Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39302e302f32342d3234203d3e20323732393134.roa
File:                     34352e3232352e39302e302f32342d3234203d3e20323732393134.roa (raw, json)
Hash identifier:          udxER/S/dYXH8rmzXio52SFWlIdU1awngqujH9/eBMI=
Subject key identifier:   C5:99:1A:62:AA:76:B5:12:FE:44:2A:39:54:39:31:15:CC:3D:37:4C
Certificate issuer:       /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial:       7F181E170F11600318D8BF588D29BAD6A5637BB8
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39302e302f32342d3234203d3e20323732393134.roa
Signing time:             Tue 04 Feb 2025 18:53:57 +0000
ROA not before:           Tue 04 Feb 2025 18:48:57 +0000
ROA not after:            Tue 03 Feb 2026 18:53:57 +0000
asID:                     272914
IP address blocks:        45.225.90.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:18:1e:17:0f:11:60:03:18:d8:bf:58:8d:29:ba:d6:a5:63:7b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
        Validity
            Not Before: Feb  4 18:48:57 2025 GMT
            Not After : Feb  3 18:53:57 2026 GMT
        Subject: CN=C5991A62AA76B512FE442A3954393115CC3D374C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:3d:36:99:e9:16:09:b5:41:fb:6b:e7:e9:
                    40:e5:98:06:0e:42:f7:cb:cb:60:2c:fe:c2:9e:9f:
                    f6:1a:3f:a6:db:33:53:b7:5c:52:c8:bf:25:b0:2c:
                    7b:b1:5b:fd:f1:1d:d8:a8:19:2b:43:8c:0d:d3:62:
                    39:79:d6:ae:1c:ba:6f:4f:43:55:ec:fd:ed:d4:e5:
                    4f:7f:b4:47:7f:8f:3f:46:1f:35:58:68:a9:74:a9:
                    f0:82:74:6b:61:f8:91:22:b6:c1:ca:00:ae:89:03:
                    d1:41:f0:30:52:84:3d:a7:ce:a4:b0:0a:80:c2:c1:
                    af:ca:eb:db:67:f0:21:4b:9f:cb:b3:a7:59:b5:17:
                    e9:9c:28:cd:a2:af:9c:c0:15:d2:b7:73:a3:2c:c8:
                    e7:6a:05:92:9e:49:c7:3e:fb:54:16:73:ba:86:f5:
                    a6:3e:c3:29:24:4e:7e:5e:6b:3c:b2:c9:82:d3:81:
                    b6:d5:2c:eb:87:6b:03:fe:8d:f3:1a:97:ca:37:2b:
                    3b:da:43:66:11:88:4f:84:36:cb:a9:bf:7d:25:a0:
                    3c:a2:44:0c:d7:16:b0:a0:24:0c:d6:54:b1:b2:ff:
                    6b:68:e6:f5:cb:6c:5d:77:85:f3:b9:c3:be:c2:19:
                    ad:93:a5:ef:ce:91:bb:aa:ee:6f:90:6a:04:7e:e9:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:99:1A:62:AA:76:B5:12:FE:44:2A:39:54:39:31:15:CC:3D:37:4C
            X509v3 Authority Key Identifier:
                keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39302e302f32342d3234203d3e20323732393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:b2:53:10:e2:e5:0a:6d:9d:f3:ea:ab:8a:c6:a4:e5:63:e9:
         bf:f7:0a:85:bb:77:6e:3c:fb:63:fe:e6:00:c4:a2:79:30:cc:
         d9:64:3f:72:30:6e:89:9e:5c:47:87:88:1f:a2:42:4e:ae:ec:
         c9:e2:3d:4c:bf:fe:63:12:42:c2:6b:a8:c2:33:8f:09:37:45:
         09:2a:5d:bf:06:96:fe:c8:04:b5:22:44:68:5e:7b:33:26:26:
         8a:11:20:d2:64:0b:50:b8:ef:42:49:10:58:f6:04:15:d1:53:
         a3:42:34:6e:ea:20:ba:b0:61:1b:9c:c2:5f:4b:b4:aa:e9:fb:
         50:5d:4b:2e:bc:af:1e:c7:a1:26:ab:94:19:79:41:56:a7:2a:
         80:a9:ba:bf:9a:c0:0d:2f:52:14:af:d1:cb:5b:76:1b:fe:9b:
         f4:38:02:ec:02:f8:42:75:f6:94:15:37:91:0a:ff:4c:d1:10:
         f3:10:11:70:cc:1b:f2:9d:ca:d6:e2:7c:77:0c:ef:16:19:d8:
         e8:e8:66:4f:d1:16:bc:59:71:26:a5:e6:9a:6a:8f:fe:35:94:
         a4:e9:b2:cc:43:5a:45:d8:c6:c7:26:20:e4:3a:04:44:86:f5:
         85:27:91:07:28:8f:4d:0c:6c:d7:5d:34:c0:48:df:f1:cc:86:
         3e:17:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:57:59 2025 by rpki-client