Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38362e302f32342d3234203d3e20323636383134.roa
File:                     34352e3233342e38362e302f32342d3234203d3e20323636383134.roa (raw, json)
Hash identifier:          0NvrGEN9QnVAQkMjEQ1Z4okwYKSMe7FAKN5+MRoL7Ms=
Subject key identifier:   81:90:86:F7:ED:D2:CE:27:90:FE:D3:6D:13:54:8F:6B:8C:CC:26:C4
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       02950470DBC96E6F68DE3A7AF0AE7AF25CCFB12D
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38362e302f32342d3234203d3e20323636383134.roa
Signing time:             Wed 05 Feb 2025 20:45:00 +0000
ROA not before:           Wed 05 Feb 2025 20:40:00 +0000
ROA not after:            Wed 04 Feb 2026 20:45:00 +0000
asID:                     266814
IP address blocks:        45.234.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:95:04:70:db:c9:6e:6f:68:de:3a:7a:f0:ae:7a:f2:5c:cf:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Feb  5 20:40:00 2025 GMT
            Not After : Feb  4 20:45:00 2026 GMT
        Subject: CN=819086F7EDD2CE2790FED36D13548F6B8CCC26C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:a1:30:4d:34:28:81:4e:ac:b1:f2:c1:6c:
                    b8:78:27:6b:00:ae:61:b0:3e:b3:22:5b:23:82:3c:
                    6d:42:4f:ac:72:7a:3a:60:c1:a8:cc:d8:e7:6b:50:
                    73:58:fe:f2:cc:8a:e7:34:de:7e:0a:b5:34:f3:b4:
                    85:9b:4c:b1:78:00:1e:6b:6a:20:da:f2:ba:da:c0:
                    77:73:bc:f1:5e:7b:f3:cb:0a:e5:25:f8:0b:29:81:
                    6b:a4:16:e0:60:35:20:ac:53:f4:f0:ac:ec:3e:80:
                    fb:a1:1d:53:6e:05:73:81:83:3f:3e:37:89:7c:0f:
                    02:e1:d9:36:7a:b4:ae:4c:5b:6d:5a:93:c6:37:5b:
                    a2:59:53:15:6e:97:e3:38:10:34:24:37:6e:7b:38:
                    55:f5:0a:2e:df:fd:37:b4:a1:32:e6:e1:c3:b1:c3:
                    9d:85:44:37:36:bf:d2:04:1f:d6:68:63:1e:2e:42:
                    23:7c:36:78:9f:d5:ba:5a:bb:d6:6e:b1:36:f1:fb:
                    32:b7:85:42:7c:56:e4:16:79:c7:4f:14:0a:77:ec:
                    f8:9d:d1:7a:a1:46:90:f9:61:a8:76:d8:a1:00:1a:
                    47:e4:8c:fd:93:8c:79:cc:f7:b6:49:fb:8d:e1:ae:
                    92:30:b7:5c:f7:5a:57:fe:a0:36:79:2b:af:c6:c1:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:90:86:F7:ED:D2:CE:27:90:FE:D3:6D:13:54:8F:6B:8C:CC:26:C4
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38362e302f32342d3234203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:94:f9:07:d7:26:2c:d9:cb:85:e4:20:fb:27:e3:00:ee:60:
         47:5e:a9:59:5c:d1:9d:9b:0c:2e:49:ec:d8:7a:45:7d:99:c7:
         47:6e:52:65:4a:01:00:1c:0c:4d:04:25:48:38:bd:9b:30:29:
         50:0f:e4:56:cd:95:f2:45:e6:88:5b:63:16:bb:aa:de:c5:e5:
         e4:43:1d:01:b9:48:cc:f3:49:47:85:fe:cd:77:0f:53:4b:20:
         ef:e8:e1:cf:21:f1:e7:b9:1c:47:41:29:31:74:46:88:2b:2c:
         5c:87:86:1a:f2:56:5f:26:b6:5e:1d:89:87:68:bf:47:06:d0:
         2c:08:5d:b8:fb:5a:cf:86:09:dc:30:bf:7d:54:55:b0:94:6f:
         0b:f8:26:fb:1b:23:38:2f:e1:e0:ae:73:da:0e:79:fb:88:58:
         f7:46:42:e2:35:db:bd:87:a7:8b:9b:8d:2c:be:10:14:d6:03:
         dc:44:b4:36:1d:66:e0:4d:7f:64:b4:51:53:36:c1:9c:e5:b8:
         4c:91:b0:39:1a:ea:51:0f:b2:58:12:d9:0f:bf:8c:26:6b:f5:
         81:df:fb:e2:58:4e:1a:3b:64:9c:88:41:04:ac:e8:e9:1b:f9:
         77:5a:45:27:1e:bb:ec:e4:41:80:8a:b6:9a:f9:5d:34:6c:f6:
         bd:9e:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:19 2025 by rpki-client