Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa
File:                     34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          M5ebDeDin8FMfIa2mek9qdZSsWUhkHpYxxIXrWj8Ov4=
Subject key identifier:   23:71:E5:2D:06:1B:22:9A:ED:3F:5E:C5:91:33:D9:5F:85:02:44:EF
Certificate issuer:       /CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
Certificate serial:       386430341217680DFF2DB36FC663C4C4B117E4F6
Authority key identifier: B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:35:36 +0000
ROA not before:           Tue 04 Feb 2025 18:30:36 +0000
ROA not after:            Tue 03 Feb 2026 18:35:36 +0000
asID:                     265615
IP address blocks:        45.190.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:64:30:34:12:17:68:0d:ff:2d:b3:6f:c6:63:c4:c4:b1:17:e4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B51B463646421D5ECF9038E8B33EAF99E6E4D824
        Validity
            Not Before: Feb  4 18:30:36 2025 GMT
            Not After : Feb  3 18:35:36 2026 GMT
        Subject: CN=2371E52D061B229AED3F5EC59133D95F850244EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:6f:7e:a4:d7:13:11:29:97:28:da:f5:33:
                    06:34:33:58:21:09:cb:9f:f4:96:74:c3:04:95:5f:
                    a9:dd:e4:47:a8:6f:f6:8b:09:57:0d:25:e0:86:ce:
                    38:63:fb:a3:48:29:a9:98:3b:e5:b0:23:c9:6c:f4:
                    9c:9e:76:ad:70:64:6b:8e:73:9c:9f:ac:a3:e2:f4:
                    7b:32:0f:84:98:fc:e0:9f:e4:a2:0b:62:4c:8f:f4:
                    41:f7:ef:aa:cd:d1:fa:a8:64:54:a3:44:7b:8c:3d:
                    02:7c:ee:e8:26:a0:47:7c:bd:a5:e3:7b:b3:a1:ea:
                    6a:27:43:13:27:7f:fd:57:b7:91:ad:0a:77:e1:d5:
                    3f:e3:f4:cd:02:4e:af:63:9c:ab:68:21:38:b2:d1:
                    76:85:85:29:61:ce:08:77:40:23:87:b5:6d:da:1e:
                    5f:84:01:78:24:48:4a:19:48:3b:dc:da:2b:1a:1a:
                    65:f6:d1:ef:eb:5b:df:94:2e:f2:01:9b:5b:7c:84:
                    ae:40:5f:07:0b:39:24:bc:74:02:2f:b3:db:fb:4b:
                    8f:dd:91:ed:65:38:e2:77:f8:16:de:2b:90:e1:8d:
                    fc:32:4a:c0:f0:ad:3b:13:a4:68:25:24:42:bd:25:
                    45:1e:b1:2f:e6:f1:4d:eb:53:53:c2:f2:e3:36:fd:
                    08:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:71:E5:2D:06:1B:22:9A:ED:3F:5E:C5:91:33:D9:5F:85:02:44:EF
            X509v3 Authority Key Identifier:
                keyid:B5:1B:46:36:46:42:1D:5E:CF:90:38:E8:B3:3E:AF:99:E6:E4:D8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B51B463646421D5ECF9038E8B33EAF99E6E4D824.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC7808D3E8E9355E7BFF60D965D6130D7141DC952D49DDC302FE1AF9FB0465F3/0/34352e3139302e3234312e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:e1:1c:1c:97:ca:60:0d:2e:eb:ae:68:3e:9b:de:ea:28:a5:
         13:f4:ac:e9:45:87:92:34:8e:28:d9:46:0b:57:0c:65:02:88:
         23:85:b5:d3:4c:15:12:7b:cd:fd:19:6e:33:2a:34:58:f2:95:
         aa:60:2a:5a:40:9b:5b:a6:01:8b:6a:e5:19:ec:0c:41:7b:94:
         16:e5:e8:21:04:16:1a:2e:71:cb:a4:c6:f9:fe:c6:d1:ef:78:
         e7:50:29:a0:bc:33:af:77:96:61:61:d1:c5:33:a1:db:2b:4a:
         95:45:f3:2c:76:5a:bc:a1:08:e2:1f:6f:d5:1b:54:bc:94:3e:
         8e:71:7a:5b:0b:4d:4e:92:e4:b5:e4:60:23:73:b9:15:3f:29:
         1e:83:0a:2f:f6:16:65:ad:17:87:b6:80:1f:0e:b9:31:a8:cd:
         d3:8d:21:ac:d2:46:20:95:6f:c6:b3:d0:01:4d:8e:b7:b4:4d:
         db:5e:dd:1e:df:88:70:5f:cc:db:bd:27:bd:22:e6:1d:a0:d0:
         97:84:2e:ee:95:04:17:44:60:8f:d4:f0:79:93:00:02:0d:e9:
         50:6d:52:05:d0:8e:bb:ab:eb:e0:90:c0:20:bc:79:ac:ac:40:
         71:54:f5:b2:a7:d4:29:29:d4:69:91:b9:ee:da:82:d4:c8:01:
         e3:89:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:54:41 2025 by rpki-client