Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33392e302f32342d3234203d3e203232373234.roa
File:                     34352e3137382e33392e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          111gob655h+J1ltSdpVz1rHfordidT3DHlpMVoHhsG4=
Subject key identifier:   38:B3:87:AC:ED:CD:B8:D5:51:E0:56:82:5A:C4:13:E5:9C:62:F8:0A
Certificate issuer:       /CN=3214A9089E97D5F53B714A9F9256A933E4595E53
Certificate serial:       200FC1F4B54F1758C41A4C3D474C4174324660CF
Authority key identifier: 32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33392e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 03 Dec 2024 15:45:00 +0000
ROA not before:           Tue 03 Dec 2024 15:40:00 +0000
ROA not after:            Tue 02 Dec 2025 15:45:00 +0000
asID:                     22724
IP address blocks:        45.178.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0f:c1:f4:b5:4f:17:58:c4:1a:4c:3d:47:4c:41:74:32:46:60:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214A9089E97D5F53B714A9F9256A933E4595E53
        Validity
            Not Before: Dec  3 15:40:00 2024 GMT
            Not After : Dec  2 15:45:00 2025 GMT
        Subject: CN=38B387ACEDCDB8D551E056825AC413E59C62F80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:90:73:42:3f:9d:35:ce:f8:a7:c6:bb:04:62:
                    f4:61:ca:4d:d9:c0:ea:2d:c0:0a:13:b3:86:b4:a1:
                    ca:16:35:bb:1e:73:c6:62:64:4e:b6:ad:48:ad:2a:
                    66:65:2d:45:91:f6:6c:c8:79:bf:90:40:3a:07:9f:
                    5c:78:19:d8:58:65:55:f8:2f:b2:e4:4a:96:6f:88:
                    cb:19:d0:41:9d:15:85:23:98:0f:ec:e3:21:23:ac:
                    11:0c:21:bb:6d:ec:6b:6f:bd:24:b1:26:4d:5d:2d:
                    3a:6d:1d:3b:2d:35:33:27:70:a0:a9:10:30:c4:b2:
                    e7:0c:15:5c:3e:fe:9c:7d:cc:9e:e3:c1:13:49:3a:
                    1a:33:30:0d:b3:be:42:33:da:75:96:14:96:da:a0:
                    58:f1:14:c0:2c:eb:62:33:f5:f9:f4:c2:c5:25:91:
                    91:27:27:23:ba:b3:f6:0d:4b:2a:80:4a:f4:bb:00:
                    15:a1:e3:c9:48:86:17:92:fa:19:df:32:03:e3:ab:
                    e8:c6:9e:2e:b2:e6:85:9b:a6:e8:59:70:23:6d:fa:
                    1e:11:7d:25:64:66:3d:43:76:da:ce:46:c8:e4:f2:
                    51:20:a4:8e:90:89:fc:b2:0e:6b:14:04:03:64:4a:
                    da:14:b4:ab:78:bb:75:57:cd:4c:a4:38:f6:63:8b:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B3:87:AC:ED:CD:B8:D5:51:E0:56:82:5A:C4:13:E5:9C:62:F8:0A
            X509v3 Authority Key Identifier:
                keyid:32:14:A9:08:9E:97:D5:F5:3B:71:4A:9F:92:56:A9:33:E4:59:5E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/3214A9089E97D5F53B714A9F9256A933E4595E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3214A9089E97D5F53B714A9F9256A933E4595E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C126955F8677E85836D6C003E38BE3CE727B2C97FD625581B0088793CE19DEAF/0/34352e3137382e33392e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:3b:1e:e4:59:24:48:60:ef:92:39:97:a7:03:60:03:b2:
         4f:15:8c:52:a1:3b:99:fa:66:af:19:b4:3b:a0:1e:c3:16:ec:
         40:06:52:c6:94:ce:3d:ed:dc:17:dc:5a:3e:d9:f2:4b:c7:a6:
         f9:8e:c4:a4:f4:5f:d3:22:61:cf:d4:84:d9:e8:36:bd:5e:61:
         70:45:ec:5f:06:65:32:02:e1:2d:36:3d:84:a7:78:d5:00:85:
         4f:c4:f0:48:e1:19:72:cc:2d:7d:20:e8:27:3d:10:c6:f7:d8:
         18:23:14:1e:9c:5a:8f:7a:3a:3b:08:c3:cc:f0:21:a5:9f:f8:
         a2:0a:f7:6b:0b:3f:29:db:41:b3:99:7c:8e:de:d9:0e:b8:f1:
         68:27:00:54:cc:21:e9:7b:46:3b:b1:bf:50:e7:8c:48:26:47:
         6c:1d:3e:6a:12:4c:7d:63:a6:42:63:35:03:5b:ff:0a:85:2b:
         86:fd:9f:0c:b4:cb:20:cb:ee:0c:67:f3:9a:b5:bc:26:cb:85:
         53:88:5d:96:26:76:5e:fb:e6:d1:48:e8:46:d4:22:e0:be:30:
         29:16:81:1a:ee:a7:11:2c:94:5c:9e:5e:92:8f:c6:ea:e3:ae:
         f2:1f:b3:9e:4e:87:be:80:47:65:cc:1b:26:54:f6:b8:0d:66:
         1b:05:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:25:07 2025 by rpki-client