e:
                    04:22:28:0a:bf:cf:61:6f:c9:16:57:0f:51:6d:f2:
                    ef:41:26:6d:e5:8a:40:64:44:eb:10:55:08:34:c3:
                    a3:50:0c:05:76:48:65:11:5a:93:3c:f2:92:fe:c0:
                    0a:db:d8:6e:d0:eb:53:7a:7a:33:f9:74:37:c2:29:
                    60:f4:3a:f1:91:68:f2:77:a0:65:e4:43:63:b3:8a:
                    1b:98:03:7e:c5:5d:1f:73:bc:a3:a6:6a:a4:ca:fc:
                    5d:42:a2:c5:88:e7:17:2f:1e:aa:4d:38:63:be:3d:
                    8f:27:fc:5b:27:a9:2e:4c:d3:a7:bb:04:b7:e7:35:
                    30:00:7a:4c:d8:1f:39:9a:3f:e8:3a:d0:e9:08:92:
                    57:4b:d9:55:14:c1:2b:4a:5a:27:a1:d3:e2:c7:98:
                    f0:a9:c5:d3:a4:a7:cd:4b:f8:59:12:ba:24:e9:1d:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E1:45:A7:B5:04:2B:94:9D:9E:CC:70:C8:00:A5:AE:F9:66:B5:6C
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31332e302f32342d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:8c:fd:31:53:bb:c7:01:c8:e4:1d:5f:42:dc:d7:5e:d4:
         3d:42:ff:4b:ab:8f:58:01:0f:8b:fa:f5:b2:9a:34:b8:d0:52:
         b1:06:34:32:16:f4:5e:c2:e8:b7:77:e1:97:d0:ae:c9:b5:26:
         e3:3c:81:a1:8c:07:ec:6e:1d:02:76:a2:5e:5e:77:39:0f:d0:
         30:30:07:ec:54:cf:98:3b:a9:24:6a:26:b7:a3:81:5a:83:dd:
         15:e0:de:00:d6:18:ce:ab:96:eb:5c:cb:d4:cb:d9:92:20:5b:
         1a:68:f2:d3:ac:93:e2:06:c3:74:12:56:df:57:f8:78:45:20:
         84:2c:56:7b:6e:8e:6a:08:49:76:37:ee:8d:f6:d2:87:47:4f:
         24:a2:32:b1:7a:b2:16:48:bb:2d:27:cd:61:4c:0a:72:99:91:
         18:fd:70:38:7a:40:48:15:ef:5f:8d:79:64:b0:95:60:fe:96:
         81:99:ce:11:33:e5:e9:b3:27:5a:79:85:0f:a2:4f:c9:23:80:
         59:e8:e8:54:ee:7b:1d:2a:df:78:22:73:cb:1c:6a:2e:ce:f6:
         a4:fb:e4:d8:37:dc:2a:f2:ff:7c:db:a8:78:16:b5:ba:eb:30:
         6c:c0:81:b9:17:a8:a6:bf:b4:9b:a5:c0:28:d5:fb:69:ab:ee:
         bf:7e:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:37:44 2025 by rpki-client