Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130382e302f32322d3234203d3e20323639383433.roa
File:                     34352e3138392e3130382e302f32322d3234203d3e20323639383433.roa (raw, json)
Hash identifier:          nuJX38RlpOleJqSWtCUsXA5t26X26Q5E/7LyEKVdzsU=
Subject key identifier:   7E:24:7A:CD:36:C2:D0:62:97:A0:C8:E1:1E:0F:51:3D:D7:93:8D:F2
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       110E58F72C04AE485AECE762DEEFCADB51606B54
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130382e302f32322d3234203d3e20323639383433.roa
Signing time:             Wed 05 Feb 2025 15:40:00 +0000
ROA not before:           Wed 05 Feb 2025 15:35:00 +0000
ROA not after:            Wed 04 Feb 2026 15:40:00 +0000
asID:                     269843
IP address blocks:        45.189.108.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0e:58:f7:2c:04:ae:48:5a:ec:e7:62:de:ef:ca:db:51:60:6b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Feb  5 15:35:00 2025 GMT
            Not After : Feb  4 15:40:00 2026 GMT
        Subject: CN=7E247ACD36C2D06297A0C8E11E0F513DD7938DF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:d4:8a:23:bf:0a:e5:55:d0:a0:84:1a:73:
                    c4:86:09:a1:6e:88:b8:95:4e:1b:c2:82:fa:ce:27:
                    19:93:ff:af:11:7a:87:09:89:53:ca:49:ad:11:94:
                    c5:e8:ed:41:39:54:5e:82:1b:6d:9a:ae:5e:38:19:
                    75:49:d9:e6:c3:1f:8b:88:9f:f2:ae:4c:91:85:00:
                    78:51:b1:10:13:8b:2d:f8:e5:ff:bd:cd:b7:7a:50:
                    46:cf:2b:c0:69:fe:10:cf:54:d8:d8:41:54:3f:91:
                    8a:ca:76:4b:85:32:63:06:e1:20:f4:c1:83:b4:ba:
                    ee:b4:6f:fd:a6:32:b7:34:61:b2:f8:b2:de:bd:76:
                    84:71:71:56:4d:2d:b9:2e:dc:a1:eb:14:85:e6:62:
                    18:ba:bd:77:ea:89:6a:bf:85:7b:cd:10:c9:e0:17:
                    70:2c:a0:5b:90:b2:48:30:bf:63:f3:b6:e7:fe:05:
                    a5:93:74:56:11:8a:c0:ae:2b:6b:0c:e4:a1:9e:8f:
                    42:ba:43:dd:2f:10:5b:b6:6c:26:1c:03:a9:f2:b0:
                    34:06:47:c5:fd:d9:85:fa:c2:a4:7e:c1:af:59:7d:
                    75:65:a5:b6:33:ab:23:61:98:1a:f3:18:ee:74:a7:
                    0f:b9:f0:90:42:e0:fa:c1:af:a2:b5:4b:33:65:59:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:7A:CD:36:C2:D0:62:97:A0:C8:E1:1E:0F:51:3D:D7:93:8D:F2
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130382e302f32322d3234203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:a0:38:96:eb:81:79:8e:28:74:ca:61:fb:31:7a:6e:37:
         68:1f:ab:5c:10:d0:2c:d9:30:b4:e5:e5:6f:1a:3a:fa:40:be:
         6d:4b:98:c4:17:22:b8:78:5f:00:41:d0:cf:7a:79:52:bd:b8:
         23:d1:39:5a:62:3c:06:63:03:78:58:32:ae:1b:37:b8:06:e2:
         1e:f4:da:de:19:83:10:a6:58:d8:76:0e:79:9e:ff:4f:be:52:
         71:9f:cf:14:b4:af:ad:b1:1c:8d:ca:4f:78:6c:6f:68:79:b6:
         87:f5:3a:6d:19:0d:69:8d:9d:51:d8:88:7b:bb:86:c9:3b:54:
         d4:7c:26:a2:9e:ef:a8:9a:d2:38:8e:de:fe:d1:bb:f2:90:c5:
         35:e1:9f:b5:22:33:42:1c:50:50:d9:8a:a5:41:bd:0f:ed:41:
         f1:9e:78:55:f8:2c:81:dc:c7:c7:2e:01:d5:71:e5:9c:67:2b:
         aa:92:3d:c2:f6:25:26:9f:d3:a3:fa:28:a2:82:b8:4c:62:04:
         a9:c2:6a:e0:3b:bc:34:9e:94:9d:b1:8f:34:f0:98:87:82:b2:
         95:68:25:cb:3f:56:90:bd:f0:95:67:82:78:e6:c8:41:0c:16:
         18:2a:56:cb:ff:7e:1f:a0:7c:8b:f0:4a:0d:92:4b:2c:1d:13:
         fb:65:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:16 2025 by rpki-client