Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/34352e3233302e3234302e302f32322d3234203d3e20323634383235.roa
File:                     34352e3233302e3234302e302f32322d3234203d3e20323634383235.roa (raw, json)
Hash identifier:          4eEclyhtffraLE3VsTBAY9MBFlxDxo7jEbFH4AzAzZM=
Subject key identifier:   E8:78:C4:02:46:94:67:2E:7D:C3:B2:CD:5B:03:E5:A1:F7:23:EA:7F
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       5B2A8AF4D45D3EE9F131411AF2036B4C9AFBDB8B
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/34352e3233302e3234302e302f32322d3234203d3e20323634383235.roa
Signing time:             Tue 04 Feb 2025 18:45:25 +0000
ROA not before:           Tue 04 Feb 2025 18:40:25 +0000
ROA not after:            Tue 03 Feb 2026 18:45:25 +0000
asID:                     264825
IP address blocks:        45.230.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2a:8a:f4:d4:5d:3e:e9:f1:31:41:1a:f2:03:6b:4c:9a:fb:db:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Feb  4 18:40:25 2025 GMT
            Not After : Feb  3 18:45:25 2026 GMT
        Subject: CN=E878C4024694672E7DC3B2CD5B03E5A1F723EA7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b4:97:03:dd:3b:75:c7:e6:5f:68:c8:2e:c2:
                    95:f2:7e:d3:bf:7f:32:dc:14:92:8c:88:46:d7:dc:
                    22:71:4b:62:4f:f1:4e:e1:ab:9f:93:d0:35:7c:00:
                    bb:6c:c0:a0:56:18:0e:f3:35:a4:13:f9:9d:1a:9f:
                    cb:8e:d0:5b:9b:55:ed:43:94:da:37:60:6a:ec:05:
                    3f:11:96:d0:29:be:1f:a1:87:4e:fb:6f:07:73:aa:
                    46:32:b3:dd:ad:36:db:6b:66:0b:d5:0c:c1:ca:7a:
                    4a:c4:81:a8:ec:27:8b:c8:4c:bb:d5:9a:c6:3a:1e:
                    52:56:37:cb:21:ee:06:51:ba:c7:03:c0:dc:74:84:
                    28:ef:b3:85:18:da:d8:8b:02:02:30:dd:f8:77:bc:
                    2a:a9:dc:d6:9a:bf:45:ec:d0:03:f8:a0:d3:72:96:
                    bb:e8:fe:b6:a1:02:b5:dc:a5:5b:75:ee:03:0e:58:
                    23:8f:67:22:45:c5:62:ed:08:45:6e:de:0b:98:ab:
                    49:65:35:9e:4d:05:78:28:f9:af:e5:eb:a4:db:88:
                    28:89:4f:89:b9:5f:32:a7:20:02:3e:e0:bd:2c:33:
                    eb:f5:f6:a6:39:b8:ca:5c:db:2d:1b:c5:66:37:41:
                    32:97:a3:e2:bf:c8:ff:c8:c0:30:21:7c:87:48:72:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:78:C4:02:46:94:67:2E:7D:C3:B2:CD:5B:03:E5:A1:F7:23:EA:7F
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/34352e3233302e3234302e302f32322d3234203d3e20323634383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:6f:3a:66:6c:2c:af:7f:b2:ee:fb:2d:60:2d:64:c6:9b:4e:
         8f:4d:44:9e:63:b3:f0:d6:dc:e7:fd:79:04:23:e5:74:ca:64:
         70:89:9b:df:10:be:19:93:cb:9c:0e:fe:19:d9:64:bf:f3:09:
         99:cf:54:87:4b:ce:ef:de:c5:77:75:72:15:36:73:19:60:7f:
         03:84:3d:68:c7:f3:86:6e:93:40:3b:62:20:98:ce:c8:14:05:
         6b:f7:9e:05:d2:bb:75:ec:27:02:c9:a1:cd:a5:4c:67:ec:1c:
         ef:58:bf:2c:93:22:aa:93:2f:be:cc:c8:56:a0:cc:00:bc:29:
         19:22:dc:96:24:65:dc:88:28:05:3a:a8:0b:0e:5b:5b:69:03:
         86:d2:b1:2c:f2:cf:51:9b:b8:50:5f:2a:63:9f:eb:d8:13:06:
         f4:43:e6:35:a7:94:92:07:f9:e7:fd:ca:23:16:a1:1b:c2:80:
         9d:00:0d:1b:7f:5e:15:b9:9d:ae:78:99:24:36:ad:4b:24:a3:
         c2:bc:68:1e:76:3d:4f:e1:f1:f8:2b:a0:49:1d:42:fe:0a:83:
         75:80:c6:d6:74:ca:60:94:2b:89:39:61:84:f1:15:2f:8f:d2:
         6d:fc:45:50:dd:df:a5:ec:e9:03:5c:ec:60:ab:1e:ed:49:b3:
         1b:d5:90:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:37 2025 by rpki-client