Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa
File:                     34352e3232392e32382e302f32322d3234203d3e20323730303839.roa (raw, json)
Hash identifier:          Wp0AK3OSy4Zttdr/MkVorttx0lWmkXDJpiFOuhZQU8k=
Subject key identifier:   A4:91:03:16:DA:17:42:A9:C3:35:2C:F3:9C:07:3A:66:D0:E0:6B:D1
Certificate issuer:       /CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
Certificate serial:       7274E97FE00EED6CF9C3A9B1D52B353589854962
Authority key identifier: A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa
Signing time:             Tue 04 Feb 2025 18:32:21 +0000
ROA not before:           Tue 04 Feb 2025 18:27:21 +0000
ROA not after:            Tue 03 Feb 2026 18:32:21 +0000
asID:                     270089
IP address blocks:        45.229.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:74:e9:7f:e0:0e:ed:6c:f9:c3:a9:b1:d5:2b:35:35:89:85:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3
        Validity
            Not Before: Feb  4 18:27:21 2025 GMT
            Not After : Feb  3 18:32:21 2026 GMT
        Subject: CN=A4910316DA1742A9C3352CF39C073A66D0E06BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:19:cb:51:98:55:ea:b8:18:80:22:8e:4d:78:
                    a4:ed:2a:5e:78:df:cf:b1:c9:58:b3:9c:b8:84:eb:
                    4e:b2:24:91:1f:fe:74:eb:88:2d:f1:28:8b:96:3d:
                    fa:35:8c:90:ea:88:80:76:87:f3:aa:91:e7:a9:ba:
                    4f:1f:e0:cf:c2:82:96:41:16:4e:3b:f9:ed:38:50:
                    88:04:29:81:d5:42:db:b1:2e:2d:90:c4:92:cd:08:
                    07:8f:70:5b:d7:61:d4:7d:c2:a5:3e:48:79:6e:d7:
                    a5:74:47:2a:87:86:94:39:f3:0b:2e:a6:be:3a:bc:
                    7f:cb:43:05:bf:8e:76:e1:41:9a:1a:f7:5c:b2:17:
                    15:12:3f:26:24:21:87:eb:56:86:f3:bd:31:ef:7c:
                    c8:0a:a1:5d:ea:53:f2:2a:5e:d1:64:01:1d:a5:1e:
                    97:bc:cf:7b:af:3e:a6:05:c7:33:c7:4f:d1:9e:13:
                    54:53:dc:25:46:24:60:29:48:9e:8c:88:e2:cc:9e:
                    d7:ae:8a:61:c0:11:d5:4f:e6:7f:27:7b:a3:02:bb:
                    ab:08:66:03:e9:43:9d:9d:2b:d6:25:24:3b:fb:40:
                    0a:8a:41:b7:20:9b:cd:ae:8d:15:31:d0:74:4f:92:
                    89:79:c8:b6:ff:bd:31:e9:81:06:97:87:b7:b4:89:
                    54:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:03:16:DA:17:42:A9:C3:35:2C:F3:9C:07:3A:66:D0:E0:6B:D1
            X509v3 Authority Key Identifier:
                keyid:A6:1B:91:E7:DB:E2:FC:66:AB:BD:0B:2F:62:BB:92:44:50:5B:75:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B91E7DBE2FC66ABBD0B2F62BB9244505B75B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E0F82776DEFDD69FA94ED90012CDEEBCB7705D3C8E0AB44334442A0C2CBBB105/0/34352e3232392e32382e302f32322d3234203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:38:f8:28:bf:a6:17:2a:a7:64:3f:25:02:c7:b3:c9:db:
         64:82:c0:b5:dc:54:cb:c9:f2:a2:73:eb:86:89:ff:48:64:21:
         bc:74:1d:fc:dc:a5:60:91:79:94:61:a1:3c:ef:da:bf:67:8a:
         c6:d5:d3:54:c6:20:22:9e:eb:48:50:ad:28:00:a1:69:ad:d3:
         e6:c3:03:35:1c:fb:c0:23:94:35:70:f3:ac:d9:f7:fe:ec:6f:
         0a:e0:ce:7f:28:68:39:ce:f8:31:8b:c2:40:ad:49:32:5a:bd:
         f7:4f:e7:23:b3:51:0c:ce:29:f6:13:6f:22:23:fe:4e:3f:91:
         24:40:6d:bf:d2:d5:6d:0a:3f:78:38:21:44:dc:60:df:bf:c9:
         c7:6c:63:04:b9:61:bf:26:a9:9b:71:97:e1:24:d9:6a:8e:3b:
         b0:e5:0d:ca:ff:40:bb:67:85:f5:ab:08:40:ec:bd:cf:06:16:
         25:ae:d4:16:4c:c3:4c:77:4f:83:ae:b0:49:94:0d:aa:18:97:
         fa:bf:0a:3e:ee:0e:a3:ad:56:3b:a0:18:62:c3:77:91:c1:10:
         04:3f:af:9b:ee:60:01:26:3e:f9:b8:8f:ad:a4:be:73:bf:c2:
         71:ed:fd:c5:89:e3:ee:d2:09:a3:7f:6b:fa:09:31:67:7a:a0:
         8d:91:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:41 2025 by rpki-client