Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203631343638.roa
File:                     34352e3233382e3231362e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          7epXDlRzgwV5QaBuMOlr288PrklCL4Wkx/pxD8mg7z0=
Subject key identifier:   5D:AE:AB:76:52:D9:08:87:62:CC:94:A1:FD:65:BB:8D:9E:36:C3:0D
Certificate issuer:       /CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
Certificate serial:       4D1F2E7A0C03AC4F2608F212FE64ACA6B4600965
Authority key identifier: 46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 18:39:26 +0000
ROA not before:           Tue 04 Feb 2025 18:34:26 +0000
ROA not after:            Tue 03 Feb 2026 18:39:26 +0000
asID:                     61468
IP address blocks:        45.238.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1f:2e:7a:0c:03:ac:4f:26:08:f2:12:fe:64:ac:a6:b4:60:09:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9
        Validity
            Not Before: Feb  4 18:34:26 2025 GMT
            Not After : Feb  3 18:39:26 2026 GMT
        Subject: CN=5DAEAB7652D9088762CC94A1FD65BB8D9E36C30D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:fe:67:86:c3:73:61:88:bb:28:18:9b:cf:
                    34:9b:c6:cd:13:68:0b:8d:8b:f4:17:f6:89:70:0c:
                    78:c7:12:78:45:bf:18:ef:fc:1d:48:f7:0c:1c:2c:
                    1b:73:98:2e:8c:dd:d0:73:6a:63:64:f0:03:8a:4f:
                    b2:39:7f:b0:e8:d5:7a:55:cf:b7:7b:73:fe:26:c6:
                    42:e1:49:dc:73:d4:1c:2f:1e:05:58:ef:8b:aa:ed:
                    97:35:28:cb:47:4a:74:2b:27:85:9a:f7:e0:3a:27:
                    b8:96:d3:ee:01:ea:0a:05:1c:ff:a8:1a:3d:3e:1e:
                    61:ba:01:be:bf:db:64:16:46:80:0c:c0:b7:97:9f:
                    52:95:df:05:d1:b5:1f:d8:e5:43:be:84:15:8d:d1:
                    96:03:ea:c4:a9:20:e9:00:e6:a3:2e:10:e5:b5:39:
                    47:57:cc:5d:38:4b:03:bb:e9:52:14:a3:d5:f9:a8:
                    ad:e8:41:ac:ac:e3:1b:4b:a5:ad:64:12:bd:6b:b1:
                    be:ca:2b:ed:43:21:eb:56:70:64:a6:75:8d:af:f6:
                    ec:c8:9b:e9:5e:98:cc:78:aa:1c:31:90:86:d0:f4:
                    e8:66:39:fb:96:4a:26:20:81:d6:3f:66:4d:22:3b:
                    f9:c9:1f:f7:ce:0b:f5:26:cb:59:17:20:b7:68:8e:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AE:AB:76:52:D9:08:87:62:CC:94:A1:FD:65:BB:8D:9E:36:C3:0D
            X509v3 Authority Key Identifier:
                keyid:46:E0:BE:72:AD:BD:D3:EF:75:63:F2:AB:10:8C:45:62:94:6A:7D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46E0BE72ADBDD3EF7563F2AB108C4562946A7DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/110535A5A34334C6C9768EAF968ACFC1F93D5145EC63C81C4F313EDC9007CA03/0/34352e3233382e3231362e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:1a:93:dd:18:e1:16:db:7c:14:3a:1f:c1:88:81:f8:18:8c:
         f9:98:c7:e0:0f:51:43:df:9f:f0:b8:56:c8:0b:42:d9:8f:bf:
         fa:83:59:c5:4f:5e:f4:e0:f4:c9:58:7e:6c:a3:3d:9a:ff:d3:
         e5:d3:31:cf:a2:79:af:c5:5f:e8:89:2f:10:b0:6a:9f:71:2a:
         00:ad:d3:44:f2:0d:5a:6a:cc:a3:6c:94:cd:ee:53:19:43:f1:
         98:c7:89:8f:f2:33:a6:37:d7:a1:ce:34:69:47:0e:12:c1:01:
         89:dd:64:70:3e:12:c3:12:77:da:aa:19:9f:a2:2e:16:4b:21:
         0c:ba:d2:7e:ca:ec:19:96:08:d3:35:2c:e2:c5:59:96:00:b6:
         9f:83:15:80:f4:45:71:51:40:05:87:e1:72:fa:a3:17:a9:a1:
         7c:8b:a8:6b:fd:71:25:ad:60:e3:6d:a3:c8:e0:74:05:bb:69:
         6b:9c:f2:fd:56:0a:7c:ed:e6:be:3c:3a:15:c4:f3:d5:82:99:
         9d:41:bc:30:c0:50:3a:b2:84:69:d1:51:19:0b:dc:4a:63:fa:
         5a:2e:6e:f2:fa:b0:58:b0:91:53:b7:11:b6:6a:c2:84:30:c4:
         89:94:76:98:19:ad:11:ef:8e:5d:c4:4e:3e:fd:88:b8:cf:a1:
         10:e8:62:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTR8uegwDrE8mCPIS/mSsprRgCWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZFMEJFNzJBREJERDNFRjc1NjNGMkFCMTA4QzQ1NjI5
NDZBN0RGOTAeFw0yNTAyMDQxODM0MjZaFw0yNjAyMDMxODM5MjZaMDMxMTAvBgNV
BAMTKDVEQUVBQjc2NTJEOTA4ODc2MkNDOTRBMUZENjVCQjhEOUUzNkMzMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOx/5nhsNzYYi7KBibzzSbxs0T
aAuNi/QX9olwDHjHEnhFvxjv/B1I9wwcLBtzmC6M3dBzamNk8AOKT7I5f7Do1XpV
z7d7c/4mxkLhSdxz1BwvHgVY74uq7Zc1KMtHSnQrJ4Wa9+A6J7iW0+4B6goFHP+o
Gj0+HmG6Ab6/22QWRoAMwLeXn1KV3wXRtR/Y5UO+hBWN0ZYD6sSpIOkA5qMuEOW1
OUdXzF04SwO76VIUo9X5qK3oQays4xtLpa1kEr1rsb7KK+1DIetWcGSmdY2v9uzI
m+lemMx4qhwxkIbQ9OhmOfuWSiYggdY/Zk0iO/nJH/fOC/Umy1kXILdojqUxAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXa6rdlLZCIdizJSh/WW7jZ42ww0wHwYDVR0j
BBgwFoAURuC+cq290+91Y/KrEIxFYpRqffkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTA1MzVBNUEzNDMzNEM2Qzk3NjhFQUY5NjhBQ0ZDMUY5
M0Q1MTQ1RUM2M0M4MUM0RjMxM0VEQzkwMDdDQTAzLzAvNDZFMEJFNzJBREJERDNF
Rjc1NjNGMkFCMTA4QzQ1NjI5NDZBN0RGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NkUwQkU3MkFEQkREM0VGNzU2
M0YyQUIxMDhDNDU2Mjk0NkE3REY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTEwNTM1QTVBMzQzMzRDNkM5NzY4RUFGOTY4QUNGQzFGOTNENTE0NUVD
NjNDODFDNEYzMTNFREM5MDA3Q0EwMy8wLzM0MzUyZTMyMzMzODJlMzIzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3u2DAN
BgkqhkiG9w0BAQsFAAOCAQEAgxqT3RjhFtt8FDofwYiB+BiM+ZjH4A9RQ9+f8LhW
yAtC2Y+/+oNZxU9e9OD0yVh+bKM9mv/T5dMxz6J5r8Vf6IkvELBqn3EqAK3TRPIN
WmrMo2yUze5TGUPxmMeJj/IzpjfXoc40aUcOEsEBid1kcD4SwxJ32qoZn6IuFksh
DLrSfsrsGZYI0zUs4sVZlgC2n4MVgPRFcVFABYfhcvqjF6mhfIuoa/1xJa1g422j
yOB0Bbtpa5zy/VYKfO3mvjw6FcTz1YKZnUG8MMBQOrKEadFRGQvcSmP6Wi5u8vqw
WLCRU7cRtmrChDDEiZR2mBmtEe+OXcROPv2IuM+hEOhinw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:20 2025 by rpki-client