Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e203133393539.roa
File:                     34352e372e34342e302f32322d3234203d3e203133393539.roa (raw, json)
Hash identifier:          frpFZmCfmEWmNANFWxlvTgNy3u8BsqQ1FeSfVN0geT4=
Subject key identifier:   13:4F:25:37:D8:19:95:57:EC:C7:4E:06:36:7B:90:AE:0E:54:0E:60
Certificate issuer:       /CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
Certificate serial:       3F768846F83B43FF2791A2B8AE90594AD92E5AE7
Authority key identifier: A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e203133393539.roa
Signing time:             Tue 04 Feb 2025 18:54:49 +0000
ROA not before:           Tue 04 Feb 2025 18:49:49 +0000
ROA not after:            Tue 03 Feb 2026 18:54:49 +0000
asID:                     13959
IP address blocks:        45.7.44.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:76:88:46:f8:3b:43:ff:27:91:a2:b8:ae:90:59:4a:d9:2e:5a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64789FFCA35DC5CF5A04D3F948A79A76F415130
        Validity
            Not Before: Feb  4 18:49:49 2025 GMT
            Not After : Feb  3 18:54:49 2026 GMT
        Subject: CN=134F2537D8199557ECC74E06367B90AE0E540E60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:3e:39:45:1c:75:2e:c8:b5:3f:28:37:5e:
                    f3:9e:aa:a6:69:13:d2:5c:93:91:52:b3:29:9b:7e:
                    d6:88:c3:2a:68:b8:a8:cc:98:57:31:c5:5e:30:83:
                    86:b2:08:30:ce:db:25:c9:73:ef:e4:1a:53:46:3a:
                    0b:79:cf:81:d7:38:dd:7c:5f:08:1c:5e:3d:66:54:
                    55:84:e3:8a:8e:e2:3d:2f:58:d6:aa:eb:52:ce:74:
                    e8:40:0c:72:75:83:c5:94:2a:d6:b5:a9:cc:4f:ef:
                    2e:50:ce:0b:23:96:33:c2:c8:aa:30:6c:b2:bb:18:
                    1c:07:44:60:83:6f:4f:1f:75:cf:46:7d:81:c4:f7:
                    4a:24:c0:87:6c:8e:40:04:6f:0e:ce:b8:05:97:79:
                    e2:7d:49:f1:63:ee:7a:fb:55:f6:67:8e:ca:10:bf:
                    c9:5d:4b:37:bf:f6:52:24:fd:a7:4c:c3:76:a0:8a:
                    15:b5:00:c6:03:b9:0b:6d:d1:0a:8d:60:ad:5d:ec:
                    29:0d:21:7b:ef:5e:f4:ac:ee:9b:be:e1:2c:78:5b:
                    bb:ea:e4:d8:9d:23:82:8e:21:e2:80:59:db:89:36:
                    86:16:4b:a2:75:ca:99:db:27:03:82:f7:c6:58:b0:
                    57:21:4e:42:08:27:d4:78:76:d4:7d:42:f7:17:69:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4F:25:37:D8:19:95:57:EC:C7:4E:06:36:7B:90:AE:0E:54:0E:60
            X509v3 Authority Key Identifier:
                keyid:A6:47:89:FF:CA:35:DC:5C:F5:A0:4D:3F:94:8A:79:A7:6F:41:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A64789FFCA35DC5CF5A04D3F948A79A76F415130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95AC548092B5B366A370C1C2B40A1761D4A3DDFA0E3834168A4026777486097D/0/34352e372e34342e302f32322d3234203d3e203133393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:93:aa:06:bf:11:fc:85:22:b9:c8:7e:cc:03:90:cd:2e:
         f0:f3:0b:38:54:df:4a:43:eb:bd:4d:4c:4d:25:70:e9:fd:50:
         96:61:b5:7e:63:89:80:71:16:70:7a:e3:1c:20:8e:1f:49:4a:
         25:23:4b:40:f5:7c:5b:d0:eb:b5:c5:ea:9c:32:32:25:59:55:
         c8:ad:91:fc:d2:27:d3:8c:ee:5d:01:7e:d9:30:8d:2e:50:08:
         11:1d:19:69:cb:a3:3c:f3:23:35:6f:5c:73:41:d7:0e:da:6e:
         88:40:83:a8:93:35:04:30:70:7a:18:22:e8:c8:cc:d3:6d:c1:
         77:d4:43:c5:e2:04:26:25:95:be:3e:06:cf:2d:03:2a:c7:7f:
         c5:c1:ab:fb:90:e2:a4:ad:1f:56:c4:74:cf:8a:b6:c2:06:78:
         d0:c5:9c:78:14:8f:8e:8d:f0:49:02:c9:60:ba:b1:47:1f:d9:
         e2:7e:c4:c7:ef:df:ad:fc:d8:43:98:98:ed:6c:c9:35:a6:1a:
         4d:52:11:82:1f:c3:a5:32:40:1f:a5:c2:23:11:a1:6a:aa:9f:
         48:05:2b:48:54:cd:82:d3:1f:d4:0a:57:c2:68:5c:a6:b6:12:
         1e:6d:ca:f6:cd:3d:0b:38:9e:49:1c:0b:a9:55:99:dd:4a:96:
         57:2a:ff:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:06 2025 by rpki-client