Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa
File:                     34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa (raw, json)
Hash identifier:          swosYjI4WYNMngItcRhqNu3EqNqmJuFPvILMfJULuHE=
Subject key identifier:   22:C3:45:C0:1A:AA:47:4B:6F:BC:A8:55:6B:16:C2:B1:45:AE:82:62
Certificate issuer:       /CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
Certificate serial:       2A0D84B66D1E893DD4BFA669702406EC5543E385
Authority key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa
Signing time:             Tue 04 Feb 2025 18:04:43 +0000
ROA not before:           Tue 04 Feb 2025 17:59:43 +0000
ROA not after:            Tue 03 Feb 2026 18:04:43 +0000
asID:                     269874
IP address blocks:        45.189.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:0d:84:b6:6d:1e:89:3d:d4:bf:a6:69:70:24:06:ec:55:43:e3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A
        Validity
            Not Before: Feb  4 17:59:43 2025 GMT
            Not After : Feb  3 18:04:43 2026 GMT
        Subject: CN=22C345C01AAA474B6FBCA8556B16C2B145AE8262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8d:db:25:ac:e6:73:92:b5:60:d1:3a:1f:1d:
                    8c:91:0c:63:9d:2d:85:d5:b5:33:8c:50:15:45:23:
                    fb:2b:ea:30:62:5c:a1:17:67:a5:8f:62:ae:95:b7:
                    34:98:ff:8e:0c:1a:d5:d7:02:a5:dd:29:c2:27:60:
                    12:7f:f1:85:c8:a6:31:d4:54:86:19:3b:42:16:ee:
                    a1:ac:e3:4f:e7:59:22:70:7b:29:d2:db:2b:db:0c:
                    d9:ed:72:c2:72:26:08:a9:96:21:ab:75:21:ee:f0:
                    af:9b:7f:92:19:16:b9:d6:4d:98:1a:84:47:72:bf:
                    82:d7:14:3a:0d:c2:78:45:c3:7c:40:a5:f9:25:7e:
                    25:78:30:b1:80:62:f7:13:90:f0:5c:d9:d0:ab:e6:
                    06:d7:61:82:c3:af:de:36:f7:8c:ac:56:83:96:80:
                    2d:82:b6:f8:7b:8d:17:69:7d:a4:ae:e5:e2:15:1f:
                    87:e2:4f:82:8f:82:dd:eb:c7:83:33:51:a0:3f:23:
                    e9:14:17:27:1d:ce:6e:49:ab:53:75:83:8b:c7:43:
                    fe:27:45:ed:17:95:a8:36:a7:46:76:4d:51:a1:50:
                    1b:b6:30:4e:97:12:05:45:75:35:8d:b0:5b:b6:74:
                    c2:8b:c5:7d:9b:85:34:48:9a:21:09:d5:34:a1:09:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:45:C0:1A:AA:47:4B:6F:BC:A8:55:6B:16:C2:B1:45:AE:82:62
            X509v3 Authority Key Identifier:
                keyid:A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/34352e3138392e3138362e302f32342d3234203d3e20323639383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:a9:8d:94:df:66:87:26:9e:c0:97:fa:1f:97:58:07:73:
         e3:f0:99:4f:bf:70:ec:cb:9a:ce:b2:9b:f5:6e:4a:bb:23:ad:
         32:83:2e:a2:92:71:c4:57:52:4c:d6:0f:6c:bb:0b:57:d8:63:
         7a:56:fa:dd:fa:cb:3c:64:1c:d1:3a:a8:77:d8:96:37:5a:ee:
         24:27:0d:b1:50:a0:f6:2e:dc:57:b6:b7:31:71:df:bc:05:98:
         8e:bb:83:b3:c5:5f:bc:86:72:84:ba:8c:5f:1e:92:90:b2:ab:
         16:59:d9:25:73:18:77:ec:3b:c2:cb:5d:5b:b8:f3:19:d7:49:
         df:c1:e7:02:ce:be:3a:69:3e:24:48:aa:c0:ca:ee:f5:aa:66:
         c4:8a:de:f9:ec:70:d5:34:78:66:58:bd:40:61:0b:c7:00:22:
         04:d7:00:29:91:9e:0f:65:c7:33:40:7e:44:c8:b5:c6:4f:c3:
         33:3e:98:2b:49:05:eb:d6:2c:07:f0:5c:96:6b:e8:74:bc:48:
         5e:49:18:bb:c5:53:98:d8:a5:f3:7b:b6:50:1f:4e:27:26:cd:
         d6:55:1b:da:57:e9:05:0b:13:41:66:45:da:7e:22:04:cf:55:
         ab:34:3d:8d:55:2b:9f:98:e6:56:e1:a6:63:ac:15:be:a3:94:
         88:2c:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:54 2025 by rpki-client