Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131372e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          zJYRrMEgR0fGY5KTMcdm7YR1xHcHCE9L576eYDGyAhY=
Subject key identifier:   53:31:59:42:EF:16:A4:5A:67:24:9A:11:5D:66:A7:F2:1C:8C:FA:43
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       0CFD0A35C1446DA52985515866586FFD80CFC553
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 20 Feb 2025 20:10:32 +0000
ROA not before:           Thu 20 Feb 2025 20:05:32 +0000
ROA not after:            Thu 19 Feb 2026 20:10:32 +0000
asID:                     265684
IP address blocks:        45.5.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:0a:35:c1:44:6d:a5:29:85:51:58:66:58:6f:fd:80:cf:c5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Feb 20 20:05:32 2025 GMT
            Not After : Feb 19 20:10:32 2026 GMT
        Subject: CN=53315942EF16A45A67249A115D66A7F21C8CFA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:62:ab:0c:27:e5:9c:b8:c9:9e:7e:25:7f:60:
                    fe:e4:24:25:5e:a5:7c:72:a8:62:f6:d4:c4:4b:71:
                    92:7a:d6:13:ce:14:95:f2:50:16:eb:55:82:9c:4e:
                    cc:1c:52:e9:b4:71:ac:08:a5:55:f0:f2:35:6b:ab:
                    c3:9c:00:32:d1:93:76:ff:70:99:82:10:34:01:e4:
                    db:ca:5e:8a:d4:eb:e6:76:68:bb:15:0b:2f:2c:78:
                    5c:63:a9:f9:31:9d:6a:35:04:1d:b2:bb:0b:3a:89:
                    bf:fe:57:3e:76:db:7f:60:0e:d0:63:99:09:61:8b:
                    ca:76:ce:e1:01:8b:2b:70:9a:2d:b6:83:bf:1f:9f:
                    63:20:70:5f:2b:60:a7:bd:ad:58:60:41:d9:9f:98:
                    69:a1:b2:39:8e:49:b3:28:01:29:ec:6e:56:d6:94:
                    c9:c8:2e:68:c9:4c:55:85:6d:59:7c:12:f4:09:bb:
                    c7:89:1c:d0:9b:d2:18:40:96:7b:2a:49:54:eb:e1:
                    01:58:b8:0e:f0:90:a4:f4:00:47:97:6e:f2:6a:b5:
                    85:45:5f:38:ad:9a:ea:c6:2e:ef:35:63:a3:88:00:
                    45:aa:5e:80:31:e9:3a:51:29:d7:a9:a2:38:d9:67:
                    9c:2b:b1:3f:25:df:81:53:48:56:ab:80:75:84:3e:
                    b1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:31:59:42:EF:16:A4:5A:67:24:9A:11:5D:66:A7:F2:1C:8C:FA:43
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131372e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:3d:bc:1b:1a:c7:47:76:c8:12:7f:a9:93:e6:b9:dc:26:69:
         9e:7c:93:e0:60:70:d4:c3:2a:94:83:90:e8:91:9f:68:4f:58:
         51:1c:b9:b8:b1:f5:21:5a:33:18:69:91:69:ed:67:7b:c5:5b:
         04:ce:2f:81:77:c2:c8:73:2c:6b:23:c0:70:5c:f1:69:dd:4b:
         63:07:97:76:1a:26:5d:b9:60:b3:7a:b1:21:7b:40:d7:d7:ac:
         3b:8b:4c:08:90:3e:e2:c7:bc:35:b5:2b:59:e3:b2:3b:ee:eb:
         ac:d3:1d:57:ee:62:43:89:f0:79:02:99:7f:b9:87:01:ed:8d:
         6d:fe:03:94:11:32:67:fb:70:bc:39:c9:f3:19:08:e8:ed:cd:
         e3:ba:70:80:2e:0c:ec:e3:20:07:8b:5a:76:47:c1:3b:42:ff:
         1d:63:96:5d:fa:2c:ab:e2:04:03:be:ba:a3:29:ba:1a:45:34:
         02:2d:91:0d:7b:79:0e:3c:56:73:82:9d:4e:62:b7:01:dc:9d:
         97:dc:17:02:41:dc:3a:c6:99:85:3f:0d:83:a2:f2:10:e5:f7:
         f9:04:25:00:1f:5c:97:0f:d4:dc:d1:a9:46:36:a4:8d:1d:fc:
         45:60:b2:12:75:3c:59:50:c4:0f:4a:26:b5:ea:6a:70:77:b3:
         39:eb:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:06 2025 by rpki-client