Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa
File:                     34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa (raw, json)
Hash identifier:          VOZMtNv/XYYISg6JZp3IJf+k4UyA6fzHgEVR+cJmNec=
Subject key identifier:   08:0F:C1:59:03:AD:66:AF:EC:FD:D0:D1:61:DC:73:F7:B5:56:EA:C6
Certificate issuer:       /CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
Certificate serial:       7501C1DA096B7874DD2CCAF88461CE6E14199897
Authority key identifier: A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa
Signing time:             Tue 04 Feb 2025 18:32:41 +0000
ROA not before:           Tue 04 Feb 2025 18:27:41 +0000
ROA not after:            Tue 03 Feb 2026 18:32:41 +0000
asID:                     267677
IP address blocks:        45.162.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:c1:da:09:6b:78:74:dd:2c:ca:f8:84:61:ce:6e:14:19:98:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8605CAD99068BCEB84CE0EC5B22362F590A5BEE
        Validity
            Not Before: Feb  4 18:27:41 2025 GMT
            Not After : Feb  3 18:32:41 2026 GMT
        Subject: CN=080FC15903AD66AFECFDD0D161DC73F7B556EAC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:9c:57:8e:86:2a:0e:a3:30:d1:f5:1e:30:
                    6a:6c:88:15:27:28:67:9d:49:f8:8f:42:cf:1c:0a:
                    1d:33:e4:cc:e1:8c:b8:8a:e8:f4:4a:ad:fc:5f:34:
                    9a:81:09:8e:02:27:91:cd:b4:2d:43:2c:61:e6:db:
                    58:f0:b1:c8:b9:6f:59:54:b1:30:94:f3:8d:d3:1c:
                    2d:06:21:ff:42:fc:cd:f7:92:5a:6d:d3:1b:f8:d6:
                    79:af:f8:57:b4:3d:fd:b3:56:db:6f:c1:ab:47:69:
                    dd:7b:3a:c0:e8:00:85:56:af:98:57:1b:0c:d5:8f:
                    74:46:20:95:be:6f:0a:a9:1a:7e:9d:fb:af:af:68:
                    9c:5a:03:50:49:b7:8d:76:e9:ec:17:62:8b:19:55:
                    3f:c8:77:fb:0a:57:31:02:46:83:fa:72:72:fe:d5:
                    02:14:98:a4:c1:6f:0f:9d:22:e1:d8:54:cd:8a:ab:
                    c3:3c:26:77:62:08:05:20:76:a6:59:ff:79:86:b5:
                    1c:c8:4a:08:eb:bc:3e:bd:77:89:d2:c9:2d:5c:8b:
                    dd:8a:43:4e:cf:48:a5:75:e6:a0:9e:ea:c6:84:a5:
                    73:28:20:7c:5d:3a:21:d2:55:a2:dc:ba:59:15:c0:
                    82:a4:21:10:5a:ba:bb:a2:97:d4:26:f3:77:d9:c8:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0F:C1:59:03:AD:66:AF:EC:FD:D0:D1:61:DC:73:F7:B5:56:EA:C6
            X509v3 Authority Key Identifier:
                keyid:A8:60:5C:AD:99:06:8B:CE:B8:4C:E0:EC:5B:22:36:2F:59:0A:5B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8605CAD99068BCEB84CE0EC5B22362F590A5BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7564F059A8BBA4032207653FDDE6D660203002CFB10E156AF7C897E56198AC2/0/34352e3136322e3230382e302f32322d3234203d3e20323637363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:00:35:2d:87:02:a3:7c:69:02:18:28:29:69:d1:3f:e2:11:
         73:8a:a7:1b:82:2e:d8:75:cc:6b:cd:f4:ad:37:9c:ff:30:84:
         01:fe:be:38:62:2e:ba:0a:a2:41:a4:ae:1a:df:36:88:be:89:
         77:80:c5:73:66:a4:3c:ec:b1:4e:3a:bd:13:01:f6:b3:7a:e5:
         e9:37:08:05:c7:45:a8:77:5d:08:df:c6:6e:27:12:a0:a3:f6:
         9a:b0:6c:93:79:86:65:57:4c:6e:b0:b6:da:53:51:8e:12:54:
         e7:b5:e4:77:8d:3b:52:07:ec:e2:82:06:57:07:73:fd:20:b1:
         af:c8:db:e1:0d:33:37:08:21:98:ec:dc:33:1b:33:3d:07:0c:
         f2:fd:03:4e:62:fe:35:f3:1f:6c:9d:9f:1a:cb:dc:6c:58:30:
         6c:3f:26:20:f4:61:dc:45:30:d6:4b:24:d0:30:1d:18:4a:f1:
         e3:71:6e:0c:3d:05:91:f7:bf:02:a3:f9:ea:69:1f:a2:65:4b:
         b8:65:c9:4d:a4:70:c0:b8:b0:46:a5:fa:bc:53:b0:06:78:da:
         0e:df:91:9d:26:4a:02:b3:dd:44:0a:b8:31:33:45:45:27:0d:
         94:59:41:3d:0b:f2:08:48:1c:95:b2:68:60:03:97:d0:0a:f5:
         79:d5:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:32 2025 by rpki-client