Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32322e302f32342d3234203d3e20323635363835.roa
File:                     34352e352e32322e302f32342d3234203d3e20323635363835.roa (raw, json)
Hash identifier:          F33eintSjeTbvLD2xGF0iGt+nY+gV+TIwRfC5i4Yofc=
Subject key identifier:   15:E9:79:44:6D:41:73:26:A1:17:0D:00:A1:89:27:C4:9E:A6:D8:5D
Certificate issuer:       /CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
Certificate serial:       5C947AB3173A95D38BBB635A52F4D53522F343FA
Authority key identifier: 89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32322e302f32342d3234203d3e20323635363835.roa
Signing time:             Tue 04 Feb 2025 18:54:11 +0000
ROA not before:           Tue 04 Feb 2025 18:49:11 +0000
ROA not after:            Tue 03 Feb 2026 18:54:11 +0000
asID:                     265685
IP address blocks:        45.5.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:94:7a:b3:17:3a:95:d3:8b:bb:63:5a:52:f4:d5:35:22:f3:43:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895B4D927A602F9CA222D8FCAF756DD4A38DC945
        Validity
            Not Before: Feb  4 18:49:11 2025 GMT
            Not After : Feb  3 18:54:11 2026 GMT
        Subject: CN=15E979446D417326A1170D00A18927C49EA6D85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:9c:38:a0:04:70:01:51:d4:e7:0d:3a:87:
                    c1:39:dc:ae:03:a7:58:57:ed:94:be:25:90:06:b5:
                    11:2c:c2:c1:62:da:9e:08:55:19:ad:5e:8b:06:ed:
                    a2:58:6b:45:4f:3b:9d:bc:3c:3e:1e:f3:2d:39:51:
                    c7:12:69:ba:ba:b2:40:ec:20:4f:a9:af:0f:2c:73:
                    4a:43:a8:d1:27:94:2c:47:ca:ac:a8:1c:2e:24:09:
                    a3:67:ac:16:68:89:16:ae:92:00:93:7b:93:6c:c3:
                    54:00:a7:4c:aa:f4:10:dd:51:b2:42:df:ce:15:d6:
                    04:3f:8f:38:68:29:70:25:60:68:40:3f:e5:df:56:
                    23:67:8b:27:6c:21:16:41:5d:42:3e:5f:70:81:9a:
                    a8:dc:0f:e6:f9:91:4c:79:93:c4:86:72:68:ca:1d:
                    41:44:f6:5c:ef:c5:97:1e:e7:32:13:02:92:e8:8a:
                    3f:71:d4:49:69:5a:66:6f:98:d6:7f:c6:1c:27:37:
                    b9:bc:9e:fa:c9:23:68:b5:85:bc:6e:25:2e:80:cd:
                    cb:96:09:8e:3b:ea:21:b8:20:8c:37:5c:8f:db:9c:
                    ba:60:b8:c4:f1:ed:a5:7e:49:6b:44:02:57:bd:c7:
                    f7:b6:d5:ca:16:d7:a1:98:c1:8c:ce:36:22:e6:b6:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E9:79:44:6D:41:73:26:A1:17:0D:00:A1:89:27:C4:9E:A6:D8:5D
            X509v3 Authority Key Identifier:
                keyid:89:5B:4D:92:7A:60:2F:9C:A2:22:D8:FC:AF:75:6D:D4:A3:8D:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/895B4D927A602F9CA222D8FCAF756DD4A38DC945.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AF62B4175952DB361DCE557BE522179AC716A56A36A743D8E7268AFF1A4307B/0/34352e352e32322e302f32342d3234203d3e20323635363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:37:27:a2:a9:32:b0:b8:31:33:2e:78:ad:59:fb:35:c5:
         b3:f5:e5:1c:d1:ea:7b:4d:e5:e8:ba:8f:15:64:ec:2f:f7:59:
         13:85:b1:4a:2d:ec:3a:b0:ce:7e:a7:01:57:c2:14:ad:04:42:
         d4:d7:c3:32:92:12:6b:ec:15:6a:e0:fb:a2:24:39:fc:f6:32:
         c0:e9:9b:11:31:1a:cc:ca:a3:29:2d:7c:64:fb:02:88:37:f0:
         ba:59:89:68:b4:a4:85:42:e2:c6:c4:9e:8f:44:3f:66:1d:d3:
         dc:99:e7:56:dd:c2:7f:8f:e8:15:2f:af:46:09:08:1f:83:58:
         13:eb:f2:95:25:b2:c1:5d:99:61:ff:7a:ed:b8:70:ad:76:7e:
         c8:02:3e:d3:76:c5:38:c2:8d:b5:a7:e2:3d:8a:7f:79:7f:3f:
         9d:d5:00:b8:e2:bc:4c:8c:6c:c9:37:80:e1:4d:c1:ee:aa:19:
         b6:b7:9b:ff:57:f3:42:b2:fd:fc:31:39:09:f8:d0:1d:e1:b2:
         f2:b3:c1:28:97:23:a5:d5:b8:e9:21:3b:aa:06:45:fe:a5:a4:
         a5:bd:ab:6a:f8:4b:7b:35:42:64:ab:6e:14:25:b8:46:97:c8:
         a9:fd:a6:c8:16:d5:fa:94:d2:9a:53:35:ef:47:5e:ce:e8:34:
         2a:d0:7a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:35 2025 by rpki-client