Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa
File:                     34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa (raw, json)
Hash identifier:          mzNYCOmBkzDShpzfFRcJU8Z+CuEOVXuCuW1wyaoqRq4=
Subject key identifier:   16:1A:3E:9F:D7:0B:63:68:68:B9:B4:90:BF:E9:3A:ED:BA:AC:F4:9A
Certificate issuer:       /CN=8422A5C9039083170A21D8F8523768E40CD48430
Certificate serial:       30042C5D9E8FA2ACC4FB93DD5BBEEEA966F9975C
Authority key identifier: 84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa
Signing time:             Tue 04 Feb 2025 18:33:57 +0000
ROA not before:           Tue 04 Feb 2025 18:28:57 +0000
ROA not after:            Tue 03 Feb 2026 18:33:57 +0000
asID:                     269762
IP address blocks:        45.181.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:04:2c:5d:9e:8f:a2:ac:c4:fb:93:dd:5b:be:ee:a9:66:f9:97:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8422A5C9039083170A21D8F8523768E40CD48430
        Validity
            Not Before: Feb  4 18:28:57 2025 GMT
            Not After : Feb  3 18:33:57 2026 GMT
        Subject: CN=161A3E9FD70B636868B9B490BFE93AEDBAACF49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:5d:d9:df:1e:52:34:05:b6:d0:73:3c:fc:
                    94:bd:8c:6e:82:81:63:e8:12:aa:e9:07:df:8a:a1:
                    d2:2f:90:5f:c1:6c:2e:25:2c:b6:58:26:0f:d4:9e:
                    af:8f:49:6c:d6:a7:70:bc:a3:40:7a:3c:91:de:ce:
                    98:e4:f5:f8:75:3e:d0:98:21:a7:61:b9:24:c2:2c:
                    3d:fd:27:0f:3b:7d:d0:8f:73:3c:7a:78:75:a7:65:
                    a3:51:61:d1:f1:fe:c5:8f:8e:e2:a7:db:75:93:e3:
                    a9:57:ad:b1:69:e6:9e:2e:2b:8c:88:de:81:f7:56:
                    f4:c0:15:5b:39:c0:31:0b:d1:c4:c5:a3:0b:95:8e:
                    7d:a4:9c:8d:61:b9:98:27:e5:5e:0e:2f:3e:3d:b8:
                    d9:4e:8e:b8:d3:7b:f5:71:e8:78:b8:dc:d1:09:9f:
                    e9:d4:53:61:f7:64:18:dd:05:f3:fd:67:a5:12:59:
                    8b:ac:94:cc:86:4f:00:21:3c:23:78:76:1d:37:02:
                    b6:fb:7b:a6:ec:16:8e:14:8e:4d:84:a4:e4:57:da:
                    94:70:3f:dd:06:0b:33:0e:81:c1:de:9d:ed:5b:da:
                    a9:1a:5e:13:5d:1a:12:9b:56:cc:01:c0:c0:71:25:
                    7e:16:d5:d4:1d:3d:40:a9:7c:c0:26:f9:c0:3a:3e:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:3E:9F:D7:0B:63:68:68:B9:B4:90:BF:E9:3A:ED:BA:AC:F4:9A
            X509v3 Authority Key Identifier:
                keyid:84:22:A5:C9:03:90:83:17:0A:21:D8:F8:52:37:68:E4:0C:D4:84:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/8422A5C9039083170A21D8F8523768E40CD48430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8422A5C9039083170A21D8F8523768E40CD48430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0E69C534F495F3037BF8D224611E611C8092D6544871C9AF4531B4CE66C5CC2/0/34352e3138312e3136342e302f32322d3234203d3e20323639373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:fa:68:dc:b1:94:c2:10:51:cf:03:76:17:3b:7e:fe:55:
         f2:72:33:5d:a4:82:2c:1f:0a:e8:73:82:a8:7e:81:24:15:fe:
         94:f9:14:95:3e:d9:1a:66:46:22:26:28:67:ea:98:cf:37:ca:
         f3:c1:b5:df:32:a3:8f:26:eb:b1:3b:0f:03:88:58:6e:0c:8e:
         21:d9:83:e1:4a:f3:01:46:36:8b:fe:ec:5d:28:1f:b7:d2:66:
         07:46:a5:9e:35:fe:74:d2:a4:9e:4e:74:51:52:af:22:4d:35:
         19:81:36:5c:32:d2:8a:49:9a:e8:ba:c5:f6:a4:cd:68:87:2e:
         1f:d0:73:5a:3a:5c:79:8a:6c:6a:49:1f:df:1c:16:b3:1a:5d:
         1e:0c:b5:de:0e:04:74:4e:74:00:35:ea:cd:d9:fa:8f:01:b4:
         dd:d5:a9:90:78:2e:6c:19:c7:f3:11:4d:37:73:b0:0e:93:ab:
         13:d6:74:3c:94:ba:ac:3f:26:05:19:ac:f0:f9:dd:63:86:f8:
         9c:2a:45:63:2a:63:8e:a9:e4:dd:23:11:9e:ce:6a:cf:b3:55:
         53:b3:ae:c4:05:d5:d7:62:35:a9:ec:4e:6f:4c:c1:96:1f:18:
         53:03:e0:84:62:dc:9e:03:e1:66:3e:8c:45:87:28:33:7b:f6:
         95:22:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:17 2025 by rpki-client