Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4db35bbd-202f-4cae-a752-814c491a239c/752d09305bd9d99fa0fe94603d48ecb3f7170bbc.roa
File:                     752d09305bd9d99fa0fe94603d48ecb3f7170bbc.roa (raw, json)
Hash identifier:          LU0r/BeNdlNkghggtKS+vJYrY6PL6M5WGRtWAt7p0T0=
Subject key identifier:   F9:15:E6:FE:07:6C:DF:2E:67:C0:BE:F8:28:AE:2F:27:F8:9E:A6:D2
Certificate issuer:       /CN=73d102fe6fc8f8610d44ad1d0aee9283fb40998c
Certificate serial:       1EE6D0
Authority key identifier: 94:65:A9:1A:0D:93:7E:9F:41:E6:B6:8B:C1:2D:BE:27:2D:3C:A6:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d102fe6fc8f8610d44ad1d0aee9283fb40998c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4db35bbd-202f-4cae-a752-814c491a239c/752d09305bd9d99fa0fe94603d48ecb3f7170bbc.roa
Signing time:             Fri 12 May 2023 20:38:40 +0000
ROA not before:           Thu 11 May 2023 20:38:40 +0000
ROA not after:            Mon 12 May 2025 20:38:40 +0000
asID:                     264765
IP address blocks:        168.196.224.0/22 maxlen: 24
                          45.181.128.0/22 maxlen: 24
                          2803:7160::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025168 (0x1ee6d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d102fe6fc8f8610d44ad1d0aee9283fb40998c
        Validity
            Not Before: May 11 20:38:40 2023 GMT
            Not After : May 12 20:38:40 2025 GMT
        Subject: CN=752d09305bd9d99fa0fe94603d48ecb3f7170bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ab:6d:35:c9:79:06:e3:3f:5d:c5:49:91:10:
                    91:35:f5:c0:2c:1f:06:b0:6e:05:1d:2b:95:10:55:
                    c5:30:a3:c9:42:06:e0:33:0d:0a:ff:8c:86:d7:cd:
                    00:23:4a:17:a0:55:bc:31:ec:6e:c6:72:88:2f:32:
                    4d:62:fa:d9:48:33:c7:ae:7a:1d:4a:54:c7:99:1c:
                    64:f0:25:ef:84:03:14:6b:d1:3b:e7:98:33:fc:c6:
                    0d:05:2d:54:01:36:80:2d:cf:38:09:a1:7e:41:1b:
                    7e:dd:cb:92:cb:b7:97:6d:18:5c:d0:d7:95:d4:2b:
                    60:68:69:58:91:df:36:51:02:22:ce:e8:4a:dc:37:
                    2c:c4:46:b3:14:61:8f:9a:3d:81:ec:a1:86:b6:f3:
                    29:88:d8:1d:2f:04:a0:87:45:db:39:17:4e:5b:95:
                    06:92:7a:d9:48:3f:a8:97:1b:df:f6:be:65:e6:09:
                    9d:38:37:0e:46:6c:8b:23:f6:c8:be:3f:7f:87:b0:
                    10:8f:0c:93:e5:9c:c5:cd:7c:bc:8b:48:bc:44:5b:
                    dc:14:62:ce:57:5f:cb:4b:70:c3:00:dc:60:eb:53:
                    cf:ae:4e:ea:02:c6:80:bf:32:a6:f7:ce:ea:f2:b4:
                    65:91:34:d9:f8:e9:a0:27:e9:df:3b:95:2f:df:81:
                    2f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:E6:FE:07:6C:DF:2E:67:C0:BE:F8:28:AE:2F:27:F8:9E:A6:D2
            X509v3 Authority Key Identifier:
                keyid:94:65:A9:1A:0D:93:7E:9F:41:E6:B6:8B:C1:2D:BE:27:2D:3C:A6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73d102fe6fc8f8610d44ad1d0aee9283fb40998c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4db35bbd-202f-4cae-a752-814c491a239c/752d09305bd9d99fa0fe94603d48ecb3f7170bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4db35bbd-202f-4cae-a752-814c491a239c/73d102fe6fc8f8610d44ad1d0aee9283fb40998c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.128.0/22
                  168.196.224.0/22
                IPv6:
                  2803:7160::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:bc:50:34:61:8e:1d:a2:f8:be:8f:d9:f9:ef:cb:25:93:
         00:d3:aa:9b:5b:b0:01:33:c4:8b:6c:37:ac:13:be:ae:03:9e:
         c4:09:77:9a:95:10:35:f3:6b:a8:20:54:8d:0f:21:1f:b0:1d:
         82:fb:b0:ab:86:e2:eb:92:c8:96:1e:03:10:c3:b2:c5:c6:1e:
         b3:55:2d:25:cd:c1:b3:d6:e8:85:be:fb:d8:63:48:78:18:2b:
         71:df:8c:29:7e:7e:5f:e4:fd:48:f3:eb:1a:a2:c2:81:d1:18:
         1c:79:7d:ec:e7:23:3b:d8:fb:91:63:df:2d:f1:a1:17:8d:86:
         7e:5b:c8:24:3f:5b:ac:8e:97:e7:d0:c6:64:4e:ea:b1:27:12:
         f5:c6:19:4d:66:0e:94:4f:6b:fe:f3:f0:1f:70:7d:a1:f7:d0:
         4d:53:98:25:7f:94:e8:93:15:72:7a:44:1a:6d:2d:25:12:06:
         18:47:8f:71:ab:e8:17:cd:b1:b7:65:95:41:2d:d4:cd:a8:54:
         f0:3e:49:6c:53:fc:fc:76:7b:6e:62:63:d3:72:e2:d8:26:03:
         ef:c5:d2:0e:00:01:dc:2b:1c:1e:b1:8b:4d:e2:12:72:05:99:
         b1:5d:ef:26:67:89:01:36:f7:e5:d9:96:df:a2:5d:f8:66:f9:
         63:61:42:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:59:32 2025 by rpki-client