Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32342d3234203d3e20323636373235.roa
File:                     34352e3233392e33342e302f32342d3234203d3e20323636373235.roa (raw, json)
Hash identifier:          7DYPcDdRkJ5uAYvRAMEn/RXo0FVTlW+PrLrJGqIHwNs=
Subject key identifier:   21:E3:65:18:AA:2E:5B:6C:7F:A4:97:FF:B3:75:6D:A0:BA:4F:F0:5C
Certificate issuer:       /CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
Certificate serial:       1AAB87A184EE66B02DA9F422DE97015EB776FE5D
Authority key identifier: 9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32342d3234203d3e20323636373235.roa
Signing time:             Tue 18 Mar 2025 19:10:00 +0000
ROA not before:           Tue 18 Mar 2025 19:05:00 +0000
ROA not after:            Tue 17 Mar 2026 19:10:00 +0000
asID:                     266725
IP address blocks:        45.239.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ab:87:a1:84:ee:66:b0:2d:a9:f4:22:de:97:01:5e:b7:76:fe:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BE1895C8F64AEC52209EA2FDE7D308AED2DA640
        Validity
            Not Before: Mar 18 19:05:00 2025 GMT
            Not After : Mar 17 19:10:00 2026 GMT
        Subject: CN=21E36518AA2E5B6C7FA497FFB3756DA0BA4FF05C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:de:a3:1f:69:2c:10:88:a5:ef:f5:2a:6f:3e:
                    2d:0d:09:6d:82:1d:c8:cb:37:b8:7c:dd:8e:71:11:
                    2c:9a:8a:a1:33:14:70:89:18:6d:2c:e9:82:14:fd:
                    37:c6:9e:70:e2:42:50:89:41:0b:ff:d6:6d:83:90:
                    6e:cb:52:dc:ce:5f:e9:70:05:45:b0:fc:9a:94:c9:
                    c0:a1:3f:a1:bc:d7:c6:e3:49:1b:aa:ec:63:71:0d:
                    e2:4f:d8:6a:0a:cc:ae:cb:07:0d:dc:75:1e:8c:d2:
                    63:cd:0f:b8:1b:86:ad:0a:c8:39:ee:07:50:ba:c4:
                    6c:93:df:30:29:dc:10:5b:85:c3:33:9a:ba:c4:e5:
                    30:5a:4e:ac:0b:0f:63:b0:b2:e4:f6:d0:12:1a:7e:
                    9a:39:df:ad:5d:59:d1:a4:38:30:62:9d:5d:ef:47:
                    19:c1:8e:8c:dc:f5:ee:7a:c2:9c:44:24:6a:ff:e6:
                    3e:4b:bb:16:c4:9e:90:85:53:15:8c:c6:c3:8e:62:
                    24:7b:50:b8:36:bc:89:1a:fd:41:49:fe:ef:b3:a9:
                    06:78:5a:28:e5:43:38:47:fa:ea:20:88:dc:1b:d7:
                    69:b0:d9:89:aa:85:03:b8:56:d5:07:e1:42:5f:34:
                    8a:a2:01:8d:a5:a3:d2:d6:76:f0:c1:cf:70:24:08:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E3:65:18:AA:2E:5B:6C:7F:A4:97:FF:B3:75:6D:A0:BA:4F:F0:5C
            X509v3 Authority Key Identifier:
                keyid:9B:E1:89:5C:8F:64:AE:C5:22:09:EA:2F:DE:7D:30:8A:ED:2D:A6:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BE1895C8F64AEC52209EA2FDE7D308AED2DA640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECDB73FCF1E6BD002DCB06BD6052691D622ED0910A7F2F051AEC692DDE984AEF/0/34352e3233392e33342e302f32342d3234203d3e20323636373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ef:83:74:34:a8:13:ae:3b:ac:4f:ff:ee:6d:a0:be:0b:06:
         c2:73:51:e2:15:9c:79:0e:ce:69:5b:67:7c:ee:37:07:1b:ed:
         2c:7e:78:12:28:56:df:99:4f:a9:c1:35:0c:ed:73:bd:f2:14:
         33:97:3b:24:0c:75:10:b7:ac:c3:88:52:a6:c8:79:52:53:29:
         ab:b8:5d:a9:72:cb:c5:83:c1:bf:b7:9c:dc:a0:93:27:1a:58:
         8d:e2:5e:32:ce:79:07:49:01:7a:10:ae:23:49:52:e7:32:0d:
         5b:e1:73:ec:d6:99:af:66:ca:85:d9:7b:76:b2:49:86:a2:cc:
         c7:a5:14:b5:a6:a3:c2:33:a2:be:d8:26:64:52:23:95:61:4d:
         ed:c9:02:70:89:5d:2e:00:d6:18:30:c7:17:0e:1a:8d:a5:2e:
         34:d7:10:34:1d:82:42:5a:3f:46:07:bb:13:b0:db:e9:70:77:
         68:a3:4e:8c:82:8a:bc:b4:d4:1e:6e:8d:88:44:cd:12:a9:e6:
         53:d2:1f:57:4e:b2:04:87:d0:f7:77:5f:bc:0e:ac:00:c3:4b:
         12:fd:ea:d7:11:64:93:b6:74:7a:53:e5:62:d7:05:f5:67:28:
         5c:82:09:cc:b2:c9:63:24:b3:ca:b9:53:70:45:2c:b0:1c:54:
         31:d3:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:27 2025 by rpki-client