Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130382e302f32342d3234203d3e20323639383433.roa
File:                     34352e3138392e3130382e302f32342d3234203d3e20323639383433.roa (raw, json)
Hash identifier:          r2bWdFzNhxKoFCK0rsZ5Gv5ekp4B4kZFMnQ2RHlnUPM=
Subject key identifier:   2A:03:41:19:2B:B5:0B:23:70:FD:48:18:E0:E1:38:3F:91:3F:8D:64
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       58F34570E9AF1454063078B3FDC63D9E9FC4A1E4
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130382e302f32342d3234203d3e20323639383433.roa
Signing time:             Wed 05 Feb 2025 17:10:01 +0000
ROA not before:           Wed 05 Feb 2025 17:05:01 +0000
ROA not after:            Wed 04 Feb 2026 17:10:01 +0000
asID:                     269843
IP address blocks:        45.189.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f3:45:70:e9:af:14:54:06:30:78:b3:fd:c6:3d:9e:9f:c4:a1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Feb  5 17:05:01 2025 GMT
            Not After : Feb  4 17:10:01 2026 GMT
        Subject: CN=2A0341192BB50B2370FD4818E0E1383F913F8D64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:d0:5d:d0:a7:7d:4f:a3:f8:4c:33:1b:6b:
                    0e:46:bd:dd:6e:7c:77:58:c2:38:a7:0c:72:1c:a2:
                    7c:1d:d9:1f:df:10:fe:8a:20:63:9e:d0:7e:70:c8:
                    ea:38:fb:83:26:51:87:a0:68:40:ff:88:2d:01:12:
                    f6:1a:5a:44:60:33:47:ae:ad:50:ab:e4:b9:ed:60:
                    6f:8b:da:98:09:1a:c5:68:01:f1:71:70:7f:1d:ee:
                    7f:4d:51:7f:45:ba:7a:1b:96:4f:d9:ea:c3:de:b0:
                    99:2e:12:2c:cb:f9:f3:9d:88:bf:04:b7:c0:c3:f3:
                    32:f8:a2:da:e6:0a:13:ce:bb:da:db:1c:8a:67:36:
                    01:ab:b7:40:e1:ac:d6:97:24:fc:e9:d1:4a:82:9d:
                    59:0d:b9:84:b7:dc:28:35:f5:b2:b3:e1:0f:3c:29:
                    f9:a7:8a:5d:24:e7:e2:d7:f2:fb:20:de:6c:38:37:
                    95:10:bc:f0:88:29:da:94:ca:5b:c8:fb:16:aa:ca:
                    64:2f:aa:79:5d:a7:79:9c:d3:7a:ac:46:ec:9e:ab:
                    9c:be:74:cd:e8:73:a0:2d:79:a2:76:19:90:ce:2e:
                    26:ff:b9:ad:47:7d:57:e0:7e:26:2c:fd:13:42:2b:
                    b9:32:e0:7e:46:ca:1a:47:9f:f3:7d:21:a8:2d:25:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:41:19:2B:B5:0B:23:70:FD:48:18:E0:E1:38:3F:91:3F:8D:64
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/34352e3138392e3130382e302f32342d3234203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:30:41:43:73:98:16:ee:ec:ca:1b:6d:de:c6:05:5e:1d:a7:
         6b:ed:75:65:d4:5a:7e:83:84:7b:bd:7d:d1:a0:d9:66:6f:31:
         e3:71:cd:61:18:97:39:6b:80:3c:62:e7:95:74:69:ec:19:0b:
         e9:c3:87:f1:c1:42:99:7f:04:21:20:c3:30:45:71:e4:2d:39:
         6b:d4:7f:92:87:dd:1c:19:08:22:16:32:84:c8:e1:f4:26:15:
         59:66:ff:93:ec:24:8c:af:b1:c5:00:02:6b:12:bd:97:de:6b:
         bb:d7:5a:b8:af:ea:0d:37:d7:d3:d0:b9:88:25:ea:1b:cd:c6:
         b0:c8:42:be:00:3a:0e:a1:fa:28:96:07:fc:07:09:10:8f:3e:
         8f:97:a5:d8:4f:84:7f:32:9f:70:15:06:13:0a:5b:f3:42:37:
         db:d9:44:86:e0:1e:d0:2f:a7:da:b2:35:f1:2f:84:4b:3b:3e:
         f8:b6:e8:9e:1d:aa:cb:7c:a1:88:4e:38:7c:4d:cd:cf:e0:ff:
         35:de:18:c1:f9:0d:22:78:89:24:4e:2f:fc:2d:8a:c1:0f:53:
         ab:08:48:2b:86:16:ef:db:b7:2d:50:cb:06:a1:cf:54:8e:77:
         05:34:77:da:3d:60:4a:7e:c0:01:70:ae:aa:69:7a:3b:12:84:
         b9:12:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:04 2025 by rpki-client