Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/34352e3233382e35322e302f32322d3234203d3e20323636383239.roa
File:                     34352e3233382e35322e302f32322d3234203d3e20323636383239.roa (raw, json)
Hash identifier:          n55WVPOzLyrv02VIAjaGLZL53d6XX06Ifhvo75Bgf1I=
Subject key identifier:   B8:D6:F4:5C:6B:DB:4B:B5:A9:18:CD:53:C0:1F:DC:21:4D:A3:FF:10
Certificate issuer:       /CN=7240E3F32D08F233B6A11CDF0B1A245738B622B1
Certificate serial:       62FF9C025744FF469ADA3641AB5A0C0CA39D4168
Authority key identifier: 72:40:E3:F3:2D:08:F2:33:B6:A1:1C:DF:0B:1A:24:57:38:B6:22:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/34352e3233382e35322e302f32322d3234203d3e20323636383239.roa
Signing time:             Tue 04 Feb 2025 18:34:56 +0000
ROA not before:           Tue 04 Feb 2025 18:29:56 +0000
ROA not after:            Tue 03 Feb 2026 18:34:56 +0000
asID:                     266829
IP address blocks:        45.238.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ff:9c:02:57:44:ff:46:9a:da:36:41:ab:5a:0c:0c:a3:9d:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7240E3F32D08F233B6A11CDF0B1A245738B622B1
        Validity
            Not Before: Feb  4 18:29:56 2025 GMT
            Not After : Feb  3 18:34:56 2026 GMT
        Subject: CN=B8D6F45C6BDB4BB5A918CD53C01FDC214DA3FF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:14:b0:1a:18:ef:a6:79:08:91:d2:b7:44:
                    2a:6d:bc:17:38:b4:8a:c7:8d:f8:27:52:e0:57:cd:
                    29:80:ee:24:be:3d:29:cb:56:26:63:09:f8:89:82:
                    20:bd:87:30:b1:fc:b5:ad:0b:45:7f:82:68:83:2c:
                    7a:98:01:f7:ed:71:7c:1e:34:84:dc:ed:5b:6f:66:
                    36:8d:b4:d7:bc:f7:66:8a:d2:8f:26:af:20:15:78:
                    66:bd:6d:39:d3:bb:bb:af:8a:b7:07:4c:84:34:95:
                    0a:9b:38:74:cc:8d:5e:06:57:0c:cf:fe:b4:63:5e:
                    00:fe:a6:f9:d2:fb:2b:a3:f7:d5:1a:68:69:f5:d8:
                    39:a6:85:18:8e:4f:a0:ca:80:4b:58:b4:16:0a:a3:
                    56:00:43:1e:70:78:02:af:09:3f:22:e6:95:44:e8:
                    d6:41:be:46:1b:65:d5:c6:65:3c:07:93:7a:4c:8d:
                    f7:e9:50:f7:15:8d:03:96:27:a0:c4:63:0c:6a:85:
                    bc:4d:9f:3d:5a:0f:7e:5d:fa:c5:ad:2a:47:34:78:
                    2b:30:18:fd:c5:c8:83:2e:ca:ec:b5:52:7d:ca:3f:
                    31:1d:00:5c:b1:f4:a9:82:5f:64:9c:93:a1:79:9c:
                    a3:ab:0c:71:46:5f:ba:fd:09:79:39:2e:39:e9:d2:
                    fe:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D6:F4:5C:6B:DB:4B:B5:A9:18:CD:53:C0:1F:DC:21:4D:A3:FF:10
            X509v3 Authority Key Identifier:
                keyid:72:40:E3:F3:2D:08:F2:33:B6:A1:1C:DF:0B:1A:24:57:38:B6:22:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7240E3F32D08F233B6A11CDF0B1A245738B622B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561EA5EEEA7BCC66F524FCEEA332CB58DB641871D0F042367C12B07C4CB91532/0/34352e3233382e35322e302f32322d3234203d3e20323636383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:fa:70:6d:a2:86:ef:ce:21:5d:c2:ae:19:6b:bb:22:91:
         ef:fb:cc:0f:d6:fd:62:3a:1a:50:45:91:a1:9a:83:40:16:d2:
         ac:89:21:8f:28:9c:f3:e5:c6:02:7b:34:9b:f0:1b:59:eb:78:
         18:06:d7:52:df:db:cc:15:24:cd:b8:8c:e0:92:a1:b9:a9:fb:
         cc:53:af:e0:56:83:b5:59:78:77:1e:51:04:a3:ed:c4:44:5c:
         a1:90:42:24:63:a2:ac:05:ab:81:dd:5c:c0:e4:10:bc:ab:e7:
         d9:6f:d4:bd:10:98:2d:2c:a5:84:da:ee:87:cb:8c:e3:21:8a:
         08:4d:7b:06:50:39:31:ba:00:59:cb:a5:84:31:74:87:78:d4:
         6b:61:6b:f6:57:29:75:69:97:89:7b:aa:13:9d:84:cd:fb:24:
         a8:ae:f1:ab:bc:69:d0:ec:5f:bb:94:14:58:79:d5:da:03:08:
         61:54:74:6b:a1:4d:d4:92:1d:a5:54:e5:b5:d5:c4:52:fc:46:
         2f:cc:ec:78:1f:d6:8a:ba:93:45:b1:60:09:41:de:93:0a:4d:
         80:01:94:b4:91:04:86:1b:f5:7f:00:bb:2b:a9:d9:6a:55:33:
         c8:87:ee:b2:16:6a:9b:b4:fb:72:4b:00:64:da:4e:95:0e:24:
         cc:45:6e:24
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYv+cAldE/0aa2jZBq1oMDKOdQWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI0MEUzRjMyRDA4RjIzM0I2QTExQ0RGMEIxQTI0NTcz
OEI2MjJCMTAeFw0yNTAyMDQxODI5NTZaFw0yNjAyMDMxODM0NTZaMDMxMTAvBgNV
BAMTKEI4RDZGNDVDNkJEQjRCQjVBOTE4Q0Q1M0MwMUZEQzIxNERBM0ZGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cxSwGhjvpnkIkdK3RCptvBc4
tIrHjfgnUuBXzSmA7iS+PSnLViZjCfiJgiC9hzCx/LWtC0V/gmiDLHqYAfftcXwe
NITc7VtvZjaNtNe892aK0o8mryAVeGa9bTnTu7uvircHTIQ0lQqbOHTMjV4GVwzP
/rRjXgD+pvnS+yuj99UaaGn12DmmhRiOT6DKgEtYtBYKo1YAQx5weAKvCT8i5pVE
6NZBvkYbZdXGZTwHk3pMjffpUPcVjQOWJ6DEYwxqhbxNnz1aD35d+sWtKkc0eCsw
GP3FyIMuyuy1Un3KPzEdAFyx9KmCX2Sck6F5nKOrDHFGX7r9CXk5Ljnp0v7zAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuNb0XGvbS7WpGM1TwB/cIU2j/xAwHwYDVR0j
BBgwFoAUckDj8y0I8jO2oRzfCxokVzi2IrEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjFFQTVFRUVBN0JDQzY2RjUyNEZDRUVBMzMyQ0I1OERC
NjQxODcxRDBGMDQyMzY3QzEyQjA3QzRDQjkxNTMyLzAvNzI0MEUzRjMyRDA4RjIz
M0I2QTExQ0RGMEIxQTI0NTczOEI2MjJCMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MjQwRTNGMzJEMDhGMjMzQjZB
MTFDREYwQjFBMjQ1NzM4QjYyMkIxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTYxRUE1RUVFQTdCQ0M2NkY1MjRGQ0VFQTMzMkNCNThEQjY0MTg3MUQw
RjA0MjM2N0MxMkIwN0M0Q0I5MTUzMi8wLzM0MzUyZTMyMzMzODJlMzUzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3uNDAN
BgkqhkiG9w0BAQsFAAOCAQEAXuH6cG2ihu/OIV3CrhlruyKR7/vMD9b9YjoaUEWR
oZqDQBbSrIkhjyic8+XGAns0m/AbWet4GAbXUt/bzBUkzbiM4JKhuan7zFOv4FaD
tVl4dx5RBKPtxERcoZBCJGOirAWrgd1cwOQQvKvn2W/UvRCYLSylhNruh8uM4yGK
CE17BlA5MboAWculhDF0h3jUa2Fr9lcpdWmXiXuqE52EzfskqK7xq7xp0Oxfu5QU
WHnV2gMIYVR0a6FN1JIdpVTltdXEUvxGL8zseB/WirqTRbFgCUHekwpNgAGUtJEE
hhv1fwC7K6nZalUzyIfushZqm7T7cksAZNpOlQ4kzEVuJA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:07 2025 by rpki-client