Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134312e302f32342d3234203d3e20323731383136.roa
File:                     34352e372e3134312e302f32342d3234203d3e20323731383136.roa (raw, json)
Hash identifier:          NVVpq/NvEgpvfLQFUDG3MV2YH3gOaF6quo5HOAO8VHU=
Subject key identifier:   FA:ED:31:08:A8:31:13:0A:A5:B8:C6:18:D7:56:DF:89:BC:56:05:CB
Certificate issuer:       /CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
Certificate serial:       358754B0EDAF48F9EE1EE3DE8428703EDCDF9CE4
Authority key identifier: 08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134312e302f32342d3234203d3e20323731383136.roa
Signing time:             Tue 04 Feb 2025 18:32:26 +0000
ROA not before:           Tue 04 Feb 2025 18:27:26 +0000
ROA not after:            Tue 03 Feb 2026 18:32:26 +0000
asID:                     271816
IP address blocks:        45.7.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:87:54:b0:ed:af:48:f9:ee:1e:e3:de:84:28:70:3e:dc:df:9c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08BC91A7FBFD34E8D23911A2D0560C2BD184DE11
        Validity
            Not Before: Feb  4 18:27:26 2025 GMT
            Not After : Feb  3 18:32:26 2026 GMT
        Subject: CN=FAED3108A831130AA5B8C618D756DF89BC5605CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:2f:6f:ad:77:3d:d6:26:a5:4c:bc:64:0f:
                    4c:03:07:4b:15:ad:44:04:1c:c3:8c:bd:a8:2c:ac:
                    f5:c7:8d:94:c6:cf:6e:4d:8c:ee:5f:d5:14:74:72:
                    47:7d:1d:ee:cf:51:a1:c0:20:3f:52:52:10:f2:a8:
                    37:c2:5f:84:07:5b:07:e7:47:5d:5f:9e:52:0b:51:
                    bc:27:88:96:39:c9:19:79:de:50:d5:7f:f8:54:ef:
                    2d:3c:2e:45:04:98:8f:13:14:bf:83:00:72:5a:37:
                    a9:61:6d:ea:09:5c:75:29:e2:62:46:45:a4:2f:0b:
                    03:3b:ef:40:7b:ab:1e:33:97:98:6c:39:f0:7e:6b:
                    64:60:ee:0b:90:d8:da:6e:d8:b2:62:76:1c:5f:dc:
                    a3:23:57:41:05:f4:69:46:ec:96:27:93:6e:4e:ae:
                    5e:d7:7f:5f:27:f4:36:57:f4:b2:69:ca:0e:a7:a8:
                    4e:27:fa:4b:95:0c:b5:a9:8d:5c:34:39:90:e2:3d:
                    b8:fb:dd:4b:13:07:0d:ad:fc:08:bd:c4:4d:f9:ff:
                    75:c1:a1:89:b7:18:98:9b:8f:8c:a1:1f:bd:d5:1e:
                    22:f4:04:87:94:39:3d:af:83:de:cc:df:79:90:3d:
                    37:c5:66:ea:96:99:82:c3:5c:75:ad:ff:4c:a3:78:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:ED:31:08:A8:31:13:0A:A5:B8:C6:18:D7:56:DF:89:BC:56:05:CB
            X509v3 Authority Key Identifier:
                keyid:08:BC:91:A7:FB:FD:34:E8:D2:39:11:A2:D0:56:0C:2B:D1:84:DE:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08BC91A7FBFD34E8D23911A2D0560C2BD184DE11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3564A67BED9FA7E698ADFB332CBE06092A709AD2BFBC7A66348AE7974428DB5C/0/34352e372e3134312e302f32342d3234203d3e20323731383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:13:eb:88:65:d0:73:34:61:b5:57:2b:1d:2b:ee:74:57:ee:
         2b:8b:cf:12:4f:4a:1c:43:96:6b:3e:1a:f7:f2:e5:8c:57:b0:
         5f:30:ab:f4:8f:d9:49:2c:44:3d:bf:f1:82:9a:2e:68:f9:78:
         e5:de:e6:02:a3:4b:3e:b3:e1:cf:bd:63:ae:e0:f8:5e:26:2c:
         15:a5:00:2b:f2:81:54:69:73:b5:5c:df:59:f2:30:4e:dd:4a:
         ad:b2:9b:56:cf:ca:3f:aa:50:d8:6c:1b:04:8c:65:26:5d:bd:
         97:2d:2f:1d:a6:32:32:5c:b8:cd:d1:91:40:dc:cc:bc:42:6c:
         71:54:31:d7:c5:56:95:88:4e:c7:10:e9:fc:df:cb:cf:6d:43:
         a9:4c:51:16:1b:6c:04:2c:f9:db:d7:d1:95:f3:e6:5d:58:62:
         2c:2a:f7:d0:1a:67:7b:7d:e4:82:f8:2c:3d:42:06:c5:2f:01:
         a6:35:16:e1:d5:e1:2b:ec:77:b4:3d:9a:ed:71:d0:bc:74:2d:
         b2:1e:e4:5e:23:ff:be:07:0d:93:75:de:91:ab:e8:e9:a7:5f:
         4f:e0:26:7a:57:22:9e:9c:2b:ae:31:9c:99:16:f1:12:33:16:
         51:7d:de:6d:6c:37:ac:13:b7:24:bc:dc:00:92:93:65:a6:2b:
         ae:1d:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:49 2025 by rpki-client