Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa
File:                     34352e3138322e32312e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          QY6rNOtyDL1dUOnHwFDP6/5Rbb1v6yEPxzpHy3gxQVc=
Subject key identifier:   7A:0E:C1:A0:D8:5A:CD:E5:B1:DA:16:B2:63:57:5C:D2:95:56:B2:BF
Certificate issuer:       /CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
Certificate serial:       26616B928375986F394E8694E607B393615EAA0B
Authority key identifier: 16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 04 Feb 2025 18:30:53 +0000
ROA not before:           Tue 04 Feb 2025 18:25:53 +0000
ROA not after:            Tue 03 Feb 2026 18:30:53 +0000
asID:                     263725
IP address blocks:        45.182.21.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:61:6b:92:83:75:98:6f:39:4e:86:94:e6:07:b3:93:61:5e:aa:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF
        Validity
            Not Before: Feb  4 18:25:53 2025 GMT
            Not After : Feb  3 18:30:53 2026 GMT
        Subject: CN=7A0EC1A0D85ACDE5B1DA16B263575CD29556B2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:6b:16:82:de:15:83:6d:8c:4a:86:06:e0:
                    63:ca:e8:61:61:8a:95:1b:2c:15:fb:59:e0:e1:1f:
                    15:c5:ec:98:e0:81:56:aa:ce:71:d3:8f:56:7a:a6:
                    b8:79:39:9b:22:0a:b4:da:04:e8:8e:21:ef:18:0e:
                    de:2a:88:7f:b8:a9:30:62:0a:7f:27:10:80:2d:e8:
                    18:d1:d9:6e:27:a7:99:85:b6:7f:2d:63:60:2e:55:
                    b2:94:9f:35:ca:2f:3a:84:00:c4:65:eb:e8:88:f9:
                    1e:ac:82:3a:9e:42:ed:3d:70:81:4f:88:f8:84:6b:
                    50:5d:ef:b2:53:41:5c:92:5e:a7:ee:d1:7f:94:0f:
                    a8:ac:c6:9a:72:a8:d0:1c:52:e2:76:0d:27:b5:ed:
                    b8:07:da:e2:87:30:b9:ce:2f:81:ac:14:62:33:3d:
                    3d:04:fe:2f:36:7b:29:04:f8:51:7f:d6:95:b5:2d:
                    c0:29:d6:29:fb:dc:29:b0:3d:c0:b5:d7:c8:48:dc:
                    80:16:d2:b5:a0:6f:ed:05:e5:8d:d0:a8:92:71:c4:
                    26:b8:9e:a2:31:6e:7d:d0:93:23:1f:15:e9:78:1b:
                    ab:f6:7a:91:1d:fe:90:f7:56:b2:7b:4d:71:da:d1:
                    ea:f9:b6:78:56:35:57:44:d1:c5:f8:70:ea:45:8c:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0E:C1:A0:D8:5A:CD:E5:B1:DA:16:B2:63:57:5C:D2:95:56:B2:BF
            X509v3 Authority Key Identifier:
                keyid:16:4B:44:F2:A4:52:2E:06:B9:2E:8B:D5:94:37:F8:ED:1F:0E:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/164B44F2A4522E06B92E8BD59437F8ED1F0EA2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD9CB562EBF44060F9CFAC27DCEAF9AC6785A73E5AA28D62A9C31BA2948CC287/0/34352e3138322e32312e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:a6:6a:78:7e:2b:5b:bd:34:25:b6:19:54:39:93:72:ff:
         be:f0:ad:9c:a9:d8:fe:44:46:01:eb:60:e3:27:e5:81:3d:3a:
         95:4b:0c:c3:0f:ce:05:74:55:97:68:6b:83:ab:74:13:7b:e8:
         1a:61:f5:94:e1:df:97:44:4d:80:f3:a2:3a:ca:9c:17:aa:b5:
         b3:9b:81:d5:29:00:b8:bd:90:53:a3:72:8a:73:69:cb:04:b3:
         1f:6e:ee:87:27:18:6f:1e:b1:c4:54:6c:e8:d0:7e:52:76:bc:
         c8:c2:a4:cc:e7:a4:1e:ab:2e:45:51:f1:00:08:11:be:3e:77:
         fb:a1:3b:76:45:cc:d3:0a:ef:f8:fe:be:ba:22:c8:09:2b:a2:
         50:e7:61:cf:75:9c:da:c2:73:6e:a2:42:17:75:9a:2e:07:90:
         26:2e:98:f1:8e:7e:33:44:a2:a4:ad:b0:76:2f:eb:10:5e:7f:
         d5:0e:d8:32:7b:95:d2:55:f6:f7:2b:ee:cc:27:42:ab:6c:97:
         5b:30:cb:dc:13:42:2b:9b:9b:b1:ab:53:63:a2:8f:39:7d:a6:
         63:25:3a:9f:fb:73:e1:0f:cf:4b:ea:12:53:8b:c8:99:6d:0d:
         4c:e9:04:cb:2e:e4:ee:1e:81:47:66:98:88:d4:bb:61:e2:c6:
         a3:d7:04:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:09 2025 by rpki-client