Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131392e302f32342d3234203d3e20323635363834.roa
File:                     34352e352e3131392e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          DAh44+bJsJkrKhdhZ/Rth1N+UxlPQcmrWxtXYLBglJM=
Subject key identifier:   FC:40:F2:81:29:E1:8F:75:E2:5B:E6:70:38:12:E0:A6:3E:9A:DB:7C
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       36D16037C7AE29C34357CACA23AEBFCE933DCB94
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131392e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 20 Feb 2025 20:10:32 +0000
ROA not before:           Thu 20 Feb 2025 20:05:32 +0000
ROA not after:            Thu 19 Feb 2026 20:10:32 +0000
asID:                     265684
IP address blocks:        45.5.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d1:60:37:c7:ae:29:c3:43:57:ca:ca:23:ae:bf:ce:93:3d:cb:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Feb 20 20:05:32 2025 GMT
            Not After : Feb 19 20:10:32 2026 GMT
        Subject: CN=FC40F28129E18F75E25BE6703812E0A63E9ADB7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:f9:a2:e7:b8:b6:a5:aa:14:ec:87:7d:b7:
                    e6:0d:22:f8:4c:11:55:0f:05:f3:80:4e:c6:38:94:
                    2f:bc:a5:e5:37:86:f6:bc:3e:75:34:ce:51:d3:20:
                    bd:6b:ce:2c:d2:f6:00:68:9d:2d:07:86:55:b3:66:
                    84:f8:33:09:32:32:e9:49:56:a2:fc:d7:d2:ed:8e:
                    4a:e8:23:9b:64:ed:4f:ae:70:70:ce:a0:38:63:bd:
                    47:f0:a8:4c:58:69:90:d1:07:7b:f7:b8:4b:4c:c1:
                    52:d6:3d:77:3d:23:9e:a6:4f:4d:af:4e:c9:9a:2e:
                    37:08:99:22:21:08:16:28:93:ec:71:d4:00:f4:8a:
                    f8:59:27:8d:b5:02:69:c5:14:4d:1e:ee:47:0b:1b:
                    9e:00:c8:97:8d:80:5c:8e:b4:8e:86:29:39:52:47:
                    90:97:72:68:06:09:07:6c:13:9e:0a:78:0d:46:12:
                    aa:f3:5e:fd:66:3f:a4:f3:46:42:34:c2:40:9d:23:
                    d8:d0:7e:91:28:a9:e1:4e:ee:67:f1:df:30:f3:e2:
                    bb:b5:19:35:3f:f0:49:17:d1:69:36:04:47:d2:35:
                    a5:68:a7:ae:b6:fe:be:b1:ea:91:ae:b8:9a:04:99:
                    92:3d:07:46:59:13:30:7d:40:03:ac:f4:9f:c5:c0:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:40:F2:81:29:E1:8F:75:E2:5B:E6:70:38:12:E0:A6:3E:9A:DB:7C
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e352e3131392e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:27:ef:63:4d:fc:7d:4c:56:da:2e:c2:d5:d1:e2:1a:d6:bd:
         3c:a3:3b:71:b9:0f:23:f2:62:2b:11:9b:11:18:19:24:b6:6c:
         2f:7c:f5:7d:a6:f2:30:eb:3c:1e:e3:07:40:1d:d0:d4:38:39:
         b5:37:35:07:53:90:b6:45:34:39:49:1c:af:4c:f6:19:2b:9e:
         6e:4f:89:68:d7:14:ca:75:26:9e:96:45:19:30:56:33:85:49:
         ea:f4:a5:a6:8d:44:ee:00:47:f2:a6:bd:25:4b:17:ea:b1:41:
         a6:21:50:30:77:00:20:95:76:53:13:1d:00:68:2d:c1:3a:9e:
         94:dd:9f:3e:4b:64:66:c6:9a:ac:3e:94:c6:d7:3d:02:b1:08:
         6b:a7:e7:08:4e:8c:d9:a8:c9:12:5b:d7:cc:eb:5d:68:17:35:
         bd:e5:63:eb:4d:54:78:ce:b5:09:41:8f:3e:a3:71:a2:c9:69:
         24:8c:07:a6:b6:0d:0d:82:eb:69:a9:20:d4:90:e0:66:2b:63:
         8e:53:96:33:40:42:f9:c4:bb:2d:dc:12:96:3f:18:1b:6a:db:
         e0:e7:83:03:5c:dc:25:bf:37:fd:a7:ec:a5:5f:25:2a:c4:4d:
         02:12:f5:77:21:c1:95:fb:13:18:7c:f8:21:91:20:25:46:f9:
         7d:80:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:29 2025 by rpki-client