Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/34352e3137342e3234302e302f32322d3234203d3e20323635353833.roa
File:                     34352e3137342e3234302e302f32322d3234203d3e20323635353833.roa (raw, json)
Hash identifier:          lxqPkpUzeXQ40B3bmBHvNf2CrV7I5JNdYWwCOYtty7Q=
Subject key identifier:   71:23:A1:46:40:C3:FA:5F:DD:55:69:1B:8D:60:01:C0:CE:E5:66:9B
Certificate issuer:       /CN=37778FB3BBBCADF08682A83B0412FC276F4AEE14
Certificate serial:       5E98A82476D82B4A4DC2B6550C557C04956681E3
Authority key identifier: 37:77:8F:B3:BB:BC:AD:F0:86:82:A8:3B:04:12:FC:27:6F:4A:EE:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/34352e3137342e3234302e302f32322d3234203d3e20323635353833.roa
Signing time:             Tue 04 Feb 2025 18:13:08 +0000
ROA not before:           Tue 04 Feb 2025 18:08:08 +0000
ROA not after:            Tue 03 Feb 2026 18:13:08 +0000
asID:                     265583
IP address blocks:        45.174.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:98:a8:24:76:d8:2b:4a:4d:c2:b6:55:0c:55:7c:04:95:66:81:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778FB3BBBCADF08682A83B0412FC276F4AEE14
        Validity
            Not Before: Feb  4 18:08:08 2025 GMT
            Not After : Feb  3 18:13:08 2026 GMT
        Subject: CN=7123A14640C3FA5FDD55691B8D6001C0CEE5669B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:62:a6:24:68:be:da:df:69:8e:8f:db:62:
                    a3:a5:13:df:74:3a:20:d9:2f:65:6f:78:ec:10:fe:
                    81:66:66:a5:44:65:e9:df:c1:38:6d:9a:e6:47:19:
                    7a:fa:04:7d:c6:f9:24:39:0b:01:76:fd:24:7a:67:
                    5c:44:6b:bc:4b:16:79:41:6e:6f:2e:56:6f:b7:dd:
                    bd:ed:d8:13:08:a5:cf:35:0e:eb:2c:c9:de:1c:a9:
                    eb:9a:99:e9:91:a1:58:97:9f:96:99:3e:88:fa:a4:
                    21:ae:9d:ce:f9:13:a2:84:a2:3b:80:5f:77:18:0e:
                    44:cc:37:76:b0:8a:91:c7:25:78:26:b8:43:6d:82:
                    6f:32:87:b1:1c:9a:d5:96:2d:be:ee:eb:cc:5a:06:
                    52:c7:88:8f:ae:45:94:41:73:89:d1:65:1d:01:0a:
                    ad:20:9c:13:ca:86:3a:70:01:fb:9a:ce:70:b4:97:
                    e8:8c:19:8b:65:de:43:7f:bc:83:63:cb:1f:48:b3:
                    34:86:31:cf:df:1c:38:ef:73:a9:df:b3:ad:4f:a1:
                    3e:e2:ba:e8:d1:44:fe:45:63:aa:fd:d1:f9:37:58:
                    05:dd:f7:f6:94:dd:6a:49:b9:9f:31:ad:8b:c4:32:
                    31:4f:42:58:1e:16:2f:d6:3e:04:cb:31:c3:c3:6e:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:23:A1:46:40:C3:FA:5F:DD:55:69:1B:8D:60:01:C0:CE:E5:66:9B
            X509v3 Authority Key Identifier:
                keyid:37:77:8F:B3:BB:BC:AD:F0:86:82:A8:3B:04:12:FC:27:6F:4A:EE:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/34352e3137342e3234302e302f32322d3234203d3e20323635353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:81:a3:a2:b5:b3:17:97:54:0d:f9:e4:ff:df:bb:b5:70:f2:
         81:87:78:7a:db:40:ab:73:2d:45:99:b7:48:f3:b6:06:40:88:
         c0:7e:31:e9:0c:6a:ae:72:4f:96:7a:0f:fd:61:1f:c3:f5:84:
         a3:05:6b:e0:86:7d:6d:76:e4:5f:fa:04:de:6e:b7:70:d9:2f:
         e0:e4:86:9d:44:6a:85:2c:2d:dc:01:24:49:b3:7a:97:c9:ea:
         e3:7a:b2:5c:df:f6:bd:61:5b:07:c3:47:30:60:ff:3f:79:ea:
         81:6a:e8:ef:cb:c2:1e:36:10:6c:80:16:23:f6:d0:20:98:01:
         85:55:1b:41:71:64:13:c6:41:06:6a:4a:b5:41:58:df:a4:d2:
         6a:87:dc:40:c7:b6:7a:a6:c4:25:99:14:9c:ca:fe:bd:53:33:
         f2:fd:61:4e:d7:11:e3:a7:26:53:9c:e3:b8:71:8b:3d:97:f6:
         35:82:7b:7b:98:bb:84:b6:55:e0:bd:41:65:6c:09:c7:ae:6a:
         32:7e:19:87:25:4e:57:c7:ee:aa:2f:d5:1b:a3:79:bf:c3:11:
         74:3f:fd:1a:b9:94:76:a2:59:fa:67:3c:9f:e2:05:01:c7:24:
         72:37:dd:2a:5e:61:14:4f:59:65:62:a7:37:a7:b3:d4:b9:45:
         36:31:fa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:22 2025 by rpki-client