Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31392e302f32342d3234203d3e20323637373938.roa
File:                     34352e3137332e31392e302f32342d3234203d3e20323637373938.roa (raw, json)
Hash identifier:          ojSbAnfgsXsUwD+I8MCWJNoIRxmKeZRQAsz/FZ3Q/Sg=
Subject key identifier:   7C:38:A6:DE:C9:47:8F:CC:07:22:BE:13:9B:DA:33:C4:A4:71:9D:93
Certificate issuer:       /CN=378C4A178BD1442C656AA12825B69BFF74217F32
Certificate serial:       258A12C6669DDC58B9D42BEE778ADB4FD9E4C5E0
Authority key identifier: 37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31392e302f32342d3234203d3e20323637373938.roa
Signing time:             Tue 04 Feb 2025 18:53:45 +0000
ROA not before:           Tue 04 Feb 2025 18:48:45 +0000
ROA not after:            Tue 03 Feb 2026 18:53:45 +0000
asID:                     267798
IP address blocks:        45.173.19.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:8a:12:c6:66:9d:dc:58:b9:d4:2b:ee:77:8a:db:4f:d9:e4:c5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378C4A178BD1442C656AA12825B69BFF74217F32
        Validity
            Not Before: Feb  4 18:48:45 2025 GMT
            Not After : Feb  3 18:53:45 2026 GMT
        Subject: CN=7C38A6DEC9478FCC0722BE139BDA33C4A4719D93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d4:50:56:83:0c:5d:ea:74:57:a8:42:07:ec:
                    66:3a:62:4c:de:d1:22:99:2b:26:a0:37:e5:bb:11:
                    6d:a1:b5:5f:b1:60:96:ec:91:51:8b:31:13:06:2c:
                    5d:b0:8a:fe:7c:da:cf:49:9c:32:ad:93:bd:18:89:
                    92:96:a2:27:82:53:92:92:d5:8c:14:8b:f2:61:c9:
                    ae:3c:16:a7:85:db:02:27:71:dd:02:a8:9d:3a:4c:
                    e6:28:56:d8:2c:da:df:b9:8e:db:ac:7c:f3:d8:ce:
                    a2:97:c5:c6:d2:b4:e6:3a:7f:2b:17:d2:f2:ed:2e:
                    3a:f1:e5:94:bf:5f:f2:6e:f6:67:79:f6:58:c5:f6:
                    03:64:67:e4:b6:54:4a:62:6c:6a:a7:a8:59:e6:41:
                    ff:c1:6c:46:1e:ae:bc:cf:1e:4c:2d:5b:21:22:99:
                    d0:1c:83:09:b7:2f:77:4c:b9:da:89:cd:67:05:e3:
                    5b:67:fb:1a:09:f5:ca:f5:fb:2d:f6:16:55:00:b5:
                    a1:1e:de:41:f7:06:48:b7:ca:56:a3:21:dc:8d:30:
                    61:f4:45:d6:bb:f7:a6:8e:c0:d4:ff:ea:07:b1:fe:
                    51:4e:9d:aa:b0:6a:8c:f6:8c:07:ea:95:97:31:71:
                    ea:d5:f5:d1:14:31:ff:73:05:e2:82:38:e0:d1:f5:
                    5a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:38:A6:DE:C9:47:8F:CC:07:22:BE:13:9B:DA:33:C4:A4:71:9D:93
            X509v3 Authority Key Identifier:
                keyid:37:8C:4A:17:8B:D1:44:2C:65:6A:A1:28:25:B6:9B:FF:74:21:7F:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/378C4A178BD1442C656AA12825B69BFF74217F32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/378C4A178BD1442C656AA12825B69BFF74217F32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A7850FD8272338AEC87A852A6B9EF86C9DE2FAF7883E15556010F70E55E47DD6/0/34352e3137332e31392e302f32342d3234203d3e20323637373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:86:b1:4d:24:92:e0:1b:0a:ab:8f:d7:fe:6a:8a:65:c1:
         bc:53:dd:f8:88:5b:18:b0:7f:c4:42:91:4e:35:a8:d3:09:42:
         36:9d:6f:a3:82:f2:df:9b:9a:3f:76:94:fc:51:6d:bb:34:5d:
         6a:39:8b:bc:1b:60:0c:45:23:3c:66:00:a1:23:ab:3f:33:64:
         71:1a:42:cd:e0:de:39:e7:cf:48:1d:a4:fd:14:cc:de:21:11:
         2a:cd:b4:97:5c:f9:57:63:42:23:b7:f6:e5:46:e6:e6:42:20:
         57:3a:4f:70:7f:a0:10:60:65:5d:dc:7d:ca:55:23:8b:2a:6f:
         0e:20:e9:db:90:34:4b:ac:e6:17:3b:f9:e3:39:a8:89:9a:ac:
         a3:ee:dd:34:60:2a:dd:c2:9d:aa:34:ba:b6:a9:da:c4:5b:a7:
         57:08:68:14:9b:b3:a3:42:bf:45:ea:8f:37:4a:21:29:cb:1d:
         98:03:d8:6b:35:b3:36:54:da:e7:81:0e:c7:9c:8e:5c:3f:e7:
         d2:55:70:4c:64:92:28:72:64:f5:24:e7:d0:3e:87:08:d2:6e:
         df:e7:88:c3:a4:45:3f:7c:90:11:7f:52:28:d6:3f:1b:10:b5:
         2e:2e:26:43:1b:8e:98:50:44:ab:99:c7:64:82:86:f2:ec:77:
         1b:f5:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:17:45 2025 by rpki-client