Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/34352e3136322e37322e302f32322d3234203d3e20323636393034.roa
File:                     34352e3136322e37322e302f32322d3234203d3e20323636393034.roa (raw, json)
Hash identifier:          Bicof7DRrAevubZO0SCSZbCFJrEPujNOCHlWTx4l13k=
Subject key identifier:   E8:F2:9F:3C:56:E0:EB:3D:67:7D:17:A2:A2:A4:A7:94:B3:3D:9F:10
Certificate issuer:       /CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
Certificate serial:       02C6AB00B4379E82253E188DA0A81398780AF014
Authority key identifier: 6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/34352e3136322e37322e302f32322d3234203d3e20323636393034.roa
Signing time:             Tue 04 Feb 2025 18:46:06 +0000
ROA not before:           Tue 04 Feb 2025 18:41:06 +0000
ROA not after:            Tue 03 Feb 2026 18:46:06 +0000
asID:                     266904
IP address blocks:        45.162.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c6:ab:00:b4:37:9e:82:25:3e:18:8d:a0:a8:13:98:78:0a:f0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C898B2AB1194898EE3C5157F9BA618FBAF60172
        Validity
            Not Before: Feb  4 18:41:06 2025 GMT
            Not After : Feb  3 18:46:06 2026 GMT
        Subject: CN=E8F29F3C56E0EB3D677D17A2A2A4A794B33D9F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:12:e1:09:31:61:db:50:ce:5f:c5:06:d7:
                    a4:1e:41:a1:ba:3f:94:75:ee:35:f4:7f:26:ee:53:
                    ef:f7:bc:8f:9f:e3:a7:28:9b:fc:72:bf:cf:9d:d6:
                    40:20:e5:3a:76:45:1f:b8:e3:10:f8:b9:88:7e:6e:
                    b6:6b:a7:73:51:61:38:a5:98:04:61:ee:49:f5:7d:
                    94:8c:e2:9b:2d:f9:a7:5b:67:b7:0e:c9:5e:42:10:
                    a7:2b:60:bc:3e:bb:cd:d0:a6:28:f4:79:bc:2f:13:
                    1a:1c:72:2c:0f:66:77:1a:b8:66:82:8f:d1:2d:bb:
                    80:d9:20:20:6a:59:03:bb:50:bd:dc:7e:c5:32:1d:
                    19:7c:62:ea:d7:dc:be:01:24:73:03:ee:35:6c:db:
                    59:8e:24:ad:31:74:d9:3a:a2:18:0f:45:0f:05:c2:
                    2a:f4:a1:d5:38:43:56:52:b1:1c:fc:74:be:6e:43:
                    7d:d3:50:af:4d:d5:d6:70:b5:96:f3:60:4c:d8:b0:
                    d4:3a:4c:73:8a:ed:01:71:b5:66:b3:27:05:17:f6:
                    03:73:0a:a9:ac:e5:63:4b:20:4a:59:c5:79:9e:70:
                    bf:b6:b6:41:cc:2e:5b:00:9f:9b:bd:2b:11:ce:81:
                    11:0f:2c:6c:91:3b:c0:31:c8:9f:36:65:e3:83:38:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:9F:3C:56:E0:EB:3D:67:7D:17:A2:A2:A4:A7:94:B3:3D:9F:10
            X509v3 Authority Key Identifier:
                keyid:6C:89:8B:2A:B1:19:48:98:EE:3C:51:57:F9:BA:61:8F:BA:F6:01:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C898B2AB1194898EE3C5157F9BA618FBAF60172.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5672315F1D4D5145DC282888B8FD49CF14EF21FB351071AD8B40023FE9E8EF10/0/34352e3136322e37322e302f32322d3234203d3e20323636393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:f7:84:ea:4c:cd:ea:00:40:77:01:60:0a:42:90:22:7b:56:
         60:2b:ef:1a:84:86:35:0c:50:c0:28:3a:5a:d2:19:c4:58:fe:
         63:73:b3:8b:3f:f1:6a:0f:8c:14:84:82:39:90:e2:b2:01:35:
         92:42:ad:d3:e2:e8:2e:0a:bb:dc:e6:9d:6a:ac:ac:59:da:e6:
         e4:76:33:81:2c:81:44:ca:ea:14:db:8a:94:03:a2:24:2e:5a:
         c1:fd:06:17:88:e2:8f:de:84:29:27:69:96:80:2b:a9:d9:05:
         81:3b:2a:f6:40:92:0e:4e:ce:c6:6f:7e:33:dc:d9:e7:25:1b:
         21:27:9c:35:6c:2c:0d:3e:50:89:cc:ed:af:6b:b8:99:75:0d:
         8b:97:73:e0:15:90:24:ad:47:aa:38:28:ec:1b:e0:69:5d:75:
         99:e4:48:8f:37:b0:0e:f4:2c:0e:49:65:8f:0e:77:3f:46:b4:
         90:5f:55:2d:86:61:3a:f6:d6:43:02:1f:ae:bc:b3:80:66:d6:
         9d:79:c1:8e:2a:19:91:d4:44:8d:c0:43:7a:57:ca:48:87:2c:
         96:7e:61:3d:87:21:b3:3c:1a:6f:d4:69:22:d7:83:bc:39:0d:
         25:98:53:2f:de:bd:8a:c5:db:2c:a1:c7:4e:87:2f:ce:4d:6a:
         b4:8b:f6:d6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAsarALQ3noIlPhiNoKgTmHgK8BQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM4OThCMkFCMTE5NDg5OEVFM0M1MTU3RjlCQTYxOEZC
QUY2MDE3MjAeFw0yNTAyMDQxODQxMDZaFw0yNjAyMDMxODQ2MDZaMDMxMTAvBgNV
BAMTKEU4RjI5RjNDNTZFMEVCM0Q2NzdEMTdBMkEyQTRBNzk0QjMzRDlGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgExLhCTFh21DOX8UG16QeQaG6
P5R17jX0fybuU+/3vI+f46com/xyv8+d1kAg5Tp2RR+44xD4uYh+brZrp3NRYTil
mARh7kn1fZSM4pst+adbZ7cOyV5CEKcrYLw+u83Qpij0ebwvExocciwPZncauGaC
j9Etu4DZICBqWQO7UL3cfsUyHRl8YurX3L4BJHMD7jVs21mOJK0xdNk6ohgPRQ8F
wir0odU4Q1ZSsRz8dL5uQ33TUK9N1dZwtZbzYEzYsNQ6THOK7QFxtWazJwUX9gNz
Cqms5WNLIEpZxXmecL+2tkHMLlsAn5u9KxHOgREPLGyRO8AxyJ82ZeODOAM/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6PKfPFbg6z1nfReioqSnlLM9nxAwHwYDVR0j
BBgwFoAUbImLKrEZSJjuPFFX+bphj7r2AXIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjcyMzE1RjFENEQ1MTQ1REMyODI4ODhCOEZENDlDRjE0
RUYyMUZCMzUxMDcxQUQ4QjQwMDIzRkU5RThFRjEwLzAvNkM4OThCMkFCMTE5NDg5
OEVFM0M1MTU3RjlCQTYxOEZCQUY2MDE3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Qzg5OEIyQUIxMTk0ODk4RUUz
QzUxNTdGOUJBNjE4RkJBRjYwMTcyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY3MjMxNUYxRDRENTE0NURDMjgyODg4QjhGRDQ5Q0YxNEVGMjFGQjM1
MTA3MUFEOEI0MDAyM0ZFOUU4RUYxMC8wLzM0MzUyZTMxMzYzMjJlMzczMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzAzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2iSDAN
BgkqhkiG9w0BAQsFAAOCAQEAC/eE6kzN6gBAdwFgCkKQIntWYCvvGoSGNQxQwCg6
WtIZxFj+Y3Oziz/xag+MFISCOZDisgE1kkKt0+LoLgq73OadaqysWdrm5HYzgSyB
RMrqFNuKlAOiJC5awf0GF4jij96EKSdploArqdkFgTsq9kCSDk7Oxm9+M9zZ5yUb
ISecNWwsDT5Qicztr2u4mXUNi5dz4BWQJK1Hqjgo7BvgaV11meRIjzewDvQsDkll
jw53P0a0kF9VLYZhOvbWQwIfrryzgGbWnXnBjioZkdREjcBDelfKSIcsln5hPYch
szwab9RpIteDvDkNJZhTL969isXbLKHHTocvzk1qtIv21g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:34:12 2025 by rpki-client