Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/34352e3137372e36342e302f32322d3234203d3e20323637383730.roa
File:                     34352e3137372e36342e302f32322d3234203d3e20323637383730.roa (raw, json)
Hash identifier:          D+TZwZlUXqxI+v2xDa3hn1/ROCcWHZwvWnCaWIsPI3w=
Subject key identifier:   82:A3:93:07:B6:CB:5F:51:56:97:28:57:14:3A:0E:73:CE:A0:E3:A0
Certificate issuer:       /CN=9B4178566D9550E5296B929731ECBD639DF1705A
Certificate serial:       2099D44C54C91528618AA0219397AF43ABA7E38F
Authority key identifier: 9B:41:78:56:6D:95:50:E5:29:6B:92:97:31:EC:BD:63:9D:F1:70:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/34352e3137372e36342e302f32322d3234203d3e20323637383730.roa
Signing time:             Tue 04 Feb 2025 18:50:22 +0000
ROA not before:           Tue 04 Feb 2025 18:45:22 +0000
ROA not after:            Tue 03 Feb 2026 18:50:22 +0000
asID:                     267870
IP address blocks:        45.177.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:d4:4c:54:c9:15:28:61:8a:a0:21:93:97:af:43:ab:a7:e3:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4178566D9550E5296B929731ECBD639DF1705A
        Validity
            Not Before: Feb  4 18:45:22 2025 GMT
            Not After : Feb  3 18:50:22 2026 GMT
        Subject: CN=82A39307B6CB5F5156972857143A0E73CEA0E3A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b6:0c:e7:28:f5:69:e5:37:43:ef:6b:07:f4:
                    55:21:99:2a:ba:c0:c6:bf:77:7a:29:7c:de:79:9b:
                    20:ed:76:42:3b:65:df:1c:f7:52:fb:50:8a:1e:0f:
                    61:bd:1c:fc:4f:65:a8:c7:a1:97:64:79:78:37:24:
                    b1:d4:6e:9d:a6:24:0b:e7:0a:1b:22:c6:54:ca:47:
                    01:84:aa:17:58:7b:30:73:0d:0d:f1:d7:26:d8:c3:
                    12:5a:f0:49:71:61:1a:3d:69:6e:8f:73:45:9c:08:
                    b1:70:3f:14:18:39:6a:09:ea:c2:81:70:c0:35:5e:
                    93:f1:00:87:a6:a6:79:52:ca:96:e6:4e:2a:c4:83:
                    65:5f:ac:89:ec:d8:4a:47:e5:69:96:f9:e9:34:13:
                    d1:96:32:52:53:76:d0:70:70:3e:99:58:d7:3b:eb:
                    c8:95:2c:9e:d7:49:7d:25:96:d5:ea:d3:8e:40:59:
                    48:a7:c5:4f:c4:60:e9:8d:f7:08:1c:af:d4:af:84:
                    50:73:7a:85:fb:f5:e7:ce:75:a2:41:8c:31:e2:4f:
                    d1:b3:a0:46:c4:ea:e8:72:49:d6:64:aa:63:37:b0:
                    0a:ab:27:d5:67:9b:d1:7e:68:b1:e8:06:59:1b:62:
                    0f:30:82:34:db:7a:da:03:1b:ea:60:bf:0e:6f:b4:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A3:93:07:B6:CB:5F:51:56:97:28:57:14:3A:0E:73:CE:A0:E3:A0
            X509v3 Authority Key Identifier:
                keyid:9B:41:78:56:6D:95:50:E5:29:6B:92:97:31:EC:BD:63:9D:F1:70:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/9B4178566D9550E5296B929731ECBD639DF1705A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/34352e3137372e36342e302f32322d3234203d3e20323637383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:e4:7a:dd:78:2f:11:e4:09:72:57:cf:c1:63:21:c9:84:5b:
         48:54:4c:47:ee:b3:8f:9d:11:e5:35:eb:1a:8c:de:a8:c1:11:
         5f:3d:01:ce:2d:cf:33:ed:48:01:7f:5c:6f:d6:0a:96:db:48:
         c0:79:7e:ed:f5:37:8f:c6:f5:af:48:07:03:88:95:f0:68:3f:
         0c:ce:1d:bf:f8:54:5c:1e:53:c0:a4:ea:48:d9:98:2d:97:93:
         0a:14:3b:46:5a:79:ed:40:87:3d:cf:07:de:0d:27:85:37:09:
         18:01:81:1b:e1:a8:fc:84:95:4f:2a:81:65:95:21:e6:20:61:
         c6:0b:89:fd:46:99:22:86:c7:2a:ba:6f:c1:fa:cd:78:8c:74:
         19:9d:9b:10:91:b5:82:4f:90:ac:34:ca:dd:f1:43:de:bb:76:
         e1:4c:d4:f4:8a:27:e5:05:77:1a:a1:d8:4e:58:38:9e:ec:48:
         92:0b:99:fd:f2:ce:d5:a4:8c:40:01:37:c2:fa:cf:93:56:25:
         57:e4:14:09:a0:a8:68:df:26:a9:5e:ea:47:28:bf:71:3e:16:
         4c:36:c9:4e:cf:8e:8b:de:89:07:a3:cb:08:77:6f:18:81:90:
         e9:b7:c0:55:f3:bd:b8:d7:3d:13:8d:3e:e2:26:95:4f:61:1d:
         78:ea:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:00 2025 by rpki-client