Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38842C89A3322DDA60ABB9383676B2404CDA592E2ADA1B916DC1B083DEBD3548/0/34352e37312e35322e302f32322d3234203d3e20323635383230.roa
File:                     34352e37312e35322e302f32322d3234203d3e20323635383230.roa (raw, json)
Hash identifier:          5Fo4cGYeAHo7i0OsHAcSYqQQFh6OvbbUFZQO/qVzgFI=
Subject key identifier:   1E:4F:F1:F6:B4:A8:3B:E4:2E:A9:07:DF:A3:77:C0:9D:87:54:1E:86
Certificate issuer:       /CN=467283B8B4ACF2824E3C0F6D06E9481698DC6550
Certificate serial:       490FD609152317053C9123205F7DD1D347D96702
Authority key identifier: 46:72:83:B8:B4:AC:F2:82:4E:3C:0F:6D:06:E9:48:16:98:DC:65:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/467283B8B4ACF2824E3C0F6D06E9481698DC6550.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38842C89A3322DDA60ABB9383676B2404CDA592E2ADA1B916DC1B083DEBD3548/0/34352e37312e35322e302f32322d3234203d3e20323635383230.roa
Signing time:             Tue 04 Feb 2025 18:12:30 +0000
ROA not before:           Tue 04 Feb 2025 18:07:30 +0000
ROA not after:            Tue 03 Feb 2026 18:12:30 +0000
asID:                     265820
IP address blocks:        45.71.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0f:d6:09:15:23:17:05:3c:91:23:20:5f:7d:d1:d3:47:d9:67:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=467283B8B4ACF2824E3C0F6D06E9481698DC6550
        Validity
            Not Before: Feb  4 18:07:30 2025 GMT
            Not After : Feb  3 18:12:30 2026 GMT
        Subject: CN=1E4FF1F6B4A83BE42EA907DFA377C09D87541E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:3e:bb:27:1a:41:f5:01:b0:be:cc:0b:45:
                    37:af:6e:30:8d:59:59:c6:0a:8e:f5:90:24:a0:13:
                    e5:58:e3:b7:9b:7e:8d:a4:82:e0:91:99:c4:8a:00:
                    79:12:69:83:af:32:65:69:13:e7:a1:d7:16:4c:a1:
                    97:1d:49:2e:3e:fd:91:b9:a3:47:15:ff:02:a2:97:
                    78:aa:78:3c:9a:17:a3:cf:9c:36:b4:de:e5:80:90:
                    09:0e:8c:12:de:2a:94:32:17:d8:d2:ee:db:0c:60:
                    22:49:5d:86:7f:3f:7b:9e:42:b3:cb:19:3d:9d:2c:
                    94:20:b6:c8:44:ad:b4:b7:eb:86:51:59:ea:26:75:
                    60:e4:be:d2:85:47:5c:e3:b8:16:65:12:79:4a:35:
                    0e:c2:de:51:fc:a5:c6:dc:cb:73:13:05:58:43:d6:
                    f9:39:70:df:00:57:3b:e8:25:46:b6:db:24:c4:9e:
                    85:fa:80:e7:6f:81:9a:cc:5f:48:bd:ab:cb:7c:40:
                    a7:0b:ea:61:e7:9e:4f:92:f8:ca:a9:0d:72:aa:91:
                    6d:90:01:81:40:da:e6:32:17:d3:e5:9b:ac:90:b1:
                    3a:eb:c2:bf:ef:0c:6e:f5:7c:96:61:1b:f4:c1:15:
                    5c:c5:79:85:c0:03:75:5c:e2:09:05:be:13:7f:98:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4F:F1:F6:B4:A8:3B:E4:2E:A9:07:DF:A3:77:C0:9D:87:54:1E:86
            X509v3 Authority Key Identifier:
                keyid:46:72:83:B8:B4:AC:F2:82:4E:3C:0F:6D:06:E9:48:16:98:DC:65:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38842C89A3322DDA60ABB9383676B2404CDA592E2ADA1B916DC1B083DEBD3548/0/467283B8B4ACF2824E3C0F6D06E9481698DC6550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/467283B8B4ACF2824E3C0F6D06E9481698DC6550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38842C89A3322DDA60ABB9383676B2404CDA592E2ADA1B916DC1B083DEBD3548/0/34352e37312e35322e302f32322d3234203d3e20323635383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:2e:a5:ee:60:64:48:b5:a4:6a:86:aa:30:d0:f8:92:fc:
         2e:8e:d5:71:12:38:5f:65:e1:38:42:0d:ad:14:21:77:cb:05:
         a4:8a:40:3f:7b:f8:8d:6d:54:65:61:13:9e:9f:21:ca:c1:91:
         8f:22:e8:b4:6f:e4:02:4a:0f:c4:73:6a:ab:b7:6f:a2:e6:8e:
         6f:25:23:68:df:2c:29:33:03:45:c7:b7:59:d6:bd:7f:2a:3a:
         66:fd:7d:8d:b9:a7:6e:26:d6:8c:60:b6:51:5d:99:7b:0d:a0:
         56:31:3c:73:39:29:24:f2:c4:cd:be:93:8a:69:b5:bb:25:d1:
         1b:57:12:d7:9c:21:36:03:c3:94:fc:6f:41:84:48:79:b6:a7:
         04:9a:dc:c6:d9:84:be:b8:a2:ad:8f:4f:0e:71:33:05:d1:84:
         f6:d9:6b:33:8c:66:a2:a1:b3:af:03:00:e1:c2:0d:d2:d0:f7:
         9e:b2:31:5e:f3:86:cc:1b:1c:d0:5f:ea:65:43:a4:ab:e1:e5:
         38:36:d5:8a:4b:a7:10:d2:95:b4:07:72:c6:cd:fc:99:c5:47:
         b6:60:52:5d:ab:da:1d:a5:88:87:32:16:80:e7:cb:65:22:57:
         42:2a:7b:69:76:5e:d5:5a:a9:76:ae:93:ac:93:e9:9b:43:24:
         14:6a:4e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:29 2025 by rpki-client