Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/34352e3136312e33322e302f32322d3234203d3e20323636383934.roa
File:                     34352e3136312e33322e302f32322d3234203d3e20323636383934.roa (raw, json)
Hash identifier:          8mDQTROqiRfQ1ojj8qP1FJj/CeCSK2LavdYbdSx/uZw=
Subject key identifier:   23:94:06:2C:52:FC:0D:4D:73:1D:1E:67:D9:D0:35:6C:B0:0E:05:3C
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       3E0E5E21F38DFC83981E47761B73ED679D287F2B
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/34352e3136312e33322e302f32322d3234203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:14 +0000
ROA not before:           Tue 04 Feb 2025 19:56:14 +0000
ROA not after:            Tue 03 Feb 2026 20:01:14 +0000
asID:                     266894
IP address blocks:        45.161.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0e:5e:21:f3:8d:fc:83:98:1e:47:76:1b:73:ed:67:9d:28:7f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:14 2025 GMT
            Not After : Feb  3 20:01:14 2026 GMT
        Subject: CN=2394062C52FC0D4D731D1E67D9D0356CB00E053C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:b8:9e:dd:4a:7b:a2:cf:de:1b:d4:99:bf:
                    01:c6:2f:c1:38:ae:5f:ae:c6:a0:41:69:d3:e8:d1:
                    8c:a7:3c:b9:b4:6e:73:b9:38:bf:6c:bd:1c:12:a6:
                    d7:2f:6a:c4:21:fe:c7:63:b5:ff:c6:d5:65:76:f5:
                    47:07:8a:7e:29:18:59:53:5f:03:3d:19:b3:47:0d:
                    5a:47:e9:ed:ee:87:3f:9a:21:ed:6d:9d:25:7e:b4:
                    05:40:ce:6c:31:fd:b4:0a:ea:0c:a9:c8:20:a5:fb:
                    b0:81:b4:98:75:77:63:69:85:66:4a:be:dc:79:d6:
                    16:59:9d:1f:6c:b2:56:e7:14:01:80:64:a2:cb:df:
                    2e:cb:82:39:6b:d1:91:f0:47:97:7f:6d:02:6e:33:
                    77:8d:f0:97:9d:31:a8:1a:8e:45:8c:b2:30:9d:aa:
                    26:47:ae:50:06:07:bd:85:ba:91:aa:a2:3b:e6:e2:
                    52:84:66:e8:e3:8a:3a:f7:a0:f8:50:16:a2:da:8f:
                    70:b2:31:31:3e:45:61:fa:f5:ec:0a:e9:57:4e:6b:
                    a7:96:f0:c7:de:d3:e9:86:fd:bd:5b:aa:02:f5:4f:
                    e9:7e:63:fc:ff:7e:ef:54:0c:ae:10:a0:d3:36:9a:
                    eb:3c:e9:27:65:8e:8d:40:7a:c4:f6:1f:9c:6d:35:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:94:06:2C:52:FC:0D:4D:73:1D:1E:67:D9:D0:35:6C:B0:0E:05:3C
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/34352e3136312e33322e302f32322d3234203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:f5:99:89:8d:5d:ad:6c:51:c0:4c:bd:7d:33:b3:b8:57:
         5f:86:9e:f3:25:51:29:d3:66:92:88:82:ca:36:8b:71:03:5d:
         dc:b9:48:e3:4e:a1:37:2f:9c:01:dd:a9:ae:73:bf:51:2e:37:
         88:fd:ba:25:32:55:09:e3:ee:a2:f6:bb:c9:cd:6e:28:c6:31:
         34:80:af:72:8d:18:e1:41:9b:ca:a7:26:c8:bf:d7:06:5d:9a:
         da:fc:4e:00:ba:9c:13:9e:dd:29:5a:8f:9a:eb:68:68:b3:41:
         38:bb:bd:50:16:e7:37:f7:a4:5f:f7:46:f0:7d:d5:c6:f7:19:
         e5:93:c8:27:eb:21:d8:c6:e1:e1:df:fd:2b:76:49:a5:3c:6a:
         2a:38:16:a3:bc:89:d8:eb:9e:5f:2a:4a:3e:e7:fb:89:03:e5:
         82:46:48:8c:84:5b:90:0b:fc:1c:b6:5d:49:f7:68:9d:f3:23:
         7d:19:ef:c1:09:32:c0:ab:eb:b7:0b:a0:b8:c4:ab:4e:dd:27:
         2c:dc:29:ef:95:4d:c1:80:f0:b3:9b:4e:31:98:db:3c:31:b5:
         26:62:e2:68:13:2b:fe:64:40:35:db:ef:3a:ed:cc:d9:f8:c7:
         e1:a0:29:15:0d:56:15:be:94:40:67:d5:d8:03:6b:dc:ed:46:
         76:92:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:59 2025 by rpki-client