Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/34352e3232362e3230352e302f32342d3234203d3e20323634383336.roa
File:                     34352e3232362e3230352e302f32342d3234203d3e20323634383336.roa (raw, json)
Hash identifier:          TafRY0zOAYUjT49S1mZQxju3MiHq9SPjidDn5pRgnYk=
Subject key identifier:   A8:21:56:EF:14:AC:DF:02:A7:7C:0C:09:9D:35:F0:21:EE:6B:CF:F3
Certificate issuer:       /CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
Certificate serial:       09E04EFE41F8F043981591E287923BF0A05D27B2
Authority key identifier: 61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/34352e3232362e3230352e302f32342d3234203d3e20323634383336.roa
Signing time:             Tue 04 Feb 2025 18:52:25 +0000
ROA not before:           Tue 04 Feb 2025 18:47:25 +0000
ROA not after:            Tue 03 Feb 2026 18:52:25 +0000
asID:                     264836
IP address blocks:        45.226.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e0:4e:fe:41:f8:f0:43:98:15:91:e2:87:92:3b:f0:a0:5d:27:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61AC4D14594A2836E063EF44EC4E2248F46BFB74
        Validity
            Not Before: Feb  4 18:47:25 2025 GMT
            Not After : Feb  3 18:52:25 2026 GMT
        Subject: CN=A82156EF14ACDF02A77C0C099D35F021EE6BCFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:3d:e0:e3:dd:9b:b8:7b:80:58:af:3c:12:
                    80:e1:0d:8f:4c:35:0b:f5:7d:07:d1:db:d2:77:1a:
                    48:7a:84:4c:7e:60:1a:42:d9:85:f3:ab:0d:b0:d9:
                    92:76:f6:07:d3:0d:68:46:91:18:9d:26:03:d7:06:
                    59:51:67:77:5c:95:03:89:c4:5a:16:84:40:3b:91:
                    f0:70:6b:8e:12:5f:6e:60:26:65:24:13:28:5e:ac:
                    44:e6:af:c0:cc:ad:83:c3:24:61:6d:70:4d:cc:b8:
                    50:90:d7:12:1c:a1:61:5a:ff:4e:62:75:e7:38:b1:
                    f6:e1:32:cc:23:42:28:e5:c7:ca:c5:b4:0a:3a:3b:
                    85:39:7e:b8:f2:60:ee:c8:4c:e6:9e:01:d9:2d:99:
                    17:8f:71:e3:9f:82:8d:5b:4c:3d:43:8e:e5:78:59:
                    c8:14:a4:45:2e:e9:18:4f:8b:c4:3a:ac:90:65:bf:
                    bb:f2:9b:6a:26:dd:47:65:29:7c:26:9f:29:40:35:
                    cb:ff:5d:4e:32:a4:66:ce:46:f3:26:1e:42:f4:ff:
                    df:83:4a:25:c3:2b:7b:5c:dc:2f:1a:eb:2c:82:3b:
                    b7:a6:62:ae:76:fd:28:69:6e:f0:31:b5:28:16:d0:
                    77:04:c4:f4:10:5e:ab:a6:0f:b6:1b:7e:2e:29:b2:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:56:EF:14:AC:DF:02:A7:7C:0C:09:9D:35:F0:21:EE:6B:CF:F3
            X509v3 Authority Key Identifier:
                keyid:61:AC:4D:14:59:4A:28:36:E0:63:EF:44:EC:4E:22:48:F4:6B:FB:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61AC4D14594A2836E063EF44EC4E2248F46BFB74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA631B4294DE9A89B00CD7E09AF0238C16E29F58B2A7106987C299F53C546E5A/0/34352e3232362e3230352e302f32342d3234203d3e20323634383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:a4:c7:f6:63:99:34:bb:c7:3a:a2:50:6a:f5:73:f3:18:
         fd:7b:56:5a:b2:fc:7e:2d:b9:a6:e5:95:4c:da:54:f1:47:96:
         45:9c:d8:cc:b3:2a:44:9b:9f:ed:99:5d:8e:c4:3f:c2:2a:27:
         51:f9:c3:f8:02:13:93:eb:f8:2f:91:d0:54:5b:29:6a:43:b9:
         ad:a4:6b:ff:e1:23:75:fd:f9:c4:bb:72:d2:a0:7f:b5:65:5c:
         a6:ae:2e:43:a5:29:eb:2a:29:a1:aa:d8:92:a3:1b:bd:6e:37:
         f5:c9:bf:58:1f:4e:43:16:4d:18:44:23:7d:ab:78:a7:11:23:
         45:bc:fd:31:0f:48:72:89:39:e1:75:52:9d:72:e1:6c:8f:02:
         86:fc:d9:cc:d8:3d:67:47:1e:a1:08:94:43:f4:42:b1:d8:1c:
         6e:7e:ef:7f:53:9e:4c:b7:a9:2e:78:d5:92:cc:8f:5b:8b:28:
         d8:b0:7c:bb:1a:78:32:a8:32:3c:68:c4:12:f1:df:39:71:a2:
         a3:12:e9:91:5b:9e:30:7a:62:56:b1:22:df:55:53:ad:e0:bb:
         03:0e:3c:b2:5e:4c:f4:8c:55:a8:b2:88:4d:57:7d:03:f6:0a:
         04:ea:42:ad:dc:18:15:5f:10:17:fd:ad:4e:be:d1:32:a6:f3:
         c3:fc:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:58 2025 by rpki-client