Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31352e302f32342d3234203d3e20323731393333.roa
File:                     34352e37302e31352e302f32342d3234203d3e20323731393333.roa (raw, json)
Hash identifier:          RJBWV+UcfeAmKGuhts0Q6rNecSN6loM0U114mkfBY/E=
Subject key identifier:   FA:6A:79:45:F7:75:04:E6:1B:81:FE:2A:F1:D7:7A:FF:1A:48:5C:54
Certificate issuer:       /CN=E82376114B533B210E3DA974DE7523551E7BB8F8
Certificate serial:       15C9C2541C5910F0FB24A2631C50B3DD2B88681C
Authority key identifier: E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31352e302f32342d3234203d3e20323731393333.roa
Signing time:             Tue 04 Feb 2025 18:07:52 +0000
ROA not before:           Tue 04 Feb 2025 18:02:52 +0000
ROA not after:            Tue 03 Feb 2026 18:07:52 +0000
asID:                     271933
IP address blocks:        45.70.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:c2:54:1c:59:10:f0:fb:24:a2:63:1c:50:b3:dd:2b:88:68:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82376114B533B210E3DA974DE7523551E7BB8F8
        Validity
            Not Before: Feb  4 18:02:52 2025 GMT
            Not After : Feb  3 18:07:52 2026 GMT
        Subject: CN=FA6A7945F77504E61B81FE2AF1D77AFF1A485C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e1:ba:f4:3d:57:05:27:c8:fd:4e:3b:d5:c3:
                    20:94:fe:b6:41:2c:71:3e:5d:e4:f8:2e:81:42:ef:
                    86:5a:a7:d3:f3:44:51:eb:99:ae:31:57:71:29:d2:
                    f8:88:79:66:6e:1a:93:1e:52:e2:c1:a1:f7:5a:00:
                    b8:05:5f:07:f1:aa:37:a2:4a:e0:e4:68:54:73:ee:
                    53:eb:de:12:a9:b3:6d:e6:17:3f:9c:3f:b5:ab:65:
                    cf:c0:47:92:b2:a7:97:57:59:b1:0e:be:e1:f0:0a:
                    0d:b6:30:ac:37:6b:b0:e6:36:fe:d6:c5:f5:ad:74:
                    cb:7d:b7:54:04:d5:18:13:7c:d4:fc:83:60:39:f7:
                    18:e7:8e:40:17:58:cd:ac:d7:62:1b:eb:ab:a5:80:
                    fc:ed:a3:71:30:b7:5e:39:e3:7d:fe:33:2c:19:e1:
                    f9:5b:be:81:12:01:a0:44:3b:2e:fb:97:e0:e4:72:
                    ad:31:22:ff:2d:d5:d4:de:72:8c:87:20:25:b4:0d:
                    17:12:10:d7:dd:6e:df:7e:ee:1d:4c:38:08:7e:23:
                    1e:2d:33:2c:32:24:9c:4f:c8:f1:41:d4:5d:39:0e:
                    d5:3f:e0:22:fb:aa:9e:c6:e7:d4:4e:e7:d5:9f:2a:
                    bc:d4:cd:53:dc:9e:f4:33:8e:0d:b0:86:32:b2:68:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6A:79:45:F7:75:04:E6:1B:81:FE:2A:F1:D7:7A:FF:1A:48:5C:54
            X509v3 Authority Key Identifier:
                keyid:E8:23:76:11:4B:53:3B:21:0E:3D:A9:74:DE:75:23:55:1E:7B:B8:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/E82376114B533B210E3DA974DE7523551E7BB8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E82376114B533B210E3DA974DE7523551E7BB8F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7EEF16602D5E1A7FCE3A58FCB720E26E5FAFDCADFBE304DD7E7AEA8DB10A6759/0/34352e37302e31352e302f32342d3234203d3e20323731393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:55:3a:9b:d9:ae:24:cd:46:07:b2:85:2d:41:3b:47:b9:
         98:3d:8a:92:6d:45:56:49:a9:4e:34:b6:47:4f:11:30:42:f0:
         ed:93:10:39:7b:41:9c:c6:c5:9c:b8:3a:bf:c2:14:f6:6c:06:
         1b:4f:86:23:fa:62:ec:65:d6:92:05:82:27:2b:b7:ea:69:9d:
         dd:a5:5e:b8:39:e4:43:a2:0e:86:a5:6a:d7:7f:71:79:44:f7:
         91:11:2b:50:af:13:76:cd:d6:0e:42:9a:40:76:10:b8:37:11:
         d3:4d:4e:48:5b:e2:9a:12:9b:62:05:07:b9:8f:c8:ee:d7:18:
         67:84:76:9f:2b:11:05:49:05:ee:c3:fb:04:80:23:4f:29:80:
         6b:88:0d:d6:ed:47:a3:3c:33:4b:89:59:a1:31:c7:df:db:71:
         f7:d2:0a:18:35:97:f3:73:7d:e6:2b:64:2b:af:65:dd:a2:df:
         ec:10:8c:ac:29:05:c6:ae:b9:8c:6a:dc:5e:a1:cf:68:b8:e0:
         32:0e:c2:0e:30:85:e6:38:ae:92:84:95:bd:11:5a:c1:c6:4c:
         eb:b4:34:56:c9:b2:d7:a8:80:15:52:93:0d:f8:6b:55:13:65:
         7c:57:2a:91:51:9e:ed:2d:fc:22:eb:7c:50:02:cb:8f:7b:26:
         43:3d:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:38:37 2025 by rpki-client