Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32332e302f32342d3234203d3e20323639373938.roa
File:                     34352e3138362e32332e302f32342d3234203d3e20323639373938.roa (raw, json)
Hash identifier:          ObcIzpntqo60HKtQTDaW9Il9F0JHEeKUwEM9ioeOfGs=
Subject key identifier:   2B:F6:C7:73:BF:BA:AC:FE:51:1B:A4:22:A1:83:9A:BD:20:50:4A:F4
Certificate issuer:       /CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
Certificate serial:       7734303A8AFD477194286AC496EF8FB6BE0DBC9B
Authority key identifier: EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32332e302f32342d3234203d3e20323639373938.roa
Signing time:             Tue 04 Feb 2025 18:36:52 +0000
ROA not before:           Tue 04 Feb 2025 18:31:52 +0000
ROA not after:            Tue 03 Feb 2026 18:36:52 +0000
asID:                     269798
IP address blocks:        45.186.23.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:34:30:3a:8a:fd:47:71:94:28:6a:c4:96:ef:8f:b6:be:0d:bc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED
        Validity
            Not Before: Feb  4 18:31:52 2025 GMT
            Not After : Feb  3 18:36:52 2026 GMT
        Subject: CN=2BF6C773BFBAACFE511BA422A1839ABD20504AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3e:7e:0a:e7:8f:3f:da:b0:dc:08:19:2e:91:
                    2c:ae:a0:6c:eb:62:fa:9e:2b:18:c4:e7:4a:ec:e4:
                    d5:c7:2b:62:af:20:40:fb:b5:61:2c:20:2c:43:7a:
                    93:16:50:e9:6c:27:c1:27:bb:40:0a:d2:5d:8a:74:
                    38:45:6d:54:01:d4:0e:13:1f:6c:17:2a:3a:4d:e9:
                    99:3d:1a:97:52:66:3f:62:e8:5f:f7:61:95:f9:b7:
                    2a:e9:5c:3a:75:e9:99:e4:27:2e:33:84:9d:e0:20:
                    c1:51:8e:01:67:85:d8:11:7f:1e:d2:5c:27:5a:b1:
                    6c:f6:e4:a1:1c:bd:53:f7:d4:7f:75:85:5e:72:80:
                    1f:38:ec:b7:5e:7f:fd:c6:bf:d9:e2:57:e9:79:d9:
                    4e:a8:65:36:11:1f:8d:ba:31:fa:e9:bb:9b:8d:f9:
                    fe:01:33:50:aa:89:46:39:90:5a:c9:ea:7c:5c:64:
                    97:9c:40:df:66:b0:71:56:8c:6c:7b:a6:ac:b9:76:
                    02:34:9a:04:57:75:92:e4:3f:3d:6a:63:73:01:63:
                    87:72:05:df:3e:b9:30:b8:0f:fc:c9:e8:8a:9e:58:
                    7f:6d:0f:6f:f2:2d:54:8d:77:13:91:47:c6:73:50:
                    2c:b6:08:76:8f:9e:dd:ec:ff:a6:0d:55:5a:9c:1a:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F6:C7:73:BF:BA:AC:FE:51:1B:A4:22:A1:83:9A:BD:20:50:4A:F4
            X509v3 Authority Key Identifier:
                keyid:EA:7A:F6:DB:EB:46:9C:DF:D2:0B:7B:6B:09:28:D4:CC:B4:7C:D6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA7AF6DBEB469CDFD20B7B6B0928D4CCB47CD6ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9F5116F7F1AEE03DA87D8555060B72F49006DF4FA78D4D0950FF7E6FCC3E5530/0/34352e3138362e32332e302f32342d3234203d3e20323639373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:ac:b2:88:b0:b6:b2:80:6b:b0:b9:d7:2c:90:de:dd:43:
         9c:b4:17:40:48:18:29:bf:03:fc:0a:f4:08:00:ff:60:7a:30:
         f4:65:5f:50:5a:6b:bf:df:ee:60:f3:04:12:9d:94:d4:4c:39:
         01:5d:6a:c4:71:57:61:db:65:b0:c3:26:9c:1f:80:ff:e1:08:
         4d:e6:9c:52:7c:79:98:a1:02:13:97:ea:9b:f7:48:55:ef:88:
         b9:42:5b:df:43:39:99:03:45:74:39:73:87:83:74:b5:47:f9:
         f7:fc:06:ae:8a:56:49:24:a5:ad:39:b1:29:37:1e:06:96:cf:
         50:fb:1f:cf:ea:d5:0d:b7:2e:e7:fe:4e:b6:f4:70:6e:6c:1b:
         14:be:2c:4c:a7:b9:79:1f:af:00:03:3c:b8:8a:24:fd:04:bd:
         5b:88:5b:06:36:e6:c6:8e:89:8e:c4:5e:f7:fe:cb:44:e5:e9:
         50:9a:12:54:03:fb:98:e9:f8:35:ca:2a:c8:89:16:6d:c5:b5:
         d1:71:86:90:7e:77:78:d1:0c:f7:67:3b:45:7a:4f:9e:b6:b5:
         fc:15:1f:18:75:cd:47:b4:15:34:48:43:45:c8:b4:4c:b2:c5:
         d0:d8:a4:ca:16:59:cb:75:6e:5d:a6:31:4c:04:48:7b:05:b1:
         67:81:00:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:49 2025 by rpki-client