Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa
File:                     34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          A+psMIRTrM//HV3Gznqt426vruqgaFKuP3rFSBvlnFo=
Subject key identifier:   1A:82:C0:4B:BA:D3:DB:1E:16:C2:67:E0:DC:7E:86:B3:A0:53:A7:E7
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       44440E7787603C1B3AE723C9BD8E74D5510242B5
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 20 Feb 2025 20:10:31 +0000
ROA not before:           Thu 20 Feb 2025 20:05:31 +0000
ROA not after:            Thu 19 Feb 2026 20:10:31 +0000
asID:                     265684
IP address blocks:        45.228.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:44:0e:77:87:60:3c:1b:3a:e7:23:c9:bd:8e:74:d5:51:02:42:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Feb 20 20:05:31 2025 GMT
            Not After : Feb 19 20:10:31 2026 GMT
        Subject: CN=1A82C04BBAD3DB1E16C267E0DC7E86B3A053A7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:30:2c:78:3d:85:2e:91:41:f7:40:46:9f:
                    ba:35:e6:9a:21:8e:43:39:64:92:78:03:4b:83:10:
                    ca:44:d4:62:27:ad:11:4b:f1:1f:6f:8a:d5:a1:28:
                    2e:60:cc:58:fa:11:4e:66:41:ea:0a:79:d2:d8:04:
                    4e:64:3c:1d:bb:99:37:23:01:dc:05:0a:af:82:4e:
                    0b:d4:48:cc:a9:d1:40:cb:d9:36:37:15:f3:5e:ea:
                    41:ca:ad:4f:fc:fe:b5:7e:91:5d:de:71:41:bb:7f:
                    c0:d5:7d:62:23:4c:3e:69:14:b1:30:67:b6:b8:6d:
                    b1:6c:ed:83:b1:8a:77:97:a1:73:dd:b3:11:6e:cf:
                    0c:07:32:82:69:d6:04:e3:f0:94:bd:1e:b6:8d:b8:
                    03:f3:89:60:25:45:01:11:b4:6d:02:61:17:c9:4a:
                    25:6a:42:77:c1:19:35:75:b0:fc:6f:bd:e4:8c:2c:
                    94:19:11:0f:a3:35:35:12:98:ee:57:38:33:a7:fe:
                    91:82:77:71:62:bc:94:f5:c3:3a:76:ec:e6:77:79:
                    e3:ad:a1:fd:79:68:a4:76:6b:4d:37:98:32:5e:41:
                    ba:c3:19:31:63:5a:06:43:16:dd:b5:a8:d8:e2:69:
                    18:75:e8:26:5b:c5:3e:26:7c:fd:48:01:7e:89:8e:
                    b3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:82:C0:4B:BA:D3:DB:1E:16:C2:67:E0:DC:7E:86:B3:A0:53:A7:E7
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3232382e3233352e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a8:a2:3d:e7:56:ab:d8:3c:73:8b:dc:05:b2:dd:ac:5d:12:
         36:77:c3:a9:46:3b:2a:27:63:4e:74:e4:01:68:c8:4b:ce:cc:
         90:4b:20:fc:5c:9a:e1:8d:f1:0f:a1:52:3f:6c:34:ec:2f:56:
         bc:97:fd:04:c0:bc:ad:7b:89:b0:4d:7c:e9:43:e2:af:2e:75:
         6c:44:80:c4:a1:b2:2b:d0:1d:70:5e:c5:e8:5e:3b:ac:26:4b:
         5d:ce:af:fc:d6:07:d9:91:da:fa:76:c1:1a:ba:c4:9f:8b:ce:
         e6:1f:cf:32:d1:50:d0:bf:ee:93:2b:e9:5a:3b:6e:ef:42:d3:
         9c:61:7f:53:c2:d8:c8:9b:fd:58:42:6d:d0:cb:d2:d4:3a:bb:
         f2:e8:c4:dd:76:5d:e1:fd:c0:73:be:e3:47:70:04:84:9d:0b:
         24:4d:c9:b5:00:5a:66:ec:63:9e:0f:17:13:29:90:a4:73:f5:
         bb:ea:f9:cc:f2:53:aa:1f:1d:9d:3d:18:b2:9d:5f:e3:c6:73:
         81:0f:30:b4:14:71:73:f7:8d:1a:aa:b9:aa:b2:61:56:c3:62:
         a9:76:43:61:eb:b5:ef:3a:71:a0:45:3c:56:05:00:41:15:dc:
         9c:34:53:b7:57:0e:71:9c:d6:53:4d:eb:c9:fe:75:1f:ea:46:
         b6:19:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:28 2025 by rpki-client