Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/34352e3233302e38302e302f32322d3234203d3e20323636373033.roa
File:                     34352e3233302e38302e302f32322d3234203d3e20323636373033.roa (raw, json)
Hash identifier:          /JJXzs1qf0DSR9toXyh9VZrPxaRgcxQCoXWKd20F6TM=
Subject key identifier:   1D:54:85:76:36:6A:3F:C6:E2:8F:05:B4:7D:C4:FE:13:8A:8B:D1:FF
Certificate issuer:       /CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7
Certificate serial:       36A78492880D3BC59A1FAD7A2AEFDEA262E3D23D
Authority key identifier: 4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/34352e3233302e38302e302f32322d3234203d3e20323636373033.roa
Signing time:             Tue 04 Feb 2025 20:02:59 +0000
ROA not before:           Tue 04 Feb 2025 19:57:59 +0000
ROA not after:            Tue 03 Feb 2026 20:02:59 +0000
asID:                     266703
IP address blocks:        45.230.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a7:84:92:88:0d:3b:c5:9a:1f:ad:7a:2a:ef:de:a2:62:e3:d2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7
        Validity
            Not Before: Feb  4 19:57:59 2025 GMT
            Not After : Feb  3 20:02:59 2026 GMT
        Subject: CN=1D548576366A3FC6E28F05B47DC4FE138A8BD1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:31:a8:58:08:f6:63:f4:22:ac:1c:66:33:
                    74:85:87:c4:ca:89:42:ea:92:22:75:5f:5a:68:4c:
                    f7:a3:46:5b:46:f8:6c:63:21:cd:9f:e7:0e:df:3b:
                    39:bb:94:e2:af:87:e8:c3:1a:2f:e6:6d:8d:db:00:
                    3d:3c:e1:b9:c5:19:39:6a:2a:a3:41:2b:65:46:00:
                    d4:c2:76:2e:27:db:37:02:4b:61:2e:52:2c:4e:1c:
                    0e:df:6b:49:6d:12:3c:eb:ac:91:34:07:96:ef:ab:
                    42:ba:32:a8:8d:66:6a:7a:9d:20:78:89:c1:6c:a0:
                    ca:f2:ef:3a:64:6c:32:08:2a:20:1a:9d:39:a9:96:
                    2b:71:a4:5c:65:60:cd:57:ef:3f:85:f4:fa:6d:4f:
                    d3:44:4d:7a:d6:96:9e:31:13:2d:ac:f3:45:3f:89:
                    15:69:fc:c2:39:84:a8:70:45:1b:2b:a8:68:73:d0:
                    ca:0f:2e:20:75:53:f9:26:43:52:20:44:fd:5d:b8:
                    71:d8:ac:cd:38:93:de:85:17:5c:22:7f:64:fa:9c:
                    1f:06:87:5f:e0:6b:41:72:95:01:c6:c6:5b:e3:24:
                    17:3b:5f:cc:88:db:18:65:dd:fc:4b:f2:f9:ad:14:
                    c0:06:af:64:70:58:de:c5:fd:ab:ca:2b:87:3b:80:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:85:76:36:6A:3F:C6:E2:8F:05:B4:7D:C4:FE:13:8A:8B:D1:FF
            X509v3 Authority Key Identifier:
                keyid:4F:88:BE:7B:B9:DB:30:D9:5E:B5:4E:82:F8:D0:09:59:15:C2:3F:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F88BE7BB9DB30D95EB54E82F8D0095915C23FB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F498D3DA387AF0C825713233F22DB55B427C41EBF8D1606BB353E8979DF1A22/0/34352e3233302e38302e302f32322d3234203d3e20323636373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:32:f4:be:ab:c3:a9:5c:07:8f:ed:ae:92:18:1c:49:3a:cc:
         4f:7d:df:01:62:03:47:99:e0:df:00:47:4e:ca:63:17:e0:1b:
         de:03:10:78:6d:fd:36:78:11:d4:a3:8d:2d:23:da:13:4d:7d:
         38:a9:8a:4f:92:65:54:49:fc:e3:87:77:53:94:a4:a7:1a:0c:
         cc:9c:d7:22:fd:58:95:0c:69:38:b4:4c:bf:50:07:9a:c6:ed:
         43:00:7e:32:a4:0d:17:80:3a:14:e6:ff:0e:d0:56:b5:4d:1c:
         e0:cc:c0:df:7a:24:87:b1:8a:58:11:f8:08:ba:58:68:8f:6c:
         0b:c8:4f:71:66:12:67:07:21:79:f8:06:e3:a7:45:35:42:95:
         35:12:d1:1f:d8:46:43:49:c8:fd:ec:52:26:14:e9:5a:46:c7:
         5c:76:03:6e:6f:42:e0:54:59:ce:42:46:44:a4:42:de:8a:9d:
         92:70:fb:30:d6:73:cd:24:f3:25:61:c8:68:46:90:d0:5c:95:
         f8:98:d7:6c:a7:0f:32:69:ce:c6:01:81:99:5d:29:4f:a8:a1:
         65:9f:b4:7d:91:18:97:ca:19:33:97:0c:01:48:e4:4c:9c:35:
         f6:39:cb:3c:9f:90:b7:bf:92:6b:71:2a:c8:3e:3a:2a:75:7c:
         13:81:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:48 2025 by rpki-client