Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32322d3234203d3e20323636383134.roa
File:                     34352e3233372e34342e302f32322d3234203d3e20323636383134.roa (raw, json)
Hash identifier:          hM1Rv+TdxISj/7LqzPF8WK7EevOInjJAnT85tFQFvok=
Subject key identifier:   EE:8F:27:13:C2:47:B3:EB:46:87:39:43:D8:6E:BF:7D:F6:3C:AF:8E
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       67A189C674A4808FBEB5AF981B1EF20910F45621
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32322d3234203d3e20323636383134.roa
Signing time:             Tue 04 Feb 2025 18:45:46 +0000
ROA not before:           Tue 04 Feb 2025 18:40:46 +0000
ROA not after:            Tue 03 Feb 2026 18:45:46 +0000
asID:                     266814
IP address blocks:        45.237.44.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a1:89:c6:74:a4:80:8f:be:b5:af:98:1b:1e:f2:09:10:f4:56:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Feb  4 18:40:46 2025 GMT
            Not After : Feb  3 18:45:46 2026 GMT
        Subject: CN=EE8F2713C247B3EB46873943D86EBF7DF63CAF8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:b1:ce:a5:62:30:01:96:db:76:d0:6b:b2:
                    2d:63:3c:95:c7:25:5b:92:c0:cb:90:3a:f0:c6:7c:
                    58:c6:1e:73:15:8c:89:36:94:f7:1a:51:ee:ca:c2:
                    86:c5:71:36:de:45:f5:44:0f:e9:da:69:78:13:29:
                    ea:c1:e3:3f:16:19:31:a8:95:b4:7a:ed:d2:28:3a:
                    27:3f:e9:e7:28:79:b1:c3:f5:66:e5:09:fe:db:a1:
                    12:c5:a8:c7:6c:5b:72:e0:14:a3:1c:1a:1a:75:3a:
                    0d:92:db:2a:b4:2b:db:b2:92:22:24:a3:94:90:a6:
                    10:f9:69:0a:09:42:66:08:7c:01:1f:25:88:e7:e9:
                    06:ce:3c:c4:e2:75:71:76:bb:75:50:9c:f0:9a:cf:
                    e4:a3:77:c2:4d:23:fe:d9:a5:d5:a2:85:24:bc:d3:
                    90:ec:66:9c:bf:f6:f0:dd:e0:8a:b3:9d:fb:75:d3:
                    51:e5:5d:01:2e:58:4d:0a:8a:43:35:c1:72:99:21:
                    7d:55:11:93:67:38:7e:0b:98:c0:f7:f3:a9:58:2e:
                    bc:89:a0:74:8c:24:f1:4a:c8:88:aa:ad:c7:68:21:
                    87:02:79:45:67:66:06:07:6d:f4:30:3d:14:c5:0b:
                    2b:c2:fc:35:04:f6:a1:89:77:e0:98:80:4f:9a:16:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8F:27:13:C2:47:B3:EB:46:87:39:43:D8:6E:BF:7D:F6:3C:AF:8E
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34342e302f32322d3234203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:24:1c:f6:bd:2f:da:0a:e2:6a:a3:e0:7b:3b:45:38:85:49:
         12:1f:2a:24:09:54:c4:b8:a3:83:1e:35:7a:48:04:09:f2:00:
         d6:bf:d9:e5:88:77:b5:02:a2:22:b1:6f:c7:06:d0:4c:a1:45:
         80:70:e9:7e:01:12:7b:37:2a:ca:47:82:99:81:8d:7d:77:07:
         ed:4f:01:3b:b2:f3:64:46:b4:57:98:16:a8:36:cc:62:db:da:
         c1:c3:16:fe:71:9e:97:a2:30:7d:84:45:fa:44:07:de:8c:ce:
         aa:94:eb:47:0d:25:fd:a1:10:e6:2a:7f:fb:4d:7b:9a:77:4a:
         10:5f:df:bb:37:22:5a:29:75:b8:86:35:52:66:92:3d:f2:53:
         61:94:fa:a8:75:5b:2c:01:8e:74:1d:f3:c4:02:07:fa:db:f1:
         26:b4:fa:32:a4:e2:05:a7:eb:17:ba:e3:1b:23:ba:1b:74:10:
         6f:45:e9:08:d5:80:37:ed:d7:de:50:48:93:1d:b8:70:f0:85:
         85:95:7a:f4:5c:07:67:1b:6c:d6:0f:36:94:5e:18:26:2a:ad:
         9c:c8:5a:31:d0:9c:0d:bd:61:67:5a:13:7b:81:00:a1:0d:d6:
         01:9a:60:bf:77:65:e8:af:7d:21:bf:d4:45:48:33:ab:58:f8:
         61:48:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:02 2025 by rpki-client