Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
File:                     34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa (raw, json)
Hash identifier:          lC2f3RXVp3TYb9p1PTNWDJ9TT8noennFNgZSE8sevTU=
Subject key identifier:   05:3E:D3:B1:40:81:06:14:C4:05:CC:37:E2:93:86:73:E4:04:F2:0B
Certificate issuer:       /CN=67695A57A246E7FEEC5E99692566E43D7F039663
Certificate serial:       5C9EBB052BB748D04185EC59DA0268080FFAB025
Authority key identifier: 67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa
Signing time:             Tue 04 Feb 2025 18:31:05 +0000
ROA not before:           Tue 04 Feb 2025 18:26:05 +0000
ROA not after:            Tue 03 Feb 2026 18:31:05 +0000
asID:                     266683
IP address blocks:        45.227.196.0/22 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9e:bb:05:2b:b7:48:d0:41:85:ec:59:da:02:68:08:0f:fa:b0:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67695A57A246E7FEEC5E99692566E43D7F039663
        Validity
            Not Before: Feb  4 18:26:05 2025 GMT
            Not After : Feb  3 18:31:05 2026 GMT
        Subject: CN=053ED3B140810614C405CC37E2938673E404F20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:df:cd:20:2f:4d:1e:d8:fb:a7:7a:98:37:
                    ab:f2:a2:34:c9:85:0f:6e:c3:87:d2:ea:85:c9:07:
                    fb:9d:2f:66:73:b6:c7:0c:cb:3c:e9:5d:f2:e4:9f:
                    bd:97:2c:18:43:09:40:41:23:96:24:7f:eb:e4:0e:
                    40:ca:31:82:9f:63:7b:07:b5:6e:e0:66:57:42:d5:
                    1d:1d:2b:84:e4:b1:c0:96:65:af:3a:69:8c:f3:28:
                    25:2b:a2:29:ec:c7:e2:07:01:63:60:d8:92:dd:04:
                    4e:65:34:06:fa:5b:fe:bd:d9:8f:c6:b7:09:3b:7e:
                    81:2d:1c:0a:49:8f:ca:e9:6f:b7:31:35:8b:28:5e:
                    3a:e7:35:70:c2:b9:a5:f7:b9:67:f0:c5:62:b0:8a:
                    a6:29:ce:1f:fa:e1:78:b4:a0:59:41:65:b8:ba:b8:
                    a6:ea:19:fe:43:d0:0d:90:44:d6:b6:1f:2d:16:a8:
                    8c:5b:e6:3d:29:25:63:24:1f:84:c3:e2:55:22:6a:
                    d5:c9:68:de:67:02:db:9a:eb:2d:e2:89:fb:46:c5:
                    42:be:27:56:6e:bc:b0:96:52:18:1b:b0:a3:a6:89:
                    9a:84:c2:49:73:6f:4f:26:11:86:8f:32:2d:64:4e:
                    e0:0d:d2:87:07:5c:e8:dc:dc:a2:a5:6b:57:51:a7:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:D3:B1:40:81:06:14:C4:05:CC:37:E2:93:86:73:E4:04:F2:0B
            X509v3 Authority Key Identifier:
                keyid:67:69:5A:57:A2:46:E7:FE:EC:5E:99:69:25:66:E4:3D:7F:03:96:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/67695A57A246E7FEEC5E99692566E43D7F039663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/67695A57A246E7FEEC5E99692566E43D7F039663.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/417D22770EA478544655959E65B0DAD6A398357FA67309A764AAD71A4D3941A2/0/34352e3232372e3139362e302f32322d3235203d3e20323636363833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:af:a6:8e:5f:5a:31:2e:0e:e6:9e:be:26:d4:e3:32:d7:
         2e:8f:2d:8f:9d:38:04:ff:de:15:c6:4f:9d:5a:1f:49:e3:26:
         34:cf:7c:1c:c0:d5:92:67:1b:33:da:f2:19:84:38:bb:09:cf:
         7f:69:3b:c0:0a:11:94:af:47:ed:fa:2c:5d:09:1f:bb:b4:06:
         63:97:67:21:77:ba:0c:da:9f:8e:04:95:40:0d:bc:1f:28:fe:
         a1:39:8e:74:54:0d:f4:9f:57:4b:53:15:96:27:ec:39:6f:61:
         2e:14:6a:26:2f:4e:8b:58:12:75:6c:59:22:5b:e0:b3:f6:e5:
         1e:80:4e:42:5f:2e:99:36:bb:db:aa:96:f9:34:a6:1e:be:00:
         aa:b9:6a:88:fd:93:39:2a:19:18:0a:2b:74:a8:6a:ac:2a:f8:
         7c:ea:45:60:e2:85:85:f5:80:4b:27:71:16:04:ef:75:5c:f0:
         64:c3:dc:18:6b:41:a5:8b:74:2a:56:91:1c:69:46:a3:a3:ad:
         3d:bb:8e:04:ac:71:ea:59:03:17:77:b5:97:88:25:84:ae:0a:
         28:6b:d1:26:e1:fb:1b:80:0e:45:e3:16:af:8b:4e:02:cd:df:
         94:0f:d4:11:1c:df:83:1b:25:ac:4d:3d:ba:07:5a:cb:c2:5e:
         12:be:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:07 2025 by rpki-client