Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa
File:                     34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa (raw, json)
Hash identifier:          oJJaJoFZxUNzBMlvhfvo7IAThHzSf5QJWUMkr7EArxc=
Subject key identifier:   B2:92:64:B4:35:51:D1:25:BC:0D:2D:96:FF:65:9A:85:8C:8A:13:B0
Certificate issuer:       /CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
Certificate serial:       697A5F67C54F68439E3B6DE87898DDC70111F8E0
Authority key identifier: 9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa
Signing time:             Tue 04 Feb 2025 18:34:49 +0000
ROA not before:           Tue 04 Feb 2025 18:29:49 +0000
ROA not after:            Tue 03 Feb 2026 18:34:49 +0000
asID:                     266695
IP address blocks:        45.229.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:5f:67:c5:4f:68:43:9e:3b:6d:e8:78:98:dd:c7:01:11:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57
        Validity
            Not Before: Feb  4 18:29:49 2025 GMT
            Not After : Feb  3 18:34:49 2026 GMT
        Subject: CN=B29264B43551D125BC0D2D96FF659A858C8A13B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:d9:32:bf:4f:86:2a:ab:15:3c:aa:3e:8d:
                    a3:3e:89:75:49:bc:53:6e:24:98:11:89:0c:e0:c2:
                    c5:ca:8d:9d:59:60:67:08:9b:8c:83:6d:1f:8c:30:
                    79:61:08:1b:e9:85:b9:6f:ae:19:d9:f2:fc:72:b6:
                    f9:d2:0e:48:bf:6b:00:ef:11:9e:11:d8:53:91:79:
                    e5:b1:75:d2:d8:8a:23:ea:17:59:b3:09:02:57:d1:
                    29:76:f2:fb:f6:62:c7:c0:1e:19:fc:b6:7e:9c:fe:
                    22:b3:4f:b9:a7:6c:8b:47:14:2f:18:68:11:14:61:
                    18:e1:84:0c:c7:f4:fe:e6:60:ac:4f:27:c5:7b:da:
                    17:c9:d1:c7:00:44:eb:4e:81:e5:f4:40:63:89:cd:
                    b6:d1:9c:f2:25:91:e0:6f:3c:7d:ca:cb:3e:22:3c:
                    b2:9d:c3:ad:aa:d3:69:f2:81:97:d6:e0:df:1b:50:
                    be:16:60:88:81:b7:04:03:14:93:4d:00:f7:82:67:
                    9a:70:25:6f:30:67:2b:d4:5d:e8:a1:5d:87:d6:ef:
                    4f:b6:a0:52:e0:d4:9c:14:47:83:bb:ae:55:b6:81:
                    85:79:2f:e4:fa:04:92:20:f4:fd:2c:fa:74:52:20:
                    04:de:b8:41:95:d1:99:dd:b7:b5:66:58:af:2a:43:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:92:64:B4:35:51:D1:25:BC:0D:2D:96:FF:65:9A:85:8C:8A:13:B0
            X509v3 Authority Key Identifier:
                keyid:9E:6E:56:6C:CF:B3:96:F5:0A:A0:EE:8B:60:11:CD:17:E7:AF:2E:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E6E566CCFB396F50AA0EE8B6011CD17E7AF2E57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CB49828355CAE78B8A7162EC32F371E65CD840A8223C3054A33B5C7DAE817E23/0/34352e3232392e3139362e302f32322d3234203d3e20323636363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:64:30:71:43:f3:e4:a9:d2:e5:99:8f:40:ea:c4:6c:16:98:
         98:ea:ee:fd:de:6a:88:9c:2c:de:83:a1:71:e7:c3:27:b1:81:
         4c:4c:3b:64:96:a1:33:ed:86:7e:4a:8d:e2:6f:c1:0f:24:63:
         4b:86:1a:28:d7:6f:b8:33:b2:38:95:e0:0a:15:4f:22:28:3d:
         70:00:e0:22:04:0b:af:e7:eb:24:f3:a0:e9:aa:25:4d:b5:08:
         e3:9a:4b:a0:ee:bd:b6:8f:7e:4e:0a:35:78:71:f5:10:db:00:
         03:5c:b7:f8:30:0c:0b:11:53:c1:5b:14:90:fd:c8:91:83:93:
         17:01:f2:32:74:d0:60:e9:bc:f9:1e:2d:08:cb:62:d6:45:32:
         2b:b1:c3:42:2e:bc:4e:a1:63:4b:9c:91:81:05:7a:c9:d4:7d:
         c7:a1:ff:eb:30:af:45:a9:7b:e9:66:6f:2d:06:db:75:cc:8c:
         b1:eb:85:f0:ee:61:0b:87:12:fb:f7:35:79:e0:c8:bc:a5:54:
         1f:d6:f3:9e:2c:25:06:e4:ba:d6:a2:6e:07:7f:75:c6:75:a5:
         f5:ac:13:e2:8d:79:d8:55:2e:95:fb:ef:30:38:31:dc:2f:6d:
         78:5c:0c:68:af:e3:90:1e:f6:37:aa:e5:64:b1:65:c2:03:af:
         b3:c2:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:38 2025 by rpki-client