Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e31312e302f32342d3234203d3e20323635383139.roa
File:                     34352e362e31312e302f32342d3234203d3e20323635383139.roa (raw, json)
Hash identifier:          Pv0cksjVUw0jw8SRSst7cSCatPXvBhxh70Rlx1VaZWc=
Subject key identifier:   A9:1F:BD:2A:3D:E1:A5:2D:EE:B9:F9:63:F6:92:AF:8B:1F:EB:14:C0
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       4AFCFCDA457407DD8F6FEDB4BCE40A3D7837570F
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e31312e302f32342d3234203d3e20323635383139.roa
Signing time:             Fri 31 Jan 2025 23:55:00 +0000
ROA not before:           Fri 31 Jan 2025 23:50:00 +0000
ROA not after:            Fri 30 Jan 2026 23:55:00 +0000
asID:                     265819
IP address blocks:        45.6.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:fc:da:45:74:07:dd:8f:6f:ed:b4:bc:e4:0a:3d:78:37:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Jan 31 23:50:00 2025 GMT
            Not After : Jan 30 23:55:00 2026 GMT
        Subject: CN=A91FBD2A3DE1A52DEEB9F963F692AF8B1FEB14C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:58:fd:9e:e9:07:a0:c6:00:81:6f:92:2f:
                    67:33:88:d4:81:fe:6b:71:f6:16:1e:01:08:8e:bf:
                    07:9b:df:62:74:31:32:8c:30:71:15:7c:0d:c6:16:
                    90:38:95:14:82:be:13:15:c9:09:ec:8f:1d:5b:56:
                    60:b3:d5:0d:2f:2c:b9:a8:be:31:89:be:2b:47:b8:
                    b3:e3:c0:6b:d9:b2:3e:dd:08:1f:7f:55:eb:be:e9:
                    b1:e3:23:c3:eb:28:d9:d7:cc:ba:41:af:46:d3:36:
                    8a:46:c5:ae:4a:54:7d:86:c9:6d:66:30:b0:44:97:
                    ad:d6:11:b4:31:d5:fb:90:51:4a:4f:14:6f:49:1c:
                    56:65:dd:a3:11:e7:08:a3:03:1d:82:df:53:a7:d5:
                    1f:9b:fb:13:0c:69:e3:3f:10:81:08:a3:bc:5d:7b:
                    21:9b:97:16:99:3e:58:e9:2b:20:e2:33:b8:ee:31:
                    bd:39:e0:ba:91:96:07:fd:3c:9d:0e:be:24:bc:59:
                    f2:8f:ca:04:c9:d9:af:83:c2:86:4d:48:0a:fe:28:
                    ae:ac:f8:2d:06:2d:d7:64:fa:18:c0:02:bc:be:ee:
                    ff:30:ee:b9:f8:29:22:41:cf:34:bb:7c:fc:ec:50:
                    ab:b3:d8:48:34:2c:78:06:08:7d:8b:b0:e1:b4:82:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:BD:2A:3D:E1:A5:2D:EE:B9:F9:63:F6:92:AF:8B:1F:EB:14:C0
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e31312e302f32342d3234203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:6d:86:8b:80:c1:26:a1:95:4c:b2:2a:f8:a8:e9:11:d2:44:
         23:77:1b:c2:30:e0:2a:60:0d:21:e4:1c:01:85:18:eb:a1:25:
         13:4a:f6:b8:ad:bc:35:1b:de:0e:18:d8:b1:74:e1:ae:aa:b5:
         a0:1a:97:3b:0f:b4:89:e1:cb:21:d0:a5:7e:38:7e:1e:16:a4:
         52:0a:94:4d:83:26:03:9c:c8:df:09:b1:bf:df:02:b4:d4:4a:
         2d:78:3b:9d:29:8a:69:0a:5f:bd:ea:d4:7f:89:52:94:5d:cd:
         3b:1b:a5:67:31:1e:18:b1:8f:76:41:f6:54:34:e0:c8:1e:31:
         62:a6:ce:bf:e9:ca:47:86:5a:79:90:14:34:7d:bd:f1:77:38:
         24:23:1b:7e:61:cf:fb:e1:f5:eb:de:fe:03:d3:38:fb:30:fa:
         a3:5a:3d:38:6b:ac:33:6a:d5:76:81:01:42:42:78:c4:3b:7e:
         c9:aa:8e:9b:2a:61:51:3a:f9:64:b1:95:ec:06:6e:0e:c9:f6:
         42:6c:a3:8c:f2:3e:63:c2:8e:79:78:2b:ff:be:f5:8b:f0:bd:
         d5:f4:7d:a1:8f:8d:ee:84:c3:db:ea:53:38:a9:22:6e:10:5a:
         b4:15:ce:c0:ec:d9:cc:5d:81:da:54:e6:37:fd:cd:01:c3:ad:
         74:98:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:29 2025 by rpki-client