Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5BFA5CDA0869E19175D8C9E1E000572541AE7438FD3923EBEFAE3AB2E742CA6/0/34352e3232382e3137362e302f32322d3234203d3e20323636363735.roa
File:                     34352e3232382e3137362e302f32322d3234203d3e20323636363735.roa (raw, json)
Hash identifier:          V3ZJUjl/3ffqiJtETRiXa8Bie4VJetKU5QE2fcUKXI8=
Subject key identifier:   59:B9:13:81:17:33:C4:C2:17:E7:35:53:1F:3D:4A:41:35:57:2B:96
Certificate issuer:       /CN=92A447787B65E7B758CDE337695B4282E6BE9A46
Certificate serial:       19637B8D615AF79151B08DDD964964BF80FC7DFD
Authority key identifier: 92:A4:47:78:7B:65:E7:B7:58:CD:E3:37:69:5B:42:82:E6:BE:9A:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92A447787B65E7B758CDE337695B4282E6BE9A46.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5BFA5CDA0869E19175D8C9E1E000572541AE7438FD3923EBEFAE3AB2E742CA6/0/34352e3232382e3137362e302f32322d3234203d3e20323636363735.roa
Signing time:             Tue 04 Feb 2025 20:04:58 +0000
ROA not before:           Tue 04 Feb 2025 19:59:58 +0000
ROA not after:            Tue 03 Feb 2026 20:04:58 +0000
asID:                     266675
IP address blocks:        45.228.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:7b:8d:61:5a:f7:91:51:b0:8d:dd:96:49:64:bf:80:fc:7d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92A447787B65E7B758CDE337695B4282E6BE9A46
        Validity
            Not Before: Feb  4 19:59:58 2025 GMT
            Not After : Feb  3 20:04:58 2026 GMT
        Subject: CN=59B913811733C4C217E735531F3D4A4135572B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:ee:bd:84:a0:51:bb:4d:42:5b:dd:2d:9f:
                    2b:4e:81:ac:00:01:f7:a8:c6:e9:20:d7:b2:8b:f6:
                    3a:95:4e:05:59:82:5f:73:2f:be:62:86:5f:43:48:
                    ac:12:2d:0c:09:d7:6c:54:3b:72:41:0c:e7:02:61:
                    64:3d:bb:bd:31:ae:ba:30:da:ad:2b:dd:4a:1a:9f:
                    9f:ed:aa:69:fa:27:93:ba:b7:a4:09:ad:7a:de:91:
                    8c:c2:e9:73:06:21:53:55:63:c5:18:00:cd:ec:65:
                    db:f5:bd:d8:66:ed:77:7e:85:33:8c:74:81:c0:07:
                    a1:6a:58:4e:a2:da:d4:f0:d9:72:6c:46:68:2f:5c:
                    84:36:45:c0:67:e9:58:43:fe:8e:b2:fe:b1:0a:0b:
                    02:fc:ff:05:25:dd:d5:ac:68:52:3a:00:0e:dc:ff:
                    50:60:58:b3:35:20:26:85:db:f3:12:ad:a6:cd:76:
                    e6:81:39:7a:c0:ea:14:9e:9f:f9:64:cd:1f:0e:1d:
                    db:6b:ff:a6:4a:dc:71:14:8d:99:ad:71:c6:d2:d7:
                    c2:9e:76:b3:4c:c7:d1:02:5a:92:cf:cb:d0:81:ba:
                    7c:a4:93:03:f9:62:77:89:cf:d3:10:63:4e:c4:15:
                    ee:c8:ed:72:74:71:0f:d0:db:c1:44:6e:2a:6a:2b:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B9:13:81:17:33:C4:C2:17:E7:35:53:1F:3D:4A:41:35:57:2B:96
            X509v3 Authority Key Identifier:
                keyid:92:A4:47:78:7B:65:E7:B7:58:CD:E3:37:69:5B:42:82:E6:BE:9A:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5BFA5CDA0869E19175D8C9E1E000572541AE7438FD3923EBEFAE3AB2E742CA6/0/92A447787B65E7B758CDE337695B4282E6BE9A46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92A447787B65E7B758CDE337695B4282E6BE9A46.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5BFA5CDA0869E19175D8C9E1E000572541AE7438FD3923EBEFAE3AB2E742CA6/0/34352e3232382e3137362e302f32322d3234203d3e20323636363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:58:51:5c:b2:6a:12:7a:e5:5f:87:2e:5d:66:45:71:13:
         df:c5:ce:6e:86:9d:83:bd:29:5d:87:a8:c3:6e:d4:70:94:06:
         82:ac:4a:8e:bf:61:27:cf:c3:ad:65:8a:cf:61:da:da:e1:36:
         e3:82:44:9a:e2:a9:71:e6:85:0e:ff:7a:2a:e8:3c:8f:9d:b7:
         1c:2c:a6:a5:08:47:c0:c0:80:53:85:50:8d:24:a1:33:29:f5:
         bb:ec:75:fa:63:1a:3c:6a:b4:81:48:65:32:72:24:be:39:6e:
         83:1b:c5:50:9c:4b:b0:c9:00:04:f7:04:f8:55:6d:19:08:b3:
         98:c0:a5:83:b9:32:3f:a0:7d:25:ca:47:b0:89:04:6a:fb:36:
         32:c9:13:f8:67:de:38:09:6e:3c:53:f5:c7:3e:5d:6f:56:92:
         03:6d:2a:e2:6d:57:04:e2:ff:fb:86:2d:33:8f:c5:d3:48:10:
         d8:39:37:d4:59:0d:1a:ba:80:ce:66:dd:f9:12:8b:51:7e:bf:
         ef:c2:e2:1d:f8:c3:7c:f1:f1:56:df:1f:d7:b8:f7:45:fb:7b:
         18:7b:b5:ce:d5:21:f0:9b:ba:88:17:09:0f:d9:7c:b6:e2:b1:
         05:aa:1b:5f:e7:e8:01:09:0d:fa:ac:c0:55:d1:4c:c9:ce:ec:
         28:11:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:17 2025 by rpki-client