Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20333935313631.roa
File:                     34352e3232382e36372e302f32342d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          HraPIbFN/b40MckBMOvlXWsJdWO6TwAK0jhvzWAATRo=
Subject key identifier:   64:88:81:E1:E5:BE:F6:61:F9:36:56:A8:AA:39:EC:B5:C1:C7:85:F6
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       0ED08920927D4B62A671B4952B3704A86F8EFD24
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20333935313631.roa
Signing time:             Tue 04 Feb 2025 18:52:37 +0000
ROA not before:           Tue 04 Feb 2025 18:47:37 +0000
ROA not after:            Tue 03 Feb 2026 18:52:37 +0000
asID:                     395161
IP address blocks:        45.228.67.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d0:89:20:92:7d:4b:62:a6:71:b4:95:2b:37:04:a8:6f:8e:fd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Feb  4 18:47:37 2025 GMT
            Not After : Feb  3 18:52:37 2026 GMT
        Subject: CN=648881E1E5BEF661F93656A8AA39ECB5C1C785F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:01:8c:3f:ab:56:ee:40:4c:2a:bb:4e:41:
                    f9:d4:89:8d:0d:39:25:6a:a0:88:a5:e0:06:0a:2c:
                    b7:39:72:fd:93:81:f7:3a:cf:93:62:ac:92:32:57:
                    40:45:4a:c8:b0:c2:0c:ad:af:71:d9:55:98:a5:6e:
                    3d:2a:05:8a:c3:83:5e:fb:30:c3:1b:31:10:c0:03:
                    59:6b:26:2d:ca:dd:fc:f1:73:35:dc:5f:68:14:15:
                    8e:cd:eb:0b:e0:fd:d3:c7:99:38:90:0b:11:25:e5:
                    59:a8:05:fb:d8:dd:04:59:d9:b6:fe:5e:b0:91:69:
                    aa:a4:a2:e5:7f:b4:0f:40:37:db:c4:97:60:0b:90:
                    66:90:8a:06:20:fe:2d:1b:7f:ed:ac:fc:47:27:75:
                    55:55:d6:0e:16:2a:c2:c8:d4:8c:1f:ea:aa:2c:ae:
                    cf:a0:04:63:cb:17:db:e8:5e:01:93:1e:a9:7e:f8:
                    19:ce:61:c1:1b:db:79:e9:30:61:90:de:51:ef:25:
                    f0:8d:bd:bf:34:4d:59:ad:cb:4f:45:09:11:2c:a9:
                    59:8a:d9:d8:d3:9f:13:f7:b6:80:71:03:5c:80:01:
                    bd:75:4a:85:c8:99:0a:b4:d0:85:09:c6:08:e5:ac:
                    1b:77:40:40:ae:c6:cb:ca:d3:8f:35:7d:16:f0:38:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:88:81:E1:E5:BE:F6:61:F9:36:56:A8:AA:39:EC:B5:C1:C7:85:F6
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/34352e3232382e36372e302f32342d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:86:ad:96:99:c3:4f:7b:64:0b:c5:25:79:f0:48:67:c0:bb:
         c2:2f:e7:75:39:40:86:25:67:4a:08:55:a7:b3:1e:2f:6c:9f:
         11:17:c4:c9:c5:52:83:8e:a9:20:ab:bd:f2:18:fa:07:cd:e7:
         38:24:0f:d9:45:c0:7e:a6:eb:a8:ef:12:38:74:8b:da:6b:e1:
         a4:68:d5:08:64:db:c7:33:3b:f4:68:f4:f9:d1:55:63:cd:5f:
         dd:d6:ea:42:ad:09:4e:6c:46:1a:cc:3a:86:39:2a:e9:a1:2a:
         98:e5:3a:7a:4b:41:4b:33:7a:91:60:98:d8:d2:be:6c:c7:f9:
         d9:2b:40:31:69:d5:84:9a:18:22:7d:10:f5:11:69:99:a0:36:
         e9:c1:8d:c0:5d:00:3a:7f:4d:00:55:6e:9c:1d:1f:4a:79:86:
         4a:5a:1c:76:ac:71:0f:81:75:05:70:c3:16:0b:0a:f8:a7:3a:
         d5:ee:7b:da:d1:79:b6:48:5a:53:ab:59:4c:a5:6c:f7:6d:d8:
         f0:58:a9:d4:e0:ca:4a:e2:47:d6:08:4b:9a:e3:06:19:07:e5:
         f4:69:e9:6c:fe:ae:95:c3:20:b6:55:27:99:89:43:99:be:ff:
         7d:62:23:6a:1d:d1:fb:72:68:7e:a8:f8:c3:57:cb:4a:44:a2:
         03:5c:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:04:10 2025 by rpki-client