Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/34352e3233362e39322e302f32322d3234203d3e203237393833.roa
File:                     34352e3233362e39322e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          NpBYkzQlT5+j5L/dOlPtILm3SQbaIxqTnRqODIHcXQU=
Subject key identifier:   41:6A:CF:D4:33:D8:90:15:D5:4C:76:FB:DA:AA:99:7C:B7:55:C8:BA
Certificate issuer:       /CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA
Certificate serial:       58A13508B2B8BFFCA88DEA4248F5E79ACB19D05C
Authority key identifier: 7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/34352e3233362e39322e302f32322d3234203d3e203237393833.roa
Signing time:             Tue 04 Feb 2025 19:58:51 +0000
ROA not before:           Tue 04 Feb 2025 19:53:51 +0000
ROA not after:            Tue 03 Feb 2026 19:58:51 +0000
asID:                     27983
IP address blocks:        45.236.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a1:35:08:b2:b8:bf:fc:a8:8d:ea:42:48:f5:e7:9a:cb:19:d0:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F71990386C48366AC8CB13C8D5A52CF38D177AA
        Validity
            Not Before: Feb  4 19:53:51 2025 GMT
            Not After : Feb  3 19:58:51 2026 GMT
        Subject: CN=416ACFD433D89015D54C76FBDAAA997CB755C8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:a1:3e:e1:aa:0e:37:c8:19:d9:db:d2:76:
                    b4:09:3e:47:f3:5b:37:81:4e:45:8d:5b:9a:e9:f1:
                    dd:33:f5:a3:f2:79:91:01:73:0d:83:b7:64:be:8a:
                    71:24:3e:77:27:26:d4:f0:34:1b:44:0a:bc:3f:95:
                    59:8e:a1:04:85:73:bc:4f:94:f3:f2:3a:1f:c2:8e:
                    d4:c3:fa:9d:a7:db:b4:2f:d6:8e:1f:38:cc:cd:a3:
                    3f:79:03:93:62:7c:04:d8:bf:e2:42:c1:ba:f6:dd:
                    75:36:be:b0:2c:fa:b4:45:1d:9e:ca:79:07:25:aa:
                    21:c6:68:f3:70:91:77:44:f7:83:5f:de:59:26:0d:
                    a2:64:e2:77:81:64:8e:61:d4:e4:d4:03:69:cb:43:
                    b4:09:58:39:8e:10:9d:f7:22:52:e3:a9:1d:22:ef:
                    d6:ed:dd:a9:ee:81:9c:76:2a:a6:0e:f3:8e:40:fc:
                    e2:18:e4:71:9b:37:7c:90:cd:a2:10:e8:81:4b:b5:
                    d5:f9:92:6a:c3:78:26:71:55:b7:a7:fd:90:b9:bf:
                    66:ae:cb:37:c4:3e:d1:ab:34:cf:1f:04:08:ae:ca:
                    cd:40:68:57:10:9c:f5:b7:2f:19:2b:07:27:61:1f:
                    87:f9:37:c8:b0:af:55:fb:c8:91:0b:5e:b4:e7:d9:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6A:CF:D4:33:D8:90:15:D5:4C:76:FB:DA:AA:99:7C:B7:55:C8:BA
            X509v3 Authority Key Identifier:
                keyid:7F:71:99:03:86:C4:83:66:AC:8C:B1:3C:8D:5A:52:CF:38:D1:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F71990386C48366AC8CB13C8D5A52CF38D177AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7902B7B737E59C67DBC1BBDE151603D60749ADD80902EA8EC986AA0E830719B/0/34352e3233362e39322e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:40:de:b5:c5:f3:53:9c:6e:9a:37:8b:b1:b7:c6:30:ea:
         54:c5:19:35:ad:62:8d:93:a6:30:48:f5:24:dd:ec:71:1c:60:
         41:2f:4e:55:1c:ee:f7:e3:2d:7a:3a:57:25:59:15:44:c3:a9:
         9e:53:2b:07:3d:97:aa:ec:54:77:7c:8a:25:be:ec:2a:7a:14:
         42:5b:40:7c:3b:cf:98:13:58:28:61:6f:cc:7c:2f:f5:c5:74:
         9c:12:e5:81:7f:8f:a2:94:86:46:ea:ff:29:8b:8b:60:e9:dd:
         2c:cf:5a:f4:30:12:01:bb:83:fb:42:c4:f1:6d:2b:2f:c7:92:
         da:70:33:8e:7b:49:7d:53:d4:0b:bf:62:27:5d:f0:12:79:d4:
         45:ed:40:43:f6:1e:62:1d:ea:58:31:60:46:db:bb:ce:5e:30:
         47:21:06:6c:17:d3:78:73:09:12:48:15:48:0b:e1:f5:7b:05:
         11:ba:2c:e8:c6:ab:3c:0a:67:66:ba:30:3b:af:24:4e:8e:a6:
         33:a3:bb:ae:6a:d4:a1:0e:e4:58:33:dd:e5:43:fc:aa:b9:7d:
         44:2a:26:2b:f7:be:d8:a8:8f:a7:9c:61:56:af:45:9d:aa:ad:
         4b:73:44:73:b6:3e:2f:a1:f6:35:e0:27:33:dd:69:d4:7d:19:
         9b:6e:a7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:02 2025 by rpki-client