Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34352e302f32342d3234203d3e20323637373938.roa
File:                     34352e3138312e34352e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          pY1KGPwW0XqfNsPygpuNTszVZWldZ/xqJz+od18lxVk=
Subject key identifier:   92:7B:09:A5:DB:CE:A8:64:B7:C5:8E:13:E6:35:9C:F5:41:3B:65:3D
Certificate issuer:       /CN=44B7D6626292744063A0029B3E214C905150E05D
Certificate serial:       6EA54DACF51D565E3B9914EAF40615826556E57D
Authority key identifier: 44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34352e302f32342d3234203d3e20323637373938.roa
Signing time:             Tue 04 Feb 2025 18:07:04 +0000
ROA not before:           Tue 04 Feb 2025 18:02:04 +0000
ROA not after:            Tue 03 Feb 2026 18:07:04 +0000
asID:                     267798
IP address blocks:        45.181.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a5:4d:ac:f5:1d:56:5e:3b:99:14:ea:f4:06:15:82:65:56:e5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B7D6626292744063A0029B3E214C905150E05D
        Validity
            Not Before: Feb  4 18:02:04 2025 GMT
            Not After : Feb  3 18:07:04 2026 GMT
        Subject: CN=927B09A5DBCEA864B7C58E13E6359CF5413B653D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:09:00:7c:39:b2:24:d0:66:4e:61:4d:5c:03:
                    6c:1e:ac:24:78:a3:09:85:d8:30:0c:f6:e7:d0:2b:
                    98:47:87:13:cf:eb:7b:47:d6:82:e6:ea:75:06:c5:
                    5b:d6:ae:37:b8:be:bf:82:59:0b:5e:1f:2c:09:1e:
                    03:3a:69:04:06:2e:02:bf:df:bd:24:21:2a:7e:c3:
                    c9:d3:96:47:58:62:d8:8d:46:9c:46:7c:4b:b2:7c:
                    18:2e:ff:47:56:8d:50:86:12:d2:41:8c:b3:db:16:
                    94:f2:56:66:57:e3:d3:b8:06:b5:d5:1e:99:e2:0d:
                    06:b2:2d:32:f1:a1:24:80:fc:60:99:cc:91:82:96:
                    e4:5b:5d:18:15:0a:12:9e:14:a5:8d:4f:1f:3c:28:
                    17:45:86:17:a5:b1:b5:a6:8b:f1:eb:64:ad:45:6e:
                    a8:89:12:7c:ac:20:ba:a0:68:50:b0:d3:74:7c:62:
                    9d:98:09:f3:ee:25:8f:8a:51:d2:c0:c4:5b:bc:d9:
                    67:85:52:0c:02:31:4f:b6:76:f1:34:2c:ab:b7:d0:
                    49:71:e9:ea:ae:f9:bd:c7:ec:0b:39:eb:5b:68:93:
                    57:79:45:11:9a:17:6f:84:12:e3:ca:f3:72:44:cf:
                    6c:4f:7a:23:3e:a7:29:87:62:96:95:14:ef:38:4a:
                    76:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7B:09:A5:DB:CE:A8:64:B7:C5:8E:13:E6:35:9C:F5:41:3B:65:3D
            X509v3 Authority Key Identifier:
                keyid:44:B7:D6:62:62:92:74:40:63:A0:02:9B:3E:21:4C:90:51:50:E0:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/44B7D6626292744063A0029B3E214C905150E05D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44B7D6626292744063A0029B3E214C905150E05D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/990FF9AD5310574D654CA469C3C6979B23D934FC5AE610FB186F06DA6518BA4A/0/34352e3138312e34352e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5b:46:4d:3f:da:13:ef:d8:f8:6a:ae:8a:42:40:a5:af:9d:
         b1:67:3c:8c:56:7b:6f:3a:83:e9:69:26:2c:aa:b8:97:f4:02:
         0d:18:28:3c:6f:36:6f:22:78:79:36:a9:20:b4:30:c7:3d:05:
         5d:6d:bf:5b:aa:f1:c9:3c:f3:b3:74:dd:1b:47:71:02:88:51:
         00:93:c7:fd:4b:14:8d:56:af:7b:12:29:02:ed:1a:b4:26:2e:
         a4:e3:fc:2d:37:e4:3f:67:99:72:f6:7e:15:7c:30:c2:5f:df:
         71:14:ce:7f:de:93:25:52:9e:6c:50:15:e7:cd:15:60:19:9b:
         6c:3b:ab:2d:81:12:e5:25:98:d7:67:1f:82:7a:5a:84:80:a7:
         62:f8:f3:2b:0e:7c:c4:34:47:35:52:e1:7e:03:49:77:eb:b9:
         56:39:de:cf:51:c1:16:b2:c4:ea:d9:5b:9f:30:c1:d9:4f:8f:
         79:fe:37:bc:d6:b9:fe:19:fe:6c:56:7d:28:14:57:8e:af:5e:
         ed:c5:f1:88:6b:e1:06:7b:17:36:95:91:3f:5a:a0:05:69:b5:
         0e:d4:18:c6:9b:b3:60:7c:9a:42:95:6c:4a:65:0d:c9:8a:06:
         e8:30:03:a1:68:d2:6c:04:8d:3c:7a:e5:87:e9:f5:f0:04:63:
         58:28:b2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:59 2025 by rpki-client