Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34352e302f32342d3234203d3e20323637393234.roa
File:                     34352e3138302e34352e302f32342d3234203d3e20323637393234.roa (raw, json)
Hash identifier:          ilixX6R+aKBUvEenoHDO3WEekhI78FZx//JL6pHM43o=
Subject key identifier:   06:1F:6C:6E:3A:28:21:4E:22:C3:1B:9F:11:14:E4:19:79:E0:5E:16
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       42632D450C04CD1AAEDC29B7459136CAA2AB10EB
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34352e302f32342d3234203d3e20323637393234.roa
Signing time:             Tue 04 Feb 2025 18:09:56 +0000
ROA not before:           Tue 04 Feb 2025 18:04:56 +0000
ROA not after:            Tue 03 Feb 2026 18:09:56 +0000
asID:                     267924
IP address blocks:        45.180.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:63:2d:45:0c:04:cd:1a:ae:dc:29:b7:45:91:36:ca:a2:ab:10:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Feb  4 18:04:56 2025 GMT
            Not After : Feb  3 18:09:56 2026 GMT
        Subject: CN=061F6C6E3A28214E22C31B9F1114E41979E05E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:dc:2a:3f:ff:b9:f4:09:1f:89:1a:68:07:e7:
                    1e:7f:b4:89:4c:ba:c3:b6:ee:d1:e8:19:53:c7:45:
                    0e:2f:ad:a3:1e:74:ab:55:dd:45:fb:8e:89:7c:1b:
                    67:8c:9a:a4:2e:51:da:ab:3d:89:2f:88:15:a0:d5:
                    2d:ce:d7:16:91:83:87:f7:37:c7:c8:94:ac:72:fd:
                    2e:22:24:a7:b9:0e:44:4f:03:cd:45:fa:21:a4:07:
                    9a:e9:ad:7b:d1:df:02:1f:b4:37:37:02:22:ed:e0:
                    58:88:87:f0:76:7e:73:b1:0e:8a:7f:e8:00:eb:b2:
                    82:f0:71:9e:96:bb:44:90:b1:9d:81:0d:09:d4:ba:
                    b5:c9:7b:f9:e2:d8:ce:0e:fc:22:5b:bb:59:ee:73:
                    af:de:8f:81:55:77:94:63:3a:31:66:9b:24:ba:4e:
                    99:90:92:58:96:c4:2b:99:c8:37:ec:54:b5:42:45:
                    15:dc:49:ca:fd:d6:06:7b:78:a9:a4:79:6d:da:0a:
                    ca:10:ee:5f:ec:4b:77:ee:d6:bb:08:35:17:18:c7:
                    08:3f:0f:4b:f7:87:bf:15:d8:0e:de:13:de:dd:9e:
                    35:53:b4:13:22:51:a5:1f:65:67:a5:ed:0e:61:16:
                    7d:2e:8a:48:52:bf:70:9d:36:97:d5:51:53:68:04:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1F:6C:6E:3A:28:21:4E:22:C3:1B:9F:11:14:E4:19:79:E0:5E:16
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34352e302f32342d3234203d3e20323637393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:89:5e:bb:7c:1e:4f:26:12:64:20:f2:5f:a7:0a:13:9c:1d:
         01:96:e0:2a:c5:85:66:b4:a4:ee:81:3c:17:b4:0b:fc:af:48:
         3f:17:2e:94:c3:1b:39:f0:bf:74:60:50:61:6d:f1:8f:cd:96:
         fb:6c:e3:62:c8:3a:ca:63:e8:d9:9a:19:9b:78:7c:c5:c8:9b:
         b3:03:20:ab:ca:4c:f3:fe:91:d5:9f:99:82:63:4a:6e:b9:c9:
         6c:49:75:3e:df:2b:1b:30:3e:6b:ad:5a:ee:96:d3:c1:47:52:
         28:41:e9:65:fd:20:c5:59:c4:21:b0:15:b6:6b:3b:97:14:fe:
         33:50:de:af:24:67:34:eb:81:cf:3d:2c:6b:f6:a8:65:78:2b:
         c7:51:2b:5a:0d:e4:8a:10:66:fa:d8:a7:18:3a:70:d2:02:53:
         03:cb:aa:fa:43:4b:9e:0d:c1:e9:4e:7d:da:f0:b5:c6:ca:6f:
         98:8c:57:72:c6:f4:76:b3:86:b8:0b:2d:1f:47:b0:0a:48:b2:
         ea:33:84:cd:23:1e:7f:30:83:fb:66:10:b1:b9:06:bc:86:50:
         79:c4:3d:cf:da:c6:65:78:c5:1a:44:4b:e6:9f:16:b7:03:5f:
         d3:e9:a2:cc:0e:3e:e7:9d:74:64:80:fd:ac:4a:89:dd:4c:57:
         8b:b8:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:27 2025 by rpki-client