Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32342d3234203d3e20323634383336.roa
File:                     34352e37312e302e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          nKZFV6/5L+oyRz9S+31JtipCmOaamp+rnkv4dYYCM34=
Subject key identifier:   03:AC:B5:58:74:60:02:D1:26:73:3D:7D:CE:D1:25:AC:79:0F:68:39
Certificate issuer:       /CN=7535BB4128902438F1DBC015961C2F410A3FD565
Certificate serial:       0E94A7715A8926738795D01084A44F0487A016B3
Authority key identifier: 75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:41:03 +0000
ROA not before:           Tue 04 Feb 2025 18:36:03 +0000
ROA not after:            Tue 03 Feb 2026 18:41:03 +0000
asID:                     264836
IP address blocks:        45.71.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:94:a7:71:5a:89:26:73:87:95:d0:10:84:a4:4f:04:87:a0:16:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7535BB4128902438F1DBC015961C2F410A3FD565
        Validity
            Not Before: Feb  4 18:36:03 2025 GMT
            Not After : Feb  3 18:41:03 2026 GMT
        Subject: CN=03ACB558746002D126733D7DCED125AC790F6839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:d1:a0:5d:1b:33:69:dd:45:e2:d2:fb:f9:
                    d8:ba:bc:ee:2f:00:a8:e2:67:d2:d6:ab:78:67:e0:
                    ed:e9:42:c9:d3:f0:e7:8d:5b:c9:ad:5d:20:46:6a:
                    21:91:cc:4b:3c:7b:a5:e6:8c:42:fd:c5:be:7c:a4:
                    9f:ac:8a:ce:4b:8c:15:0b:db:da:e8:54:e6:9f:cd:
                    ca:fe:5d:39:20:a1:bf:91:fd:9d:75:cb:3b:bd:99:
                    5b:87:9c:08:e5:2e:8b:eb:3f:c5:c1:34:41:9d:cd:
                    bc:de:bd:65:77:80:97:14:b8:30:4a:ac:f2:61:83:
                    1a:8b:45:d3:0e:99:96:88:71:4a:eb:5d:27:8d:26:
                    86:7f:d8:97:f7:cb:73:09:b0:ff:7f:4b:93:db:8f:
                    c3:7a:3d:70:8f:11:c6:8d:aa:f2:36:c3:19:85:4d:
                    f0:84:35:79:db:6b:c1:0a:91:d9:40:8a:37:71:0c:
                    c9:80:3a:df:88:ed:94:00:f9:bb:7e:62:0a:75:49:
                    87:23:2a:22:80:52:7b:a3:33:ae:56:64:6e:4e:55:
                    53:75:d9:95:27:85:4c:79:59:90:2c:54:ce:8a:da:
                    cb:f4:d6:63:42:e4:b5:27:fa:c7:b2:03:fc:a2:5a:
                    20:7b:39:4e:ee:42:d3:4e:10:e1:72:69:cc:67:7b:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AC:B5:58:74:60:02:D1:26:73:3D:7D:CE:D1:25:AC:79:0F:68:39
            X509v3 Authority Key Identifier:
                keyid:75:35:BB:41:28:90:24:38:F1:DB:C0:15:96:1C:2F:41:0A:3F:D5:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/7535BB4128902438F1DBC015961C2F410A3FD565.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7535BB4128902438F1DBC015961C2F410A3FD565.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/921523E2087B31AA33415C2E4EE0626BAE10581780DBE0D66EB548BA431010BE/0/34352e37312e302e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:62:01:8b:67:5e:b5:e5:16:94:94:6d:c6:9d:68:ea:cc:aa:
         09:e0:2a:13:57:e3:ca:f8:55:24:50:77:8a:06:03:fe:fa:80:
         ee:63:db:d9:28:e8:af:db:57:58:80:6e:18:b6:92:f1:93:e7:
         73:b9:9c:8d:c9:48:8a:69:62:8a:dc:11:a7:5f:8e:37:bc:02:
         9f:46:72:41:9b:35:6a:c9:9c:6d:f3:21:74:6c:3b:3f:1d:14:
         ca:85:59:35:33:46:6c:44:c2:e2:9b:eb:fa:4e:e8:35:5b:84:
         63:71:97:e3:8e:c1:ad:63:6d:f3:b2:e4:ed:74:2f:f8:bd:3d:
         60:7e:8f:20:82:37:15:73:ee:88:86:6f:fd:1a:65:d5:44:3a:
         ba:3f:5d:55:d8:c0:aa:7f:13:a7:2b:00:c1:18:88:cd:0e:7e:
         57:22:7f:76:66:aa:e1:f7:d3:0e:81:ea:3a:b9:52:af:9f:01:
         7a:31:02:8b:b1:3f:6e:29:96:c7:44:0c:10:e9:49:99:fb:15:
         8e:bb:68:03:de:cd:43:de:ac:e9:99:d0:93:d4:00:b7:c6:c6:
         3b:a9:4f:11:09:c6:9c:8e:7f:8f:f9:5e:33:6c:a5:55:fb:f4:
         fa:6e:79:1d:a3:16:6c:55:71:04:a8:d5:8f:11:d7:b6:e2:7c:
         e4:2f:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:14 2025 by rpki-client