Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33372e302f32342d3234203d3e20323637363830.roa
File:                     34352e3136332e33372e302f32342d3234203d3e20323637363830.roa (raw, json)
Hash identifier:          MGPQH3Im9gkkm+0Bn9ltqZawLZU5FUV33GSF8YICThg=
Subject key identifier:   EF:55:F9:6E:70:08:F1:D4:E0:B7:06:B0:F0:71:B0:C6:A6:B2:CC:60
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       0CCD348F64E4FCA8CBD101C2E59086CF3509DF04
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33372e302f32342d3234203d3e20323637363830.roa
Signing time:             Tue 04 Feb 2025 18:29:32 +0000
ROA not before:           Tue 04 Feb 2025 18:24:32 +0000
ROA not after:            Tue 03 Feb 2026 18:29:32 +0000
asID:                     267680
IP address blocks:        45.163.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:cd:34:8f:64:e4:fc:a8:cb:d1:01:c2:e5:90:86:cf:35:09:df:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Feb  4 18:24:32 2025 GMT
            Not After : Feb  3 18:29:32 2026 GMT
        Subject: CN=EF55F96E7008F1D4E0B706B0F071B0C6A6B2CC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:02:0a:a3:ff:9e:c6:dd:c2:4d:ff:fc:a0:
                    ec:d8:b1:79:8b:f9:ce:36:23:8c:fc:50:d9:a1:14:
                    fb:b2:fa:81:3a:32:36:b6:22:f9:c0:3c:04:5d:95:
                    45:a2:c1:72:58:20:0a:47:ad:2f:e9:f0:c3:c6:31:
                    29:84:75:d8:c2:9b:4b:30:12:41:61:04:30:07:ce:
                    19:bc:13:d0:8e:f0:1f:f7:a5:af:57:30:3c:55:b3:
                    8b:8d:cc:f0:15:83:54:d4:78:b4:73:c6:6d:de:93:
                    ec:82:47:95:4b:ac:7f:9b:65:4d:d3:fa:60:84:77:
                    f5:d4:4d:47:df:51:21:d3:bc:60:bd:32:0b:93:16:
                    10:e2:ca:dd:83:cf:a6:ce:15:a3:aa:8e:78:da:8a:
                    f8:5b:c2:51:1e:26:eb:0e:a6:5c:62:a5:14:70:35:
                    cd:df:04:19:50:d3:a3:d2:3e:26:cb:eb:f9:a7:c7:
                    fa:b4:ce:da:f7:6b:89:fe:00:48:ec:66:9e:f3:47:
                    07:1a:26:fc:90:74:f1:a4:bc:75:b9:10:4c:68:fb:
                    29:24:bd:c6:28:fd:fc:16:93:e0:2c:b1:cf:b1:7d:
                    be:93:eb:a2:6b:0b:4f:95:1e:82:74:0d:f2:d4:8c:
                    f9:3b:e8:80:31:b9:b2:b7:88:0d:60:4a:ab:a8:71:
                    05:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:55:F9:6E:70:08:F1:D4:E0:B7:06:B0:F0:71:B0:C6:A6:B2:CC:60
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33372e302f32342d3234203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:58:d3:1b:d4:cb:d5:b6:8b:c8:21:ef:fe:bf:fa:be:5f:a9:
         14:dc:16:de:55:59:d5:5b:83:de:b3:d2:51:50:a1:a3:1c:5d:
         1f:f4:7d:eb:63:66:36:ae:73:3c:ca:c2:b6:93:b3:cb:9e:19:
         8e:9a:be:ea:c5:05:97:6a:b4:d4:c5:ee:82:bc:65:ed:0c:59:
         a3:21:fd:7b:e3:33:ba:1b:58:77:c1:49:dc:aa:fb:e3:af:5f:
         58:7d:18:fd:82:93:d0:5d:d6:c4:47:56:56:e9:0e:26:c6:ed:
         59:30:0f:26:c8:e2:be:fb:5e:26:32:e7:2e:d5:a7:2c:3e:6a:
         f5:13:69:f9:28:d4:3d:98:64:4b:95:c0:f9:1d:0f:2c:a4:58:
         af:4e:03:93:d8:c7:04:3d:4e:84:2c:a4:b2:df:c0:23:60:c3:
         c5:f7:6c:25:cb:8b:f6:82:44:71:c5:c9:4f:67:7d:5d:0e:a4:
         cf:62:27:ed:30:27:ab:4c:7d:1a:dc:6f:14:d5:c6:e7:35:59:
         5a:14:ef:b3:8c:7a:16:1f:64:5b:fc:90:de:ff:b5:0f:fa:fa:
         95:8c:91:2f:59:72:7f:69:ef:05:be:8c:ff:dc:1c:a7:64:40:
         3a:16:62:38:a4:82:57:68:d3:76:43:49:e1:30:64:c0:e8:a4:
         81:8a:9f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:39 2025 by rpki-client