Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32332d3233203d3e203532333238.roa
File:                     34352e3232372e3232362e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          bx3zrFX8K6ZHsWEyrMvjorndFKDvD7iIJFqBfL/EIHA=
Subject key identifier:   6F:82:D0:41:D6:2B:62:87:16:3A:76:37:72:D9:42:7A:C9:18:D8:B1
Certificate issuer:       /CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
Certificate serial:       238D329D09014BC7AAAB958D8FF714BFB977BA94
Authority key identifier: D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:08:03 +0000
ROA not before:           Tue 04 Feb 2025 18:03:03 +0000
ROA not after:            Tue 03 Feb 2026 18:08:03 +0000
asID:                     52328
IP address blocks:        45.227.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8d:32:9d:09:01:4b:c7:aa:ab:95:8d:8f:f7:14:bf:b9:77:ba:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F632F506E9F43BFD1C89E7DC1560EB1774538B
        Validity
            Not Before: Feb  4 18:03:03 2025 GMT
            Not After : Feb  3 18:08:03 2026 GMT
        Subject: CN=6F82D041D62B6287163A763772D9427AC918D8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:0f:e9:be:40:0b:98:0e:93:9f:8f:16:1b:
                    26:e0:f4:c8:fa:17:a5:f7:b8:0e:7c:5d:ae:da:3e:
                    a9:b6:12:a4:02:1d:e4:42:dc:38:85:1a:72:b3:b2:
                    3e:82:60:72:67:b5:45:9b:6e:40:5d:2c:60:1d:fe:
                    1c:4b:60:62:59:b1:48:92:a7:62:68:9a:45:1a:2d:
                    d3:4d:a2:73:28:da:49:bb:af:8f:f2:cf:8d:04:ae:
                    d2:54:43:97:86:4e:3e:8a:8d:f3:58:de:03:53:01:
                    a0:13:ae:19:38:b7:b8:a0:ed:c5:dc:39:ef:ba:78:
                    7f:76:f2:c9:ca:77:35:d6:3a:99:f8:78:7c:72:ae:
                    ac:13:e2:56:df:d2:d0:45:8c:9c:0d:dc:16:04:de:
                    f1:c1:a9:f7:fe:bd:21:4d:5e:ff:46:3c:d1:a0:93:
                    d5:d5:9f:ee:c8:38:c0:8a:70:e3:77:c8:13:40:96:
                    e5:c6:c6:e9:14:4d:dd:42:8a:09:2b:53:34:2f:3a:
                    7b:8b:fd:91:e8:c6:7d:3a:bc:e7:41:e7:27:c3:6c:
                    c1:52:32:25:39:19:b5:d9:87:fc:8c:cb:ff:25:6d:
                    57:b7:bf:0b:28:12:f6:4b:b6:1d:05:cd:08:c7:da:
                    fc:12:8b:01:a5:16:97:a1:03:8b:f8:ed:c6:d7:7f:
                    64:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:82:D0:41:D6:2B:62:87:16:3A:76:37:72:D9:42:7A:C9:18:D8:B1
            X509v3 Authority Key Identifier:
                keyid:D0:F6:32:F5:06:E9:F4:3B:FD:1C:89:E7:DC:15:60:EB:17:74:53:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D0F632F506E9F43BFD1C89E7DC1560EB1774538B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7E416EF8B6CFB3F9AA5DA4999B1E5C751D4A1215AFC71B17175CE4CF2D2A06D/0/34352e3232372e3232362e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:5f:3a:cd:da:73:a2:0a:a9:f1:cc:4a:d3:9d:b0:75:99:e3:
         20:23:6f:88:df:0b:ee:99:6b:e9:48:d1:90:da:8c:7c:89:cf:
         7e:ea:b1:3d:37:7d:dc:88:c2:67:88:38:e8:39:b3:70:ab:5b:
         21:f9:1b:3d:d3:35:76:2e:58:f7:d1:59:f7:c7:dd:e1:63:82:
         2e:b3:cd:5f:65:c8:5b:64:87:20:05:f3:04:6e:82:cc:49:aa:
         c7:6c:3b:a0:78:af:dc:b1:87:59:41:ba:cc:76:ed:8e:5b:f7:
         31:29:43:67:33:09:40:79:fe:47:6d:14:48:d9:9c:0c:9c:65:
         bb:bb:68:fe:83:60:24:af:46:c1:cb:81:b1:dc:8e:55:33:9a:
         41:52:06:4a:4a:f3:bc:bc:74:f4:55:a5:73:59:98:61:ed:86:
         cb:0b:c3:40:d8:01:63:0c:89:51:13:b0:26:cb:f9:91:af:eb:
         97:a9:08:b6:46:8c:16:40:38:71:95:a7:b3:16:bf:25:55:3e:
         f5:d0:e0:12:e8:63:5b:d5:66:d0:30:f8:c2:5a:41:1a:13:cc:
         46:61:29:e9:6e:9f:1d:df:93:01:fc:3e:b3:2a:ab:4b:4a:4c:
         c4:f1:d6:0d:99:df:8c:93:38:c1:6e:91:4f:f4:4a:6f:ca:9d:
         46:95:33:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:05 2025 by rpki-client