Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa
File:                     34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa (raw, json)
Hash identifier:          UIXEawx2DYcI+pLPU43S72Fp7w2iCEBJ8Qeb52fSum4=
Subject key identifier:   30:86:4D:87:C9:09:F8:2A:31:D2:28:BD:EE:1A:E1:6E:B6:48:A7:88
Certificate issuer:       /CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
Certificate serial:       5B81D3A7909846CB55F41AA854826FF8D04476AD
Authority key identifier: 09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa
Signing time:             Tue 04 Feb 2025 18:24:20 +0000
ROA not before:           Tue 04 Feb 2025 18:19:20 +0000
ROA not after:            Tue 03 Feb 2026 18:24:20 +0000
asID:                     263157
IP address blocks:        45.167.157.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:81:d3:a7:90:98:46:cb:55:f4:1a:a8:54:82:6f:f8:d0:44:76:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=097FC81A5EA49A88FF4BBF238B0B99886A82A6A4
        Validity
            Not Before: Feb  4 18:19:20 2025 GMT
            Not After : Feb  3 18:24:20 2026 GMT
        Subject: CN=30864D87C909F82A31D228BDEE1AE16EB648A788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:8a:41:8f:9a:e5:ef:7c:dc:98:7c:2f:c2:
                    cb:47:2d:70:1c:7f:9e:15:9d:be:88:a7:70:5e:db:
                    ab:f9:60:ef:77:40:9b:67:bd:5e:ce:6e:04:b4:2f:
                    47:2d:f2:0a:9a:a8:79:4f:39:13:30:85:21:8d:fe:
                    6b:30:0b:07:cf:2c:9d:95:26:ee:ee:1f:6f:e7:5b:
                    88:54:a3:b9:ab:bf:81:bb:24:7a:59:33:1a:5e:b4:
                    c5:92:76:59:4e:a3:3a:91:92:66:7d:68:e4:8f:09:
                    9b:42:98:bb:be:ce:b7:11:32:40:66:ea:95:69:50:
                    8d:e1:17:64:85:f6:48:24:0e:fa:42:5e:8b:09:6c:
                    7e:a1:7c:6d:9a:64:8c:62:23:c1:ad:23:4e:e5:35:
                    79:18:52:68:f7:e2:fe:b9:d2:78:54:c7:ae:31:74:
                    55:17:3f:9d:a3:7e:3d:4c:22:d1:8e:49:01:3f:51:
                    e7:08:53:d5:58:de:3f:99:d9:8d:cc:43:2a:85:c9:
                    10:57:5e:d0:a5:9f:8c:e8:c7:63:10:a4:bc:12:6e:
                    3e:bd:1b:23:ef:69:84:a9:3a:09:36:20:20:e1:1c:
                    04:b2:92:a8:7c:4f:ed:53:13:17:f3:b2:7d:07:9b:
                    7d:eb:66:95:d6:ed:a1:6a:c4:81:f6:ad:a0:3a:95:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:4D:87:C9:09:F8:2A:31:D2:28:BD:EE:1A:E1:6E:B6:48:A7:88
            X509v3 Authority Key Identifier:
                keyid:09:7F:C8:1A:5E:A4:9A:88:FF:4B:BF:23:8B:0B:99:88:6A:82:A6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/097FC81A5EA49A88FF4BBF238B0B99886A82A6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9C99231580BD69B95F85272D13734CC84D9EC65A39AB934F4852A61EAF975606/0/34352e3136372e3135372e302f32342d3234203d3e20323633313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:70:72:06:5b:ff:2d:67:eb:5c:40:0c:d5:ce:93:89:59:26:
         6a:d3:ae:67:61:fb:15:e7:59:d0:28:a9:c3:16:02:bd:e1:9e:
         aa:3e:a7:bc:1d:cd:3a:1d:21:8c:59:03:8c:cc:fa:7f:44:81:
         7d:b8:c3:f7:f8:18:3a:c4:ef:86:31:bc:99:fd:e1:51:59:d7:
         30:ee:6d:6a:0c:24:df:50:20:15:2d:2c:92:7a:89:e3:1b:4c:
         8a:90:1f:e5:c2:6c:50:e2:24:22:65:de:90:15:48:88:43:af:
         d6:b2:dd:d5:84:d3:c3:b8:a8:d6:58:bf:43:b0:a6:fc:f9:c9:
         c5:9a:a1:b0:fb:d2:85:5a:21:de:c8:97:50:e9:63:3b:dd:3d:
         49:ca:70:9f:63:8e:ba:79:53:92:6a:4f:da:57:e3:e4:97:20:
         37:e4:54:51:1e:fd:2b:0c:a4:c7:8b:3e:81:95:31:2e:f9:4d:
         6e:0d:0f:6a:a1:29:6f:fd:ca:09:b9:2e:9e:73:2f:0c:6e:2b:
         77:d7:98:84:c2:c3:0b:24:a6:be:20:2a:db:3a:64:c3:8c:6c:
         1c:ec:65:95:ec:f9:a8:c6:4b:c4:93:f0:9a:ae:24:64:bd:29:
         80:67:7e:53:c9:fe:02:96:0c:ae:d3:5f:45:00:d4:5c:89:e0:
         d3:d8:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:39 2025 by rpki-client