Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa
File:                     34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa (raw, json)
Hash identifier:          +D1cDR9F8FGJ6XOl4UiU184yHF0SjIU3m8FHmzFAbjg=
Subject key identifier:   ED:82:17:F1:6F:21:4F:BD:95:1B:C4:20:1C:15:F0:FB:06:C3:08:51
Certificate issuer:       /CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
Certificate serial:       13EBC68BB85AD72687D8DAA38D71B3EBBDC211FA
Authority key identifier: C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa
Signing time:             Tue 04 Feb 2025 19:58:26 +0000
ROA not before:           Tue 04 Feb 2025 19:53:26 +0000
ROA not after:            Tue 03 Feb 2026 19:58:26 +0000
asID:                     269886
IP address blocks:        45.191.109.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:eb:c6:8b:b8:5a:d7:26:87:d8:da:a3:8d:71:b3:eb:bd:c2:11:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C45AC49B8C7461E59C144E0149C60D4F74132A43
        Validity
            Not Before: Feb  4 19:53:26 2025 GMT
            Not After : Feb  3 19:58:26 2026 GMT
        Subject: CN=ED8217F16F214FBD951BC4201C15F0FB06C30851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:0f:71:3d:95:c8:d1:05:6b:9b:e6:b8:33:
                    b2:c2:43:b2:5d:6d:07:b2:d7:bd:83:cc:d5:04:c9:
                    26:0b:83:d6:16:5c:bf:85:ff:4d:1c:01:90:17:fe:
                    7a:fa:72:7e:21:ef:4f:b2:a8:fa:2c:2b:8c:73:08:
                    17:86:29:66:4d:49:bb:0f:25:c1:ee:f2:49:a9:59:
                    d9:aa:1a:0c:b5:ae:4f:d3:48:47:1a:e7:26:72:41:
                    e3:c3:e2:b1:33:87:7d:d2:a9:35:11:16:65:d7:db:
                    fb:aa:33:00:1c:21:3a:8a:d9:1f:90:7a:87:3e:0d:
                    03:9a:9b:f6:19:31:b9:38:08:47:6f:36:ac:1e:b7:
                    0e:b2:26:b9:6e:7b:18:c5:38:41:9b:90:44:65:39:
                    88:3d:85:1d:a0:b5:7c:ed:aa:d8:03:67:09:99:c6:
                    a9:23:cd:ee:db:21:81:78:5b:f7:5f:b2:08:37:26:
                    2e:1d:28:e9:5f:ea:6c:2a:41:c1:5b:44:81:09:12:
                    39:58:46:46:d3:8d:af:e3:b7:a3:31:2c:d2:f0:3d:
                    89:21:ea:0e:d4:68:34:a1:d1:32:df:91:41:24:a5:
                    f8:06:28:eb:43:51:92:94:0f:18:b9:80:10:48:e5:
                    f5:bb:a9:a6:ed:50:43:8f:d7:61:7e:af:5f:7f:d7:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:82:17:F1:6F:21:4F:BD:95:1B:C4:20:1C:15:F0:FB:06:C3:08:51
            X509v3 Authority Key Identifier:
                keyid:C4:5A:C4:9B:8C:74:61:E5:9C:14:4E:01:49:C6:0D:4F:74:13:2A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C45AC49B8C7461E59C144E0149C60D4F74132A43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A970DD402FA25F52B8F8947DD387547A7791A758B092BC2912E98A9D75092A6F/0/34352e3139312e3130392e302f32342d3234203d3e20323639383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:84:c0:78:d8:a5:ba:c8:7c:5a:c6:08:64:30:80:d4:37:a9:
         3b:a6:0e:e3:3e:bd:07:95:3a:b4:60:b9:fe:69:e3:5e:93:68:
         ba:da:5a:48:9a:a5:dd:2b:83:17:41:76:c7:06:4e:6b:4c:64:
         b5:92:08:e8:bf:2c:5e:ef:82:c3:f5:f7:b1:cf:2c:fb:41:c7:
         64:5c:a2:71:d8:78:e4:c5:2a:dc:0e:36:b9:73:3e:a8:e7:e7:
         ed:47:92:b8:4e:d3:0d:5c:62:68:e0:c3:26:16:c6:b1:65:0b:
         b2:c8:4d:e8:e0:2b:f8:bf:dc:10:d6:b2:eb:23:ca:9f:fb:29:
         54:f4:e1:70:70:39:51:aa:43:d6:27:8d:25:53:78:5d:22:e4:
         aa:83:e7:7b:b5:eb:c8:f6:63:05:6f:63:3e:3b:8f:b3:55:31:
         9e:29:e9:f6:5f:b3:0f:9a:24:a2:16:00:dc:86:25:e0:f9:cf:
         6d:54:c8:6d:27:85:76:0f:d4:33:c4:43:82:d7:95:fc:12:ae:
         b7:74:19:f5:a8:25:b1:f3:f1:f8:8a:77:66:4e:88:06:89:1b:
         b5:ba:24:8b:33:e1:10:06:e5:9b:53:73:60:69:49:ce:46:4d:
         35:0e:4d:b6:96:10:02:9c:a2:1c:e1:c3:6c:23:ae:93:bf:7e:
         02:5e:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:11 2025 by rpki-client