Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32372e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          DWZyQIeUl9bgSJSGdeOEiGILR1Ez5J+UFML1+gBhZNw=
Subject key identifier:   DC:DE:7F:BF:71:59:15:9A:27:17:64:F2:0D:50:E9:89:77:B4:71:63
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       43A724301B280436179A6368E9A73A2FD6B1D322
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 04 Feb 2025 20:02:35 +0000
ROA not before:           Tue 04 Feb 2025 19:57:35 +0000
ROA not after:            Tue 03 Feb 2026 20:02:35 +0000
asID:                     267808
IP address blocks:        45.172.27.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a7:24:30:1b:28:04:36:17:9a:63:68:e9:a7:3a:2f:d6:b1:d3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Feb  4 19:57:35 2025 GMT
            Not After : Feb  3 20:02:35 2026 GMT
        Subject: CN=DCDE7FBF7159159A271764F20D50E98977B47163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:c9:cb:a0:b8:bd:48:23:da:b7:47:6d:fe:
                    f8:d1:2e:53:df:6b:4e:ee:0d:b6:7d:da:f1:f7:6b:
                    b3:04:bb:98:f2:2d:7d:f1:44:1f:22:07:76:36:96:
                    e9:2f:cd:d9:a2:0b:c4:f5:c5:14:4d:66:c2:ac:fc:
                    22:64:db:4d:72:a7:1f:da:a6:7c:07:46:89:71:b2:
                    2a:dd:de:d5:f4:bd:d2:08:54:b9:74:1e:db:60:d6:
                    45:99:00:b5:27:f3:75:43:16:51:e8:30:eb:9c:35:
                    9b:85:c9:7c:9a:7b:c9:46:84:e1:8c:fe:ec:0c:f8:
                    c6:02:d9:12:dd:00:a7:de:f0:ff:8e:8a:62:a9:b6:
                    1d:d8:ef:fb:7c:22:9d:51:7e:4d:ce:12:ee:7e:1b:
                    34:a2:ff:95:f6:b5:bf:ea:ef:bc:4e:ac:38:77:00:
                    d0:9a:ca:a4:93:d8:f9:89:a4:7b:86:e8:7d:56:54:
                    78:eb:4b:79:81:41:ef:5e:12:fe:6a:ac:08:82:43:
                    5a:18:91:f1:b1:ae:07:2e:60:9d:52:41:05:a1:97:
                    90:88:af:d7:ca:e6:fd:8d:6f:14:cb:39:98:8a:40:
                    fa:23:6b:68:b5:d6:94:19:de:1a:cc:cb:11:c6:87:
                    2e:a1:47:9b:ac:7a:f1:fa:82:2d:25:ea:48:10:81:
                    8f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DE:7F:BF:71:59:15:9A:27:17:64:F2:0D:50:E9:89:77:B4:71:63
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32372e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:7e:c2:9b:57:6e:2d:69:39:77:7c:d5:d0:69:05:be:ad:17:
         ef:74:7a:b4:36:24:5b:aa:14:d7:29:5a:61:76:70:85:ae:b4:
         a5:84:0d:6d:f2:df:0c:af:e5:97:29:4c:db:06:e4:57:30:5f:
         d1:22:da:4e:d1:68:62:03:5a:35:fb:95:79:fc:69:3c:80:35:
         80:d9:9d:c3:22:62:84:9b:04:69:37:a1:e0:a2:fa:80:e9:00:
         b2:96:b3:66:ed:33:92:20:95:ee:64:db:a4:43:f9:77:cb:c1:
         f8:6e:79:b7:26:53:4e:28:ef:cd:80:2a:80:3d:f4:17:20:81:
         89:9c:7c:38:5e:8d:ca:1f:1d:c2:c9:a1:c2:13:d9:1f:91:4e:
         bf:41:bb:e3:80:55:29:4d:da:0e:0d:c3:60:8e:7b:d0:06:7a:
         83:91:22:bc:cf:ed:20:64:26:2a:4d:cd:8c:ee:8d:c9:b1:80:
         90:fb:af:d6:1d:59:c4:ba:d4:25:02:93:d9:c9:d3:c6:e7:f0:
         73:3e:36:53:07:4a:f8:28:4b:85:4a:8c:2d:12:7d:ca:aa:68:
         70:c4:66:28:e8:08:f5:d5:cf:f9:27:2c:f0:47:4f:6c:9c:60:
         8c:53:8c:75:c7:fc:bf:aa:b4:9b:0f:77:d0:49:22:26:0f:ea:
         c5:a5:3b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:43 2025 by rpki-client