Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/34352e3137382e38342e302f32342d3234203d3e20323637393138.roa
File:                     34352e3137382e38342e302f32342d3234203d3e20323637393138.roa (raw, json)
Hash identifier:          psdl0veBmqxvW+VoOU/GtC/C89U+C8K20zI/tQNW62I=
Subject key identifier:   81:18:5A:31:13:40:F8:B5:E5:05:8C:3E:99:1A:86:69:AC:0E:CD:E8
Certificate issuer:       /CN=27546F9D546FDC6043E85AB367A990FC32BA9281
Certificate serial:       0F9F9FCA7BB5933877CAFD797F137646C3CAD3C2
Authority key identifier: 27:54:6F:9D:54:6F:DC:60:43:E8:5A:B3:67:A9:90:FC:32:BA:92:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27546F9D546FDC6043E85AB367A990FC32BA9281.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/34352e3137382e38342e302f32342d3234203d3e20323637393138.roa
Signing time:             Tue 04 Feb 2025 18:04:47 +0000
ROA not before:           Tue 04 Feb 2025 17:59:47 +0000
ROA not after:            Tue 03 Feb 2026 18:04:47 +0000
asID:                     267918
IP address blocks:        45.178.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9f:9f:ca:7b:b5:93:38:77:ca:fd:79:7f:13:76:46:c3:ca:d3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27546F9D546FDC6043E85AB367A990FC32BA9281
        Validity
            Not Before: Feb  4 17:59:47 2025 GMT
            Not After : Feb  3 18:04:47 2026 GMT
        Subject: CN=81185A311340F8B5E5058C3E991A8669AC0ECDE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:89:63:b1:3f:55:51:b5:6e:6d:d1:8d:cd:
                    54:a4:4f:ef:f4:0a:21:2a:6b:a4:21:da:c5:23:f5:
                    d5:ef:86:11:eb:1f:20:ae:1b:96:a7:47:66:fe:02:
                    00:ca:8b:05:4c:4d:76:08:3c:1a:de:0c:fa:10:23:
                    df:af:ae:94:c9:0d:60:f6:11:16:a5:a6:5d:b9:68:
                    6f:23:2c:6e:8b:b3:8e:b4:04:e8:88:e4:10:d5:f9:
                    34:db:83:ea:55:0c:f5:5d:90:b0:f6:03:6e:f8:da:
                    d6:2f:55:cf:df:25:eb:15:59:ab:24:85:71:34:ec:
                    08:66:55:af:11:54:e8:33:73:36:b6:43:30:8b:cd:
                    86:f3:04:b2:15:d3:0f:66:38:6f:b7:df:81:e5:6e:
                    33:2f:79:dc:14:35:72:c9:41:de:d5:93:f5:04:36:
                    a5:53:3b:aa:87:39:59:31:91:55:98:85:7c:ed:5b:
                    c2:43:4b:ad:1a:a4:cc:b7:d9:d1:27:af:24:6a:61:
                    74:25:76:a0:1b:20:ba:a9:44:26:cc:83:9b:96:fd:
                    17:34:c0:36:61:62:bc:2f:14:55:79:0d:fe:e8:84:
                    53:1a:82:fa:bf:42:2b:55:46:cb:cf:af:af:14:b1:
                    9d:1f:3c:7f:65:d9:80:42:4f:c7:57:e3:3e:34:76:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:18:5A:31:13:40:F8:B5:E5:05:8C:3E:99:1A:86:69:AC:0E:CD:E8
            X509v3 Authority Key Identifier:
                keyid:27:54:6F:9D:54:6F:DC:60:43:E8:5A:B3:67:A9:90:FC:32:BA:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/27546F9D546FDC6043E85AB367A990FC32BA9281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27546F9D546FDC6043E85AB367A990FC32BA9281.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E74B1F5230CAF552B6161B5176207DBCBDD9A5BCE93CF28442077465C2E2A6CC/0/34352e3137382e38342e302f32342d3234203d3e20323637393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9a:bf:3e:c3:56:1f:7a:1d:00:aa:bb:df:73:d1:ed:31:d9:
         6d:11:73:e9:eb:79:01:ae:82:de:28:a6:09:8d:7d:89:38:09:
         fe:d7:71:e5:93:cc:e8:59:65:bb:4d:e3:de:e6:a3:87:49:ee:
         ec:b3:3f:6d:a7:42:15:0c:1b:54:86:b3:32:54:57:6c:1e:7f:
         e1:1b:1a:52:eb:7d:a0:07:a5:8f:2d:d5:c8:79:c3:4c:59:01:
         73:57:f8:23:93:44:f8:d4:2e:dc:0e:da:55:1f:14:52:ba:a2:
         64:c1:39:d8:72:f4:ad:f7:60:15:c5:e8:1d:54:1b:55:79:a7:
         09:ea:f6:d6:11:82:2c:58:52:38:24:7e:16:2b:d3:1e:8f:15:
         1c:5c:f5:da:93:c9:1e:8a:bf:bd:05:56:ce:e7:60:0b:ec:89:
         33:10:7c:82:37:4c:9c:0d:cd:c9:bd:9e:17:0d:2f:b0:ee:9e:
         1c:10:7d:b2:a7:1a:a4:d1:e3:fb:dd:fe:87:6c:c7:4a:ad:7e:
         fe:a5:70:88:c7:7a:f1:0d:15:47:4f:61:95:d2:7c:a2:ef:09:
         1c:58:ae:a6:30:1d:10:ba:15:36:8c:ff:9e:c5:ea:98:fa:1c:
         b7:03:3d:ea:cb:d2:38:50:64:4f:90:a3:29:29:bf:47:df:5d:
         ea:e1:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:07:42 2025 by rpki-client