Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32342d3234203d3e20323637373938.roa
File:                     34352e3137332e31382e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          Eladgh0iaGKaP/e0NuMUSnRzo5zEjK9nGrcbkFgEr0M=
Subject key identifier:   C4:83:A9:3C:F1:0B:FC:32:D2:35:27:25:A2:A1:94:21:48:36:3F:37
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       0EAC0DD51888C7FA047989AB5940C6853C7170F5
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32342d3234203d3e20323637373938.roa
Signing time:             Tue 04 Feb 2025 18:53:45 +0000
ROA not before:           Tue 04 Feb 2025 18:48:45 +0000
ROA not after:            Tue 03 Feb 2026 18:53:45 +0000
asID:                     267798
IP address blocks:        45.173.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ac:0d:d5:18:88:c7:fa:04:79:89:ab:59:40:c6:85:3c:71:70:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Feb  4 18:48:45 2025 GMT
            Not After : Feb  3 18:53:45 2026 GMT
        Subject: CN=C483A93CF10BFC32D2352725A2A1942148363F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:38:61:2b:e3:6b:44:45:49:70:a7:49:73:
                    a1:c2:7b:f0:50:fa:5c:b2:3a:cc:1a:ff:1c:af:eb:
                    1d:ad:cd:94:6f:df:a5:66:8b:03:12:cf:f3:ad:04:
                    25:a9:73:1e:f3:0d:3c:8e:39:65:07:5c:06:6e:59:
                    e6:3b:43:0f:52:4f:3c:be:9d:46:17:6a:12:da:a0:
                    71:04:cd:a7:2e:79:d3:b5:3f:91:06:dd:98:83:27:
                    af:34:68:cf:3e:41:a8:21:e0:2d:b8:44:6a:fe:13:
                    64:6b:c2:a0:50:50:b2:21:91:11:f3:ff:d7:b3:7f:
                    32:5c:1f:7c:63:93:12:26:03:f6:04:72:fb:43:ea:
                    e3:a8:4b:73:2d:9a:34:12:cf:5c:e4:da:ce:ff:34:
                    f1:9e:c9:94:4d:af:bd:29:18:03:1b:4e:79:e9:5b:
                    4a:c3:58:c7:f1:33:56:c4:d9:49:c5:d8:91:cf:7d:
                    58:b4:a6:fb:9d:a0:0e:b2:18:12:d3:73:6c:a6:2a:
                    12:bb:ca:a6:c5:02:bf:28:48:a9:25:b9:a9:28:ea:
                    92:66:a5:22:07:e4:c5:c4:e6:58:56:ed:72:0c:8c:
                    86:2b:f1:99:03:17:e7:7d:8d:80:6c:3f:9a:97:44:
                    d5:c8:b3:63:39:8c:4b:7c:ec:57:aa:e2:32:a6:90:
                    c4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:83:A9:3C:F1:0B:FC:32:D2:35:27:25:A2:A1:94:21:48:36:3F:37
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31382e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:00:df:fe:bb:12:ba:be:6d:0d:fd:24:fe:50:66:99:00:
         ce:75:f2:51:fa:79:52:fc:b1:5a:e1:8d:df:f8:da:8f:30:e4:
         e7:97:21:a6:dc:86:4f:e8:6f:3b:52:97:a1:a9:2f:cf:b3:9b:
         30:d1:61:3e:d2:25:bb:b5:99:b8:e7:04:63:f7:37:cd:c3:52:
         3f:b0:5b:95:0a:16:4f:0e:04:c4:11:b7:2f:12:72:1e:e3:fb:
         49:83:e4:27:8d:5a:47:9e:7d:b9:41:c1:51:3a:44:06:e1:aa:
         b6:9b:4b:e4:4f:1d:72:4b:4a:27:f0:cd:a7:e8:c5:ce:51:41:
         35:fb:0c:c8:e5:3a:a9:e3:34:bd:58:ce:f9:b4:ac:66:2c:18:
         0e:99:60:20:5f:c2:bb:21:05:c5:a4:65:8b:1b:87:6d:ba:c9:
         e6:ac:92:b5:27:fa:41:10:b1:f0:4e:e2:71:1e:21:ea:b4:77:
         11:c1:b2:61:0e:9e:b8:7c:69:54:3e:f6:6b:a7:5c:d5:e5:b7:
         e9:27:2d:2e:98:44:ae:fa:7c:00:e4:74:83:67:f2:a7:d4:41:
         eb:46:39:d2:f1:77:f8:ed:a2:27:e6:48:b5:7e:5c:4b:74:84:
         12:04:16:88:59:97:28:4e:5c:e9:b2:0a:79:17:ff:af:43:6f:
         a6:ed:84:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:11 2025 by rpki-client