Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa
File:                     34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa (raw, json)
Hash identifier:          C1L4eIBb3jMCeduVptyX3NFBQ4XtQgfZjPJ+RV7IB+4=
Subject key identifier:   79:F3:2E:49:A8:56:07:49:F3:50:B9:0C:4B:A8:F6:79:72:EE:5D:62
Certificate issuer:       /CN=17635987A6691105242D437D62AE03F09EC477A5
Certificate serial:       3BC4A53A178473FAAD2C43E66C95F4F082246E18
Authority key identifier: 17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa
Signing time:             Tue 04 Feb 2025 18:52:21 +0000
ROA not before:           Tue 04 Feb 2025 18:47:21 +0000
ROA not after:            Tue 03 Feb 2026 18:52:21 +0000
asID:                     266734
IP address blocks:        45.230.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c4:a5:3a:17:84:73:fa:ad:2c:43:e6:6c:95:f4:f0:82:24:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17635987A6691105242D437D62AE03F09EC477A5
        Validity
            Not Before: Feb  4 18:47:21 2025 GMT
            Not After : Feb  3 18:52:21 2026 GMT
        Subject: CN=79F32E49A8560749F350B90C4BA8F67972EE5D62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:ec:7b:f8:d7:16:34:ae:ac:1e:5e:93:64:
                    cf:66:36:da:17:60:9f:08:c9:a5:4c:f3:a2:79:af:
                    e5:10:f1:b5:d7:12:f3:39:3c:91:5f:3e:a5:21:01:
                    89:04:46:3b:d6:66:52:8f:5f:3a:d9:d0:82:0a:b8:
                    c9:79:a0:5c:7c:b3:09:86:c0:ef:cf:34:38:f9:4c:
                    33:c7:b5:a8:b1:11:fe:07:ef:b4:1c:2d:f8:05:c9:
                    74:f8:ef:8e:2f:b1:65:5a:aa:e4:21:67:fe:f7:45:
                    4a:06:10:6c:93:7a:43:e4:e4:12:d8:41:1a:2b:20:
                    b6:92:1b:20:d9:f8:2c:63:2f:69:7d:1e:45:b8:1b:
                    7b:00:9c:e9:98:4c:3f:e6:77:bc:c6:5d:65:3d:70:
                    44:98:92:ec:44:82:68:03:1f:5e:62:6d:ed:58:98:
                    bb:fa:e0:d2:c4:45:5e:76:b1:1b:14:23:2f:e0:49:
                    f0:a5:a8:24:dd:a2:f6:51:f1:d1:61:0c:cf:1b:81:
                    75:0a:c9:55:aa:26:c1:ea:52:65:b6:95:46:5c:88:
                    23:d6:36:45:2d:d7:20:8b:0c:f0:e0:fe:f0:4a:3e:
                    60:51:43:4f:82:28:ee:59:68:4b:c1:a7:a3:13:de:
                    8b:2e:46:df:d0:b4:58:db:47:65:f3:c4:0a:7d:51:
                    42:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:2E:49:A8:56:07:49:F3:50:B9:0C:4B:A8:F6:79:72:EE:5D:62
            X509v3 Authority Key Identifier:
                keyid:17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/34352e3233302e3231362e302f32322d3234203d3e20323636373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:54:29:c1:54:0a:52:d8:71:14:96:aa:57:21:a2:23:01:b9:
         10:5b:13:72:5c:55:72:cf:7d:d0:70:e9:80:b1:88:d8:83:1e:
         e5:c5:62:15:98:ac:34:e5:cf:e5:e9:64:3e:06:bd:e1:36:23:
         7a:22:79:a1:9a:b6:9c:0e:de:65:c1:5c:62:32:80:d0:62:ad:
         66:0f:c9:00:0e:06:99:fe:4a:07:44:8d:42:05:af:7d:9a:8a:
         d9:93:04:0e:4f:4e:4c:d9:0c:2a:96:5f:8e:50:98:6c:65:96:
         a7:fa:f9:1d:59:8a:9e:bd:60:30:09:c9:cf:4f:15:8f:56:da:
         88:f5:7b:9e:a2:81:48:f0:71:c5:3d:69:c7:d2:64:f7:61:5e:
         bc:5d:d1:ca:ef:27:ef:34:64:57:1d:dc:91:43:89:da:5e:13:
         d4:69:d8:bf:30:8a:43:af:42:ce:cc:21:25:a0:fe:16:05:d3:
         4c:d4:65:fa:fc:0d:81:f2:d3:46:af:d8:48:4a:d0:4c:70:aa:
         bb:97:71:c7:d7:ff:c0:5d:a9:55:ec:0d:9a:9a:9c:ee:15:e2:
         04:15:98:3f:60:d2:3c:b6:16:30:a0:9c:b8:72:62:71:05:76:
         a3:85:2e:75:ed:39:96:36:67:fd:1c:bc:a4:5d:e1:a0:90:d7:
         30:6e:08:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:52 2025 by rpki-client