Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/746cf4c5889ccde3410840cc43205d841b744f5e.roa
File:                     746cf4c5889ccde3410840cc43205d841b744f5e.roa (raw, json)
Hash identifier:          xjo4gT8T4utpaVC+vgBfnPy/giKLvJh6MyQuC8E4zgU=
Subject key identifier:   17:FE:DD:53:1C:BD:BF:85:FB:13:8E:69:7B:C0:29:29:C9:B7:F2:5E
Certificate issuer:       /CN=9c0799877aecf01061f13687ad43c4c362608b6a
Certificate serial:       217ECD
Authority key identifier: 7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/746cf4c5889ccde3410840cc43205d841b744f5e.roa
Signing time:             Thu 27 Jul 2023 12:44:21 +0000
ROA not before:           Wed 26 Jul 2023 12:44:21 +0000
ROA not after:            Sun 27 Jul 2025 12:44:21 +0000
asID:                     266781
IP address blocks:        45.233.140.0/23 maxlen: 24
                          45.233.142.0/24 maxlen: 24
                          2803:df20::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195149 (0x217ecd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c0799877aecf01061f13687ad43c4c362608b6a
        Validity
            Not Before: Jul 26 12:44:21 2023 GMT
            Not After : Jul 27 12:44:21 2025 GMT
        Subject: CN=746cf4c5889ccde3410840cc43205d841b744f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:ed:41:8f:65:d1:5f:ce:05:bd:37:00:00:
                    6c:32:15:75:63:36:99:98:ab:0e:8f:88:5c:c6:ca:
                    9d:ef:c3:66:c1:da:fd:3c:78:f0:90:c2:06:80:6a:
                    3b:ab:f6:af:b7:3c:94:02:8e:b3:9e:1e:ec:be:9d:
                    12:6b:c6:61:6b:e6:fa:50:c8:4c:97:46:6d:b0:b2:
                    e7:bf:80:1e:44:85:f4:fe:9d:15:08:4e:b7:00:86:
                    b4:92:77:99:c5:c8:66:b3:c4:7a:56:ba:e7:3c:57:
                    60:f3:3b:6f:36:20:8f:37:9b:f1:7d:93:cc:6d:47:
                    4d:a8:5a:f1:02:d3:58:4c:b4:03:54:84:3a:d4:a3:
                    a3:5a:fd:c9:dd:fb:51:17:ba:ff:aa:8f:b4:f6:9b:
                    73:11:83:74:b0:7f:13:e0:b2:07:c1:e2:a1:53:2b:
                    b8:94:84:17:4d:bf:f9:8f:5a:14:eb:7e:5c:7f:68:
                    63:b3:3d:18:de:05:14:3b:21:ce:14:7f:1c:f0:27:
                    37:ba:62:43:a2:60:f2:eb:8b:9a:59:e4:2f:8e:18:
                    61:e9:d1:b9:b9:3d:bb:38:80:49:03:be:9d:2e:74:
                    2d:9a:a5:f6:d7:f0:6c:3a:6c:bd:c5:e6:98:0a:db:
                    86:60:03:75:13:37:49:6d:55:4d:e6:33:e4:68:dc:
                    36:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FE:DD:53:1C:BD:BF:85:FB:13:8E:69:7B:C0:29:29:C9:B7:F2:5E
            X509v3 Authority Key Identifier:
                keyid:7D:31:54:64:61:5F:C9:6E:58:0B:0A:4C:5D:D1:91:03:D4:2D:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c0799877aecf01061f13687ad43c4c362608b6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/746cf4c5889ccde3410840cc43205d841b744f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8751feff-30c2-4aaf-8803-54d8be3b004f/9c0799877aecf01061f13687ad43c4c362608b6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.140.0-45.233.142.255
                IPv6:
                  2803:df20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:a9:d3:dd:e3:7d:3f:74:d3:6b:fd:75:af:55:30:59:6c:0f:
         6a:8e:4c:03:d0:13:b5:2d:e8:5f:76:5d:9e:c6:c3:68:1f:6f:
         8d:3c:e9:83:c9:f8:e3:c1:5b:53:9a:1a:bd:f3:52:6e:2b:35:
         68:5f:a4:99:d1:8b:de:58:0d:e4:fc:7a:67:ad:0a:45:ab:90:
         92:ba:da:49:e9:4a:7b:15:37:5d:a6:82:dd:ad:20:f9:5c:27:
         12:64:cb:39:e2:fb:e4:2c:d0:28:fb:64:f1:f5:ed:df:85:ff:
         fb:e2:9d:25:76:10:05:78:ff:12:cb:65:fb:eb:db:e5:75:7f:
         6d:61:f3:92:08:10:4a:fc:d4:b3:be:7c:c9:23:34:e4:e6:f8:
         12:f5:cb:35:9e:00:ed:82:c9:b9:b5:3e:6b:c5:26:ec:44:4d:
         4b:36:fa:1e:bd:6a:8b:10:d9:f8:2a:42:1b:65:73:73:19:3a:
         c3:ac:f4:43:cb:cb:ac:f3:ab:6a:a8:9b:51:80:72:24:83:55:
         8b:81:7a:d3:81:5d:ae:59:79:36:67:23:1c:b8:56:9b:ef:9b:
         c0:3a:c5:49:22:a9:7c:56:bc:18:ed:6c:b2:61:ad:70:bb:85:
         de:c4:25:a9:bb:d9:fd:31:ca:b5:c5:4e:1f:42:d8:08:36:f3:
         7a:df:df:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:19:49 2025 by rpki-client