Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/34352e3137332e3232382e302f32322d3234203d3e20323633323338.roa
File:                     34352e3137332e3232382e302f32322d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          7lxDI/bkPrk/140sVr6njRXnf09mF+Z+yTCOseoOoZs=
Subject key identifier:   49:EF:AC:6B:F6:B5:45:99:86:2C:36:2B:22:80:D2:A9:C8:30:91:50
Certificate issuer:       /CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED
Certificate serial:       2AEA46728768161CD7D0F82CAF4B4D8DD1B7257C
Authority key identifier: EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/34352e3137332e3232382e302f32322d3234203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 20:05:15 +0000
ROA not before:           Tue 04 Feb 2025 20:00:15 +0000
ROA not after:            Tue 03 Feb 2026 20:05:15 +0000
asID:                     263238
IP address blocks:        45.173.228.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:46:72:87:68:16:1c:d7:d0:f8:2c:af:4b:4d:8d:d1:b7:25:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED
        Validity
            Not Before: Feb  4 20:00:15 2025 GMT
            Not After : Feb  3 20:05:15 2026 GMT
        Subject: CN=49EFAC6BF6B54599862C362B2280D2A9C8309150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:b9:a1:c7:17:70:bc:5d:1e:9f:dc:ff:3d:
                    d0:3e:ca:39:3c:e6:27:4c:2e:bf:e8:c9:b4:2d:0d:
                    8e:69:d3:a0:d2:01:5c:5f:5a:83:4c:56:d3:33:18:
                    b5:ad:bf:1d:16:79:cd:ff:33:41:8a:66:52:57:bf:
                    39:ed:59:db:3f:26:e1:da:ce:75:a4:f6:ed:bc:2c:
                    cd:ab:2d:20:63:58:10:6a:b5:d6:ff:57:84:cb:ad:
                    4c:20:b7:72:13:18:29:57:61:d9:39:56:b5:a7:6a:
                    9b:c7:c9:e5:01:1c:4b:6d:f5:53:3d:c9:f1:b4:d2:
                    79:aa:7f:73:cd:53:83:e7:0a:c5:34:62:c9:a5:c5:
                    91:92:38:c7:09:83:45:46:14:af:f0:72:01:1f:81:
                    65:19:4a:a2:b6:bf:43:1a:0b:96:7d:55:33:e6:05:
                    50:d8:94:ff:05:26:a1:c2:4d:2d:dd:ff:96:ae:fc:
                    d9:77:a7:bf:c3:46:50:31:01:b8:ff:68:53:c5:3a:
                    2b:50:4a:25:08:08:04:c6:68:d0:f6:91:4a:95:34:
                    9c:f0:6d:8f:b9:59:f2:7e:d4:38:d2:9d:c3:f8:12:
                    9d:97:35:ea:cc:2f:12:da:11:cb:3d:ad:2b:61:27:
                    59:ed:94:dc:24:c5:e7:38:b1:46:85:eb:5f:f7:64:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:AC:6B:F6:B5:45:99:86:2C:36:2B:22:80:D2:A9:C8:30:91:50
            X509v3 Authority Key Identifier:
                keyid:EB:48:A6:C9:79:1D:EF:12:29:0F:CB:FD:C6:3E:9C:8A:C2:C2:EA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB48A6C9791DEF12290FCBFDC63E9C8AC2C2EAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBDDDDCC26DBD9D0EF5C28747275CD801C96379A5D0A9B758DF4019CD88F8380/0/34352e3137332e3232382e302f32322d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c6:5c:ad:93:31:4e:e8:55:5e:d7:e9:de:be:1c:07:bb:78:
         f0:44:cb:dc:bf:89:c7:6f:19:18:28:00:ba:bd:9e:96:7d:e8:
         97:2b:b9:f6:4c:58:f4:24:b9:cd:51:27:a6:9e:13:e3:7a:1f:
         16:f6:a8:0a:31:22:a0:70:37:33:7c:8f:0c:09:2a:87:0f:53:
         fb:2b:98:4b:83:53:4a:fb:d2:c3:ab:3d:98:7e:ac:2e:2b:84:
         78:b3:8e:ee:e2:08:f8:ad:31:68:68:a1:9d:92:49:0d:2e:4a:
         6a:58:78:1c:16:5c:ed:bd:e8:25:0b:c0:91:5e:95:23:a2:3a:
         e8:29:92:b9:06:40:6b:4d:ac:38:be:18:06:b0:a7:ec:d7:0d:
         9f:59:8b:52:91:2a:b9:f7:5e:5f:ac:df:e4:ce:e4:b4:55:df:
         0a:f3:a2:49:05:b7:db:fd:b1:de:0c:c5:27:b6:83:53:59:0c:
         31:d8:08:ae:dc:e0:f1:36:7a:ac:1f:eb:3c:de:3f:e7:ab:39:
         1b:14:1f:77:55:39:cc:c5:74:67:94:6c:08:d6:2a:e0:15:d0:
         3a:bf:a9:bc:37:c4:26:30:24:73:d6:f4:48:53:cd:ab:94:97:
         6b:1b:b6:71:59:97:dd:36:89:3c:b4:dd:4d:0f:a4:87:c7:c7:
         3d:fd:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:41 2025 by rpki-client