Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
File:                     34352e342e3136302e302f32322d3234203d3e20323635363833.roa (raw, json)
Hash identifier:          9L4l9tcjyGlVuBz9JUU/dbGCbbeUoAKxnO9QTvBf+RI=
Subject key identifier:   D7:0F:C2:BE:44:81:3B:A2:CF:6B:19:FB:08:AB:F0:70:AC:FD:9E:F0
Certificate issuer:       /CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
Certificate serial:       6FCA5D62232FAA25FDCFFBD0762C3A20278423CD
Authority key identifier: CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa
Signing time:             Tue 04 Feb 2025 18:52:24 +0000
ROA not before:           Tue 04 Feb 2025 18:47:24 +0000
ROA not after:            Tue 03 Feb 2026 18:52:24 +0000
asID:                     265683
IP address blocks:        45.4.160.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ca:5d:62:23:2f:aa:25:fd:cf:fb:d0:76:2c:3a:20:27:84:23:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD3BE458FB49C7199926F12B0F7938C5DDC67C44
        Validity
            Not Before: Feb  4 18:47:24 2025 GMT
            Not After : Feb  3 18:52:24 2026 GMT
        Subject: CN=D70FC2BE44813BA2CF6B19FB08ABF070ACFD9EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:e2:1c:9c:06:80:8f:47:1a:db:16:b6:4a:
                    a3:d7:7f:2a:83:e2:35:ac:17:27:45:62:94:44:39:
                    24:77:5e:8b:11:8f:08:ce:8a:9e:54:43:67:4a:7a:
                    0c:20:02:14:5f:00:28:28:68:08:ff:f2:28:b4:73:
                    43:50:42:8a:23:55:db:6d:1e:5e:68:20:5d:64:83:
                    a8:5d:67:a4:b5:81:1e:91:af:0b:c3:0a:b0:31:64:
                    06:1c:aa:92:a7:6a:03:0a:4d:00:9a:d9:09:50:f1:
                    6c:df:a2:a3:18:c3:0f:46:d0:d7:53:c1:29:26:37:
                    24:59:bc:98:de:9a:69:b7:df:0c:72:7f:28:dd:47:
                    eb:83:e8:54:66:71:bb:57:e6:36:ed:a7:0f:43:83:
                    55:87:e0:83:a6:b1:85:00:b4:0b:01:ce:a6:85:ff:
                    24:7c:25:93:0d:cd:28:3c:34:15:fd:04:54:b0:23:
                    69:d6:1b:ed:c2:3d:4e:ee:19:2d:7e:c0:d0:2b:7f:
                    96:90:24:42:19:0b:3d:e6:36:92:0e:a5:4d:8f:d3:
                    f4:87:6d:18:41:ea:16:58:a5:aa:42:01:a4:71:20:
                    27:9a:57:a7:4d:a2:19:4c:d5:79:ae:b3:4b:c7:20:
                    0f:54:1d:d4:f7:ac:b1:60:b5:8f:19:5c:ff:f9:a9:
                    41:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0F:C2:BE:44:81:3B:A2:CF:6B:19:FB:08:AB:F0:70:AC:FD:9E:F0
            X509v3 Authority Key Identifier:
                keyid:CD:3B:E4:58:FB:49:C7:19:99:26:F1:2B:0F:79:38:C5:DD:C6:7C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD3BE458FB49C7199926F12B0F7938C5DDC67C44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7F07B0B4DCC086E95A4653E1D0DF39512381DE906695F6C9AF91329DEF19E59/0/34352e342e3136302e302f32322d3234203d3e20323635363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:08:aa:5e:a6:88:94:ab:7e:6a:00:9b:90:c6:ae:b6:5b:
         24:9e:b2:7a:12:d8:df:cb:ff:85:1a:63:f1:72:44:c2:10:9a:
         ad:c7:94:48:27:8f:6b:95:60:1a:c3:7f:2b:fe:e0:22:b1:0d:
         36:18:40:c0:56:cc:1b:98:86:e8:ec:f7:0c:8c:75:48:b2:30:
         53:ec:59:92:6f:f4:18:6e:72:ee:94:a1:b6:30:c9:cb:bb:89:
         23:80:4b:d3:78:3e:d9:4f:a9:7c:ef:e6:3b:01:61:3d:e7:a8:
         8e:e0:d3:85:63:c8:3d:2f:b9:ed:b4:9e:93:36:85:26:c2:df:
         f1:c8:c2:ec:5c:af:02:82:e3:39:75:ac:91:fe:6a:c4:13:12:
         60:9f:3d:b5:f9:15:75:17:f9:8c:32:3b:5c:d6:4f:85:8d:8f:
         be:90:3d:3a:06:fd:22:ab:ac:21:20:ee:86:af:bb:06:67:7c:
         f4:a4:e8:81:fe:60:87:ba:8f:31:38:39:90:e9:0b:87:3d:61:
         94:2a:60:e0:46:cc:21:02:e4:fe:6d:c4:a1:28:ce:e6:5e:e7:
         36:dd:60:5b:2d:84:73:bb:73:36:c9:21:8f:40:2c:31:a2:d5:
         c1:70:35:ea:38:5c:76:9f:a4:96:3c:10:4a:ec:21:45:ae:73:
         2f:31:35:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:08 2025 by rpki-client