Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39312e302f32342d3234203d3e20323731393336.roa
File:                     34352e3232352e39312e302f32342d3234203d3e20323731393336.roa (raw, json)
Hash identifier:          mNlMDN+3b5lOX0MQLiRWetihyjjun+oATp4lJLn4oac=
Subject key identifier:   FD:A7:EB:D2:C2:A5:59:76:0C:E0:36:1D:EC:4A:3B:5C:51:C8:4D:F4
Certificate issuer:       /CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
Certificate serial:       7EC4596FC043E2B8640603CDF03144FD7C41646C
Authority key identifier: 3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39312e302f32342d3234203d3e20323731393336.roa
Signing time:             Thu 09 Jan 2025 14:55:00 +0000
ROA not before:           Thu 09 Jan 2025 14:50:00 +0000
ROA not after:            Thu 08 Jan 2026 14:55:00 +0000
asID:                     271936
IP address blocks:        45.225.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:59:6f:c0:43:e2:b8:64:06:03:cd:f0:31:44:fd:7c:41:64:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A575D0F5F0EB7CC71330CE086214DBBA6B5C678
        Validity
            Not Before: Jan  9 14:50:00 2025 GMT
            Not After : Jan  8 14:55:00 2026 GMT
        Subject: CN=FDA7EBD2C2A559760CE0361DEC4A3B5C51C84DF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:df:f5:94:c4:0b:31:da:75:37:99:b4:d6:
                    0d:64:af:64:e1:21:12:2a:1f:1f:7a:9a:1c:f3:93:
                    3c:d7:35:56:47:f2:d5:ed:60:9a:72:2a:98:8b:cd:
                    cb:1b:4d:84:b5:b9:10:74:b3:5f:71:81:0f:e9:7b:
                    0b:df:11:d4:69:c1:50:d4:59:1c:66:87:4a:67:d9:
                    f1:d9:b5:10:c7:13:81:13:22:21:ee:f4:53:6d:9b:
                    3a:35:86:63:ee:3e:db:8c:e3:a6:eb:8d:9f:79:08:
                    44:59:4f:fb:41:92:f8:1c:f0:54:3c:20:fc:a1:53:
                    42:9e:cb:57:68:64:4b:4c:9b:bf:09:b7:af:ff:7d:
                    9d:6b:ae:eb:4f:70:c0:d7:67:ef:94:31:fd:ed:97:
                    01:70:43:d1:ae:f7:94:00:14:d4:69:b1:0e:85:c4:
                    fb:0f:bb:4b:9c:a9:b3:82:25:e5:c4:02:46:a2:75:
                    27:16:f7:47:86:ad:c3:33:d6:64:ab:02:65:3e:57:
                    42:70:53:32:53:4d:3d:38:54:c2:d6:0c:1e:c8:35:
                    1b:02:47:9b:f2:54:fc:f4:b3:a1:f3:ba:1d:94:90:
                    82:12:03:af:eb:f1:8c:a6:40:cc:f8:0b:2c:ef:c5:
                    8b:35:eb:b5:da:b1:05:0a:32:7e:79:87:5b:b4:da:
                    ec:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A7:EB:D2:C2:A5:59:76:0C:E0:36:1D:EC:4A:3B:5C:51:C8:4D:F4
            X509v3 Authority Key Identifier:
                keyid:3A:57:5D:0F:5F:0E:B7:CC:71:33:0C:E0:86:21:4D:BB:A6:B5:C6:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A575D0F5F0EB7CC71330CE086214DBBA6B5C678.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C5BBC50936AE9E2CC4775A0417936211212BF226BE8411711628FEAF690970/0/34352e3232352e39312e302f32342d3234203d3e20323731393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:1d:93:d4:72:77:f3:5b:4c:a5:c5:18:21:84:1a:7f:33:
         3c:24:c0:54:03:52:f8:f5:bc:ac:a3:7f:5a:17:6f:fe:fd:81:
         c4:2b:e2:78:4e:e0:a3:b4:07:02:c0:1e:82:1c:1e:ab:ff:6b:
         37:af:ec:cf:71:56:7d:3e:27:8e:7b:d6:a3:e1:5b:3c:58:e1:
         27:49:08:a8:81:ac:3c:bd:ba:0d:92:ad:f6:a4:b9:bf:d5:b2:
         81:65:15:08:ba:3a:1c:c7:fd:87:c0:b0:7b:e7:b3:a2:3a:d1:
         5d:dd:14:b2:2c:32:30:93:8a:f5:e6:23:4f:9d:2c:19:34:eb:
         55:a5:ed:e2:65:bd:6e:e3:22:5d:6e:b5:32:23:87:06:0f:1c:
         b5:3f:37:31:27:74:6f:1a:8e:e4:3f:b8:e9:43:8f:a4:f7:05:
         ed:c4:bc:83:70:c0:26:41:7a:c4:36:ac:ed:1b:39:10:d5:31:
         8e:9c:b4:65:a4:bd:2c:af:8b:86:1f:c9:47:55:bf:a8:72:1c:
         72:c8:e5:be:c1:cf:57:53:23:89:2a:74:e7:bd:e6:38:da:12:
         83:9e:57:eb:37:e5:e9:13:74:36:99:99:d6:85:8f:85:c4:76:
         19:86:c1:0a:22:6c:60:d9:5f:cf:f1:4f:a6:9a:d4:b7:4e:40:
         d3:80:16:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:40 2025 by rpki-client