Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34362e302f32332d3234203d3e20323637393234.roa
File:                     34352e3138302e34362e302f32332d3234203d3e20323637393234.roa (raw, json)
Hash identifier:          R41dtKpk4eBGy0wf1uCdO3UCsRRlyTDKjsv8tJPGlu0=
Subject key identifier:   3C:67:DC:C9:6B:81:FE:CE:84:B8:E6:0E:4B:4B:AD:D7:E9:4E:FA:47
Certificate issuer:       /CN=1D5CEF406A72433445147FEB34D82682345AF563
Certificate serial:       5F2F2C13756214AB7A48CDFC12B22D39729A3312
Authority key identifier: 1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34362e302f32332d3234203d3e20323637393234.roa
Signing time:             Tue 04 Feb 2025 18:09:56 +0000
ROA not before:           Tue 04 Feb 2025 18:04:56 +0000
ROA not after:            Tue 03 Feb 2026 18:09:56 +0000
asID:                     267924
IP address blocks:        45.180.46.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2f:2c:13:75:62:14:ab:7a:48:cd:fc:12:b2:2d:39:72:9a:33:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D5CEF406A72433445147FEB34D82682345AF563
        Validity
            Not Before: Feb  4 18:04:56 2025 GMT
            Not After : Feb  3 18:09:56 2026 GMT
        Subject: CN=3C67DCC96B81FECE84B8E60E4B4BADD7E94EFA47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:ee:f6:ca:63:9c:df:86:1a:54:e9:c0:bd:
                    78:d0:7f:09:39:8f:9f:2a:8e:a1:76:f5:60:36:9a:
                    e3:1a:98:ff:3d:b4:50:62:28:d3:bd:25:12:bb:62:
                    df:26:5d:c6:50:c9:d6:a7:0d:d0:16:8b:4b:12:76:
                    1c:1e:79:9d:0f:40:50:1d:3a:22:f6:f2:56:aa:32:
                    4b:ba:fa:26:7a:6c:c2:5e:dc:01:26:e2:4b:01:60:
                    12:31:0f:91:b1:58:76:60:68:0a:0c:23:a0:44:80:
                    89:40:91:a1:e0:a5:47:9c:f8:4b:de:2c:8d:20:f8:
                    aa:9a:5b:1f:b7:e4:9e:c6:65:21:53:c1:8c:75:12:
                    c5:90:bf:d7:8c:42:14:b1:be:92:3a:e8:5a:af:59:
                    84:4c:a6:dd:c8:38:76:7f:1c:bf:c2:a7:18:49:26:
                    b0:8a:ee:70:bd:47:53:24:50:08:13:f4:f8:b6:01:
                    da:3e:18:d7:71:39:87:c8:2a:e3:bc:ba:a8:5d:ba:
                    78:93:2e:f7:1a:39:ff:e4:d1:f6:f4:b2:28:cc:67:
                    58:99:a2:29:6f:75:73:c6:df:7e:de:45:15:38:44:
                    6a:b5:cb:e1:14:58:59:8d:25:b0:df:61:8b:e8:49:
                    5a:2f:0d:ac:4f:a0:78:9e:5e:a0:79:c2:d6:de:a6:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:67:DC:C9:6B:81:FE:CE:84:B8:E6:0E:4B:4B:AD:D7:E9:4E:FA:47
            X509v3 Authority Key Identifier:
                keyid:1D:5C:EF:40:6A:72:43:34:45:14:7F:EB:34:D8:26:82:34:5A:F5:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/1D5CEF406A72433445147FEB34D82682345AF563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D5CEF406A72433445147FEB34D82682345AF563.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/124650AA869959E50101F007463E8A04CD82187D3487D6E94536A4E8926B30BB/0/34352e3138302e34362e302f32332d3234203d3e20323637393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:9a:06:25:b5:94:bd:9a:e5:30:50:0f:fb:60:af:12:67:
         bd:41:f3:dd:1a:27:03:0d:49:47:61:9b:93:81:05:dc:e8:17:
         1b:50:07:4f:27:b4:ab:3e:2d:de:7f:f2:eb:06:ca:ca:01:a0:
         d9:14:d0:fd:8e:3a:4c:70:0c:3f:9c:eb:37:86:2d:f5:ac:3e:
         e1:cc:f5:e5:33:49:6b:93:ef:4f:c3:cd:9c:3b:00:ae:a5:69:
         fc:32:96:92:26:58:41:88:60:ef:b4:fa:d6:7d:61:69:6b:05:
         e6:cf:ee:15:16:4e:ae:a6:0a:db:31:74:55:da:d0:0a:93:68:
         cd:be:3e:81:aa:93:68:ff:87:5d:40:cd:92:98:79:74:3d:4d:
         f5:0b:d3:46:c4:9f:0e:8a:ad:51:fb:a2:f0:ed:73:c7:3c:81:
         35:af:3e:26:f4:4d:67:51:5a:60:f3:f2:92:ae:1a:55:38:8f:
         1d:90:a2:e9:8a:89:24:52:02:56:44:b9:56:2e:63:4e:a4:99:
         39:2f:71:06:ae:62:da:11:eb:3b:85:e9:d8:54:c7:57:59:e0:
         a8:cd:8c:00:7b:87:a6:6e:51:79:ea:0a:00:dc:c0:df:2c:86:
         81:66:75:c8:40:ab:43:e4:2d:b6:2e:d0:17:fd:ac:43:98:61:
         89:80:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:26 2025 by rpki-client