Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa
File:                     34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa (raw, json)
Hash identifier:          uoo514WR/dUkEa5zgU3sdbbRN+Z9srwGiyXQAMxyJ7U=
Subject key identifier:   BC:E7:78:89:AB:02:8F:21:DC:22:77:B7:B0:DB:A5:7B:0C:6B:94:A2
Certificate issuer:       /CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7
Certificate serial:       38B94A4586E87B1B376094BE51FAB5473B89CB17
Authority key identifier: BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa
Signing time:             Tue 04 Feb 2025 20:05:29 +0000
ROA not before:           Tue 04 Feb 2025 20:00:29 +0000
ROA not after:            Tue 03 Feb 2026 20:05:29 +0000
asID:                     267810
IP address blocks:        45.172.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b9:4a:45:86:e8:7b:1b:37:60:94:be:51:fa:b5:47:3b:89:cb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7
        Validity
            Not Before: Feb  4 20:00:29 2025 GMT
            Not After : Feb  3 20:05:29 2026 GMT
        Subject: CN=BCE77889AB028F21DC2277B7B0DBA57B0C6B94A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:19:8a:4c:fa:46:96:2b:8e:25:29:23:7c:
                    f5:ab:91:67:e6:2c:04:43:7f:1f:9a:9f:a8:08:2e:
                    32:0c:15:e6:50:e8:9e:ac:1d:6a:00:b9:77:7f:fb:
                    00:1d:4a:02:68:5d:b9:48:4e:3a:68:f1:9a:87:aa:
                    15:3c:b9:54:3b:32:ab:19:db:0a:a7:67:43:5a:df:
                    ed:f8:84:bf:46:4b:c3:78:bd:81:f9:ad:1c:b1:36:
                    2e:bf:06:c0:50:cd:6d:fb:14:f1:69:ee:0d:66:94:
                    d9:8d:90:85:6c:f0:9f:cb:19:bb:37:f0:d2:cc:10:
                    10:c6:93:1c:e7:d7:f2:78:e9:b1:38:35:af:6c:15:
                    aa:80:d5:f5:71:14:aa:34:78:a8:f2:c0:78:e9:a3:
                    ff:88:eb:21:be:56:6d:fa:4b:66:8a:f2:c0:77:1e:
                    53:a3:c8:a2:3e:74:b8:8e:fc:af:a0:74:13:eb:ef:
                    c2:a8:5f:9e:06:2e:26:4e:38:fc:28:60:04:09:c2:
                    fb:23:f5:1c:0c:46:cf:12:dd:e2:22:cb:95:2b:83:
                    4f:65:e1:11:8a:30:af:1f:9b:99:74:93:87:07:3b:
                    02:a4:ea:47:49:54:22:c1:65:cb:8a:0b:17:1a:cb:
                    c9:13:4c:fd:34:f4:a1:db:31:f6:54:38:d2:01:0b:
                    d2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:78:89:AB:02:8F:21:DC:22:77:B7:B0:DB:A5:7B:0C:6B:94:A2
            X509v3 Authority Key Identifier:
                keyid:BD:46:A9:8D:09:6A:D8:AE:77:F8:6D:CA:2F:11:E0:BD:0A:B0:F2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD46A98D096AD8AE77F86DCA2F11E0BD0AB0F2E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D61860C0604BA139BEB3D652902D018E6ED34FFB4002B4B34EBBF217B1F7776/0/34352e3137322e3231382e302f32342d3234203d3e20323637383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:67:0b:40:a1:bd:89:f1:36:28:e4:ab:30:62:67:44:c0:e7:
         37:5a:ef:fb:72:dd:be:87:45:9f:fa:ee:1f:5c:55:fc:d8:e8:
         c3:ae:d1:9d:08:6e:d9:56:10:4f:7c:70:75:b8:83:ec:8d:9b:
         1d:14:b1:1b:f6:ef:f4:40:4c:d3:ee:1f:0f:47:d5:3e:1d:a8:
         25:a1:4f:74:07:7f:cd:84:4e:a9:cb:f9:23:6c:5c:c8:63:0b:
         e1:04:7a:3b:87:d6:1c:ed:b3:08:b8:ae:88:b5:46:ea:b1:dd:
         f4:eb:7f:38:c3:36:55:17:66:99:c5:9b:af:8e:3d:5f:20:37:
         ea:42:d6:34:89:a6:c9:30:51:bf:b0:26:8f:f6:72:58:5c:d6:
         97:1e:3f:59:6d:23:44:92:66:4f:00:77:5b:1b:2c:78:58:05:
         5e:bb:a0:e5:3d:08:51:c8:26:a1:7a:6d:3b:ee:b1:11:dc:21:
         7a:d2:ff:c8:94:d4:3b:8e:7f:72:51:40:fd:ee:70:f8:21:5c:
         3c:73:18:49:f7:ca:e8:a8:0f:f5:af:fb:ce:57:33:83:8c:1b:
         3e:bf:78:a8:d7:12:ee:79:73:ca:ce:42:01:46:77:11:61:5c:
         3b:bd:94:04:21:13:ad:e7:63:ba:9c:08:55:84:9a:51:d9:2f:
         62:e2:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:38 2025 by rpki-client