Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa
File:                     34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          xb6zXK3+kS8lksi8izEyuBPbYsakzLid0I5CHDpJH2I=
Subject key identifier:   16:C1:FF:D9:80:3F:D0:50:ED:6D:1B:78:ED:EF:14:B4:8A:99:57:48
Certificate issuer:       /CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4
Certificate serial:       6C4ED2927297C7BBB8EFE73695D368064895DB98
Authority key identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa
Signing time:             Tue 04 Feb 2025 18:34:37 +0000
ROA not before:           Tue 04 Feb 2025 18:29:37 +0000
ROA not after:            Tue 03 Feb 2026 18:34:37 +0000
asID:                     269838
IP address blocks:        45.186.140.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:d2:92:72:97:c7:bb:b8:ef:e7:36:95:d3:68:06:48:95:db:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4
        Validity
            Not Before: Feb  4 18:29:37 2025 GMT
            Not After : Feb  3 18:34:37 2026 GMT
        Subject: CN=16C1FFD9803FD050ED6D1B78EDEF14B48A995748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:de:1d:bc:34:db:3d:30:3a:31:58:e8:9b:
                    da:5d:c3:4a:0a:c6:2e:8b:58:12:9c:9d:a0:a7:6f:
                    f5:18:8c:bd:ea:7c:1e:3f:6c:c9:2a:d8:07:22:e7:
                    15:62:57:e6:84:6d:fa:c9:28:1c:76:06:1d:76:98:
                    b7:a5:70:22:fe:54:66:9a:ee:eb:fe:e5:33:f0:a2:
                    b0:bb:28:be:27:23:3c:a3:28:30:70:1e:93:7f:ae:
                    22:48:32:fa:82:06:f6:98:de:74:cd:1a:3b:ad:24:
                    12:9f:0c:e6:66:d4:5f:45:4f:7c:c6:ea:df:14:93:
                    03:87:0d:38:d3:e5:91:90:08:56:16:ff:58:fa:16:
                    34:5f:0b:9e:9e:f6:59:d5:1d:3c:39:8c:e5:54:10:
                    1c:04:1c:c0:3a:a1:32:91:6b:39:04:da:68:ce:88:
                    44:60:a8:90:ac:78:02:31:d0:26:ac:68:3d:22:02:
                    12:c2:8f:d3:19:ea:18:b1:e6:04:0d:0b:45:5a:86:
                    83:89:e1:c0:6e:c1:8e:91:ca:a7:5f:ad:39:27:03:
                    26:a7:65:f6:8a:cf:46:8d:eb:05:58:85:5c:a9:ab:
                    c3:dd:e0:8d:46:41:8e:02:2b:3a:24:49:a5:b5:4e:
                    cf:5e:72:d0:cc:ac:1a:71:b0:0e:fe:68:17:35:5c:
                    bb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C1:FF:D9:80:3F:D0:50:ED:6D:1B:78:ED:EF:14:B4:8A:99:57:48
            X509v3 Authority Key Identifier:
                keyid:B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/34352e3138362e3134302e302f32332d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:81:bf:c6:dd:00:a4:96:d1:9f:e2:d4:76:ad:90:a8:a2:
         05:ec:f9:21:bb:3d:85:ee:22:dd:e9:51:e6:3f:c9:4b:0a:80:
         56:df:d3:82:e0:ed:0f:03:a2:5a:68:ae:42:1d:9a:0b:48:68:
         98:73:bf:4e:50:63:0e:9c:b5:26:01:c4:f9:22:0e:56:97:1b:
         e5:f2:80:98:c3:96:a1:c0:be:46:8c:11:35:10:0b:5a:35:cd:
         f5:26:46:31:5c:f0:b0:21:5f:80:4b:2c:7e:29:ef:61:d1:81:
         aa:41:92:ec:6e:5b:71:ef:b2:e5:9e:a6:00:7a:39:86:b4:35:
         4b:82:30:e0:52:6d:1f:ad:32:af:6c:6d:10:c2:a5:0f:3a:bd:
         27:b4:2f:70:d9:22:55:98:7a:23:44:98:26:09:09:63:92:16:
         46:8d:fa:2d:e0:86:c7:66:96:97:27:6b:c4:2e:e0:74:e1:18:
         af:b1:48:87:49:ee:1e:43:c8:88:41:2e:f0:22:68:d2:1c:6e:
         bf:fe:88:8c:75:83:cc:86:f4:80:97:ad:21:c1:cc:4a:d7:49:
         9b:1c:38:1e:1b:44:25:9a:0e:d3:ea:0b:17:a9:f0:c6:9d:43:
         57:e5:91:ff:81:7e:97:99:20:d7:b0:25:6d:ac:5d:38:c9:2b:
         b6:b5:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:48 2025 by rpki-client