Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37332e302f32342d3234203d3e20323636363938.roa
File:                     34352e3232392e37332e302f32342d3234203d3e20323636363938.roa (raw, json)
Hash identifier:          J3f8RJ4aYCtdrnWDPeiZ9IXTAPDbLNCJ1OtgBsVJeE8=
Subject key identifier:   22:86:F1:18:EB:01:A3:35:D3:6A:29:FA:98:8A:C4:EA:E8:E1:BC:B7
Certificate issuer:       /CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
Certificate serial:       7BC9B146736651DAAB0F879359A6A4B0A146B682
Authority key identifier: C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37332e302f32342d3234203d3e20323636363938.roa
Signing time:             Tue 04 Feb 2025 20:06:28 +0000
ROA not before:           Tue 04 Feb 2025 20:01:28 +0000
ROA not after:            Tue 03 Feb 2026 20:06:28 +0000
asID:                     266698
IP address blocks:        45.229.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c9:b1:46:73:66:51:da:ab:0f:87:93:59:a6:a4:b0:a1:46:b6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C559B04771D8F6B48353C8C4430BDCCE24F336CD
        Validity
            Not Before: Feb  4 20:01:28 2025 GMT
            Not After : Feb  3 20:06:28 2026 GMT
        Subject: CN=2286F118EB01A335D36A29FA988AC4EAE8E1BCB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:0c:56:86:15:70:f2:0a:36:8b:c2:3c:99:
                    60:90:14:3c:e1:1c:e1:d0:44:d0:f3:27:05:43:be:
                    ef:dd:b3:13:09:f9:10:ae:4c:e4:ef:3a:21:fc:f5:
                    e7:17:e8:1b:44:2c:d2:65:79:78:73:3c:77:cb:33:
                    4c:1e:34:a9:84:d4:ef:94:34:e8:86:cc:0f:01:c4:
                    ee:e7:e4:41:bf:c0:50:95:4b:a8:6a:a7:91:79:89:
                    ee:24:2e:82:72:9d:38:be:cb:bf:80:71:45:32:fd:
                    8a:46:bf:8c:9c:5d:b2:9b:6b:55:d8:b9:07:56:69:
                    92:cd:2c:99:a9:82:d1:1a:a6:4f:f6:4a:7b:4b:09:
                    25:57:66:b8:66:45:86:c6:04:f4:85:91:3e:24:da:
                    c8:ec:bb:6f:65:64:99:71:f2:e1:ab:77:15:56:9e:
                    c0:e2:47:4d:ba:e3:d3:b4:bd:ff:af:2b:1c:31:14:
                    56:32:b0:de:33:1a:1b:58:c5:07:90:7e:80:4e:36:
                    55:b6:47:01:fa:cc:46:a1:0a:8c:83:12:0e:5a:94:
                    36:67:bb:66:8a:be:06:6a:b4:68:be:78:e5:aa:37:
                    bf:81:25:4f:a3:7b:42:64:38:69:64:9c:d6:98:35:
                    5f:94:91:00:df:7b:50:80:b1:59:5e:4c:11:4c:6a:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:86:F1:18:EB:01:A3:35:D3:6A:29:FA:98:8A:C4:EA:E8:E1:BC:B7
            X509v3 Authority Key Identifier:
                keyid:C5:59:B0:47:71:D8:F6:B4:83:53:C8:C4:43:0B:DC:CE:24:F3:36:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C559B04771D8F6B48353C8C4430BDCCE24F336CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A137F159C8016326FF3C2564ADA76A22D1C793223FCC5C06B4E55CCE3B2FAB99/0/34352e3232392e37332e302f32342d3234203d3e20323636363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ff:ad:40:c0:32:5c:a5:ac:28:8a:2d:2f:4f:05:e8:bc:c0:
         84:47:07:68:fa:94:f1:ef:0e:45:8b:17:12:9e:be:b0:ac:fe:
         61:9c:ab:a9:74:ad:e6:02:bf:18:74:9a:51:b9:24:5a:90:b4:
         00:d5:17:ea:42:39:1b:88:2c:a9:41:49:ee:8a:cf:99:a5:91:
         e9:6f:96:39:8a:13:3e:35:c9:82:50:a9:d4:c8:11:fb:0b:05:
         71:d1:7e:f4:b2:ab:7a:fe:c3:75:4e:72:dd:bf:8a:bd:46:e9:
         e5:23:ae:74:2b:55:72:81:23:de:cb:13:6f:c6:e3:fa:40:ae:
         a7:33:ab:8c:6f:a8:bb:ff:6d:78:da:66:66:ac:64:26:4f:45:
         87:9b:28:29:5e:fa:25:16:cc:7f:65:07:f3:6d:e7:6e:2c:b8:
         16:5e:ae:03:09:e6:7f:6b:bc:3a:a1:57:c1:69:6f:03:61:ab:
         c4:a0:2a:c9:24:79:77:4d:88:ce:c9:88:bf:14:f9:69:a5:82:
         2f:9a:17:a9:7d:ac:94:e3:d9:33:ff:80:7f:cb:a0:73:b0:01:
         e7:62:25:b0:5c:6d:6b:e6:bf:ca:47:88:6e:2e:55:22:5b:63:
         f1:a7:b2:79:94:64:c1:9f:85:26:ae:ce:fb:77:c6:af:db:e3:
         ab:80:ba:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:25 2025 by rpki-client