Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/34352e3138372e37362e302f32322d3234203d3e20323635383136.roa
File:                     34352e3138372e37362e302f32322d3234203d3e20323635383136.roa (raw, json)
Hash identifier:          Vx6qVrRjphmCyA0vmaQTdWaEB2bzjLMR4vT7t+gXaVw=
Subject key identifier:   58:7A:E3:FA:02:80:D3:D8:22:91:38:03:5A:37:00:FE:6A:BC:15:DB
Certificate issuer:       /CN=8024515E87ADB4FD7907828213723907FEEA0D2A
Certificate serial:       597E3ED1EECEBB31CEFE5924B4527305A444018F
Authority key identifier: 80:24:51:5E:87:AD:B4:FD:79:07:82:82:13:72:39:07:FE:EA:0D:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8024515E87ADB4FD7907828213723907FEEA0D2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/34352e3138372e37362e302f32322d3234203d3e20323635383136.roa
Signing time:             Tue 04 Feb 2025 18:30:21 +0000
ROA not before:           Tue 04 Feb 2025 18:25:21 +0000
ROA not after:            Tue 03 Feb 2026 18:30:21 +0000
asID:                     265816
IP address blocks:        45.187.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7e:3e:d1:ee:ce:bb:31:ce:fe:59:24:b4:52:73:05:a4:44:01:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8024515E87ADB4FD7907828213723907FEEA0D2A
        Validity
            Not Before: Feb  4 18:25:21 2025 GMT
            Not After : Feb  3 18:30:21 2026 GMT
        Subject: CN=587AE3FA0280D3D8229138035A3700FE6ABC15DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:a4:10:91:ac:f0:ff:fa:cc:2d:9e:6f:69:
                    6a:c8:d7:95:9b:b3:06:ba:0d:5f:60:36:86:91:2e:
                    dc:78:e9:b3:21:f8:a9:20:a7:d0:d6:e2:50:c7:38:
                    39:6e:2a:23:3f:86:54:17:b8:00:be:a0:56:ee:21:
                    c3:5d:6f:0c:f5:0d:fb:f9:a9:7d:81:18:70:59:13:
                    78:68:8f:ba:54:a0:70:1a:2d:8a:a1:44:ff:32:31:
                    62:86:9d:32:2a:b2:d5:89:11:50:78:f0:94:ff:38:
                    91:d1:1a:c3:70:56:ce:d0:76:a6:4c:fb:41:f3:e2:
                    9f:3f:77:14:22:cf:d9:10:b4:c3:1a:8d:89:77:ed:
                    7f:46:7b:83:8a:d4:ee:c7:af:76:81:aa:6b:db:1d:
                    ea:25:09:90:9d:b9:be:ae:75:d5:90:5b:28:f3:0f:
                    ef:be:c3:a6:c2:fb:52:61:f6:f8:2f:00:42:6a:49:
                    e4:66:d8:b6:68:f3:6c:08:d8:44:2e:12:27:f3:61:
                    d5:b9:d6:6a:d2:90:1c:6a:14:c2:f0:81:d6:a5:b6:
                    54:57:03:99:05:79:dd:e5:88:cc:67:88:76:ed:f4:
                    22:3e:b1:da:ad:e5:4e:7c:dc:13:4e:21:9c:c6:9f:
                    02:bf:1c:7f:e7:7f:6a:4f:a3:73:8a:93:09:41:33:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7A:E3:FA:02:80:D3:D8:22:91:38:03:5A:37:00:FE:6A:BC:15:DB
            X509v3 Authority Key Identifier:
                keyid:80:24:51:5E:87:AD:B4:FD:79:07:82:82:13:72:39:07:FE:EA:0D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/8024515E87ADB4FD7907828213723907FEEA0D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8024515E87ADB4FD7907828213723907FEEA0D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5519354F96B51A51963D87CBC4117B65A9788B3D9284C4D8AAC3CE5EC8ECAAF9/0/34352e3138372e37362e302f32322d3234203d3e20323635383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:ce:25:6d:fa:7e:09:f9:a5:a3:7d:e2:0a:bf:15:a2:26:8c:
         69:a0:24:0b:e0:32:c8:c1:02:37:87:c4:d9:74:17:af:b8:7d:
         d2:cc:4a:6c:1d:1c:94:68:60:7e:ff:7a:92:82:1c:64:17:a3:
         bc:86:64:fa:de:35:9a:0d:b0:25:67:93:bf:db:d5:c1:8a:3a:
         b2:d2:1c:45:d2:f2:95:e0:86:39:1e:65:ca:7c:bc:ba:45:60:
         f1:85:1e:ec:b4:17:bc:b3:90:25:85:35:64:c9:22:b9:31:38:
         fa:bf:64:c4:af:50:fe:6e:9f:4d:e9:48:d8:84:b9:20:2f:48:
         2e:dd:7e:b5:22:96:51:83:8f:80:e2:2d:85:b2:3b:e1:04:37:
         6d:9a:27:2c:c7:e5:57:b9:24:e1:f9:3f:89:a5:c3:51:89:83:
         00:3c:b0:1c:a4:49:f7:3a:a8:59:99:86:e2:cd:c5:e1:ea:04:
         b7:5a:68:4b:51:47:7a:07:ba:7d:eb:20:ba:ec:cd:fc:f7:20:
         34:a4:e1:48:0f:1e:1e:0d:d3:6b:80:b1:d3:90:00:dd:d9:7d:
         c8:9e:af:1c:09:c8:c8:f9:a6:c9:ae:4a:2a:ff:75:c9:a4:ed:
         01:c2:ba:6e:57:2c:d5:84:e1:7d:af:2a:55:86:e2:99:fb:f2:
         39:78:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:49:10 2025 by rpki-client