Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
File:                     34352e3138352e31362e302f32322d3232203d3e20323733303339.roa (raw, json)
Hash identifier:          f41o99pbiqPHoDMJAEpYV0IJq/NJU263WK8qospwldc=
Subject key identifier:   DE:AB:A4:8E:21:26:B1:43:85:CE:E2:20:3D:C2:CF:6C:35:62:4E:6A
Certificate issuer:       /CN=F31886AD8E83200541E6D67B21D86C3BF4D2DA60
Certificate serial:       684039E4E9FC185A2810AEA79CAF2326A6C5A375
Authority key identifier: F3:18:86:AD:8E:83:20:05:41:E6:D6:7B:21:D8:6C:3B:F4:D2:DA:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa
Signing time:             Tue 04 Feb 2025 17:59:11 +0000
ROA not before:           Tue 04 Feb 2025 17:54:11 +0000
ROA not after:            Tue 03 Feb 2026 17:59:11 +0000
asID:                     273039
IP address blocks:        45.185.16.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:40:39:e4:e9:fc:18:5a:28:10:ae:a7:9c:af:23:26:a6:c5:a3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F31886AD8E83200541E6D67B21D86C3BF4D2DA60
        Validity
            Not Before: Feb  4 17:54:11 2025 GMT
            Not After : Feb  3 17:59:11 2026 GMT
        Subject: CN=DEABA48E2126B14385CEE2203DC2CF6C35624E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:53:50:65:f0:48:9a:eb:07:b7:6d:98:8f:
                    ad:1d:97:0c:0c:08:d5:9d:90:1f:2e:ca:96:4d:c9:
                    e9:b7:26:96:ad:53:9c:50:7a:45:2a:a8:d7:b9:49:
                    c7:18:f3:db:42:dd:f9:1e:1e:4e:6f:4c:1f:e5:c7:
                    2c:de:11:32:4b:db:0f:3a:6d:5a:9f:d4:b2:68:bc:
                    7d:de:e2:68:b7:97:62:31:ef:86:9c:4b:3b:29:b1:
                    e0:31:17:5a:f8:f3:e7:f1:14:34:2d:7b:8e:21:06:
                    c7:5a:fb:9b:f3:cf:7b:9a:f9:6a:8d:36:d8:cc:89:
                    c2:be:01:29:28:50:11:f2:48:d3:53:97:dc:65:b6:
                    b3:f1:d3:c2:e6:13:48:c7:0f:67:5e:37:2e:f6:8d:
                    c4:6c:79:2e:87:3e:cc:7b:5a:e0:49:22:5f:d0:c7:
                    fd:89:fd:df:56:5d:0d:23:8c:bb:c4:c0:03:44:55:
                    63:01:32:36:ab:74:bc:b6:92:e6:34:60:1b:0f:c5:
                    31:d0:96:3a:ac:ec:90:ca:3f:96:f1:09:99:e2:3a:
                    1c:12:6f:ff:ae:e2:18:49:34:2c:4f:e1:9b:29:33:
                    10:96:2e:86:49:46:7a:bd:60:56:76:e2:c9:90:b5:
                    e4:04:9d:9d:e1:12:42:07:36:79:57:fc:d0:f7:5c:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:A4:8E:21:26:B1:43:85:CE:E2:20:3D:C2:CF:6C:35:62:4E:6A
            X509v3 Authority Key Identifier:
                keyid:F3:18:86:AD:8E:83:20:05:41:E6:D6:7B:21:D8:6C:3B:F4:D2:DA:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F31886AD8E83200541E6D67B21D86C3BF4D2DA60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AFE5819E71CB8C00B3869A1C438E049A37CD331BABA10B57EB27E4F2B93F449/0/34352e3138352e31362e302f32322d3232203d3e20323733303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:13:a3:57:f9:7d:93:03:f0:ad:54:c8:05:66:25:8b:7c:a9:
         6a:d8:ee:4c:a7:1c:7a:8e:a1:b9:67:d4:48:de:27:24:65:b1:
         90:4c:cc:65:f0:9d:60:19:c8:54:65:64:3f:2c:36:60:50:1a:
         00:64:3c:25:11:d5:40:30:b4:70:04:ce:54:4a:e1:d5:27:ce:
         69:f8:6b:c2:a9:16:fc:71:06:65:3f:f1:b0:32:71:58:d1:ab:
         bf:e8:66:82:81:f6:c1:21:63:62:46:32:a5:a7:3a:76:e9:a3:
         ff:42:7f:74:cb:84:70:3d:33:d3:68:29:da:3a:06:29:58:63:
         c9:d7:8f:b8:47:f8:ce:83:a0:40:6c:46:98:2a:0d:55:d3:71:
         64:a4:8d:91:7e:72:aa:99:4e:de:81:ae:e0:ec:da:08:9f:5d:
         05:26:f6:18:d1:70:ec:90:19:cd:ac:aa:a6:df:7a:8c:fe:b7:
         b8:e2:5d:5b:ab:cd:a1:80:76:09:11:c8:ed:14:4b:b8:ff:48:
         66:80:ca:e3:98:f7:07:6a:c1:a8:7e:ee:6f:77:96:9c:56:3a:
         8a:c6:d7:8b:4c:ef:82:ec:6f:26:6f:b4:45:65:30:70:49:e4:
         69:d5:41:79:6c:3a:f5:1b:87:a5:27:b6:86:29:3e:43:9e:15:
         84:ea:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:21 2025 by rpki-client