Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa
File:                     34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa (raw, json)
Hash identifier:          S7joQl01sHQu5KRZi0UxKsFbh/UWkfEk+J0MmsOKVSU=
Subject key identifier:   A5:58:AB:90:C2:C5:17:F0:49:B8:46:1A:FC:E8:90:AC:32:02:5A:34
Certificate issuer:       /CN=A21FE834C0EE69DF7913D5ED884800CC38D73955
Certificate serial:       53614CA236F2479666E40AFC5B703344F488A455
Authority key identifier: A2:1F:E8:34:C0:EE:69:DF:79:13:D5:ED:88:48:00:CC:38:D7:39:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa
Signing time:             Tue 04 Feb 2025 18:00:15 +0000
ROA not before:           Tue 04 Feb 2025 17:55:15 +0000
ROA not after:            Tue 03 Feb 2026 18:00:15 +0000
asID:                     269741
IP address blocks:        45.181.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:61:4c:a2:36:f2:47:96:66:e4:0a:fc:5b:70:33:44:f4:88:a4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A21FE834C0EE69DF7913D5ED884800CC38D73955
        Validity
            Not Before: Feb  4 17:55:15 2025 GMT
            Not After : Feb  3 18:00:15 2026 GMT
        Subject: CN=A558AB90C2C517F049B8461AFCE890AC32025A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:70:9e:4c:63:72:99:30:e4:ae:ec:7b:bc:
                    c2:9c:7d:43:e0:c3:a4:9a:b1:6b:0a:16:6d:53:54:
                    98:d1:e3:e0:ea:2c:27:13:a0:83:f9:b8:ab:b4:d6:
                    37:26:1d:3e:6a:96:12:16:36:3a:3c:2b:15:0d:cd:
                    af:00:b8:13:32:04:1a:cc:5c:16:c0:da:31:b1:1f:
                    18:80:c4:91:c7:7d:b1:a1:9a:c5:3d:c8:0d:71:e7:
                    15:3b:27:08:12:37:d8:1e:0e:3f:d5:6d:f7:e7:90:
                    4b:10:a9:0e:89:bc:08:fe:89:b4:8c:9f:5d:96:ad:
                    2c:e4:f7:77:5f:c5:0e:ae:c7:aa:ae:aa:09:f5:99:
                    61:3d:b1:f1:11:92:19:d6:7b:7a:07:44:5b:8c:b5:
                    9b:4e:69:89:fe:e5:82:12:10:b5:5e:b6:74:cd:f9:
                    bf:df:77:8a:cd:52:67:46:06:78:bd:b9:71:62:39:
                    aa:b4:10:ef:e1:53:0c:db:2f:51:63:9a:e5:e1:ec:
                    50:51:11:c6:7f:63:bd:c9:6d:a3:2f:54:37:94:50:
                    20:3d:c4:e9:d5:5d:c3:62:3b:17:23:58:04:dd:b0:
                    eb:50:58:98:1e:a4:61:b6:0a:96:c1:28:22:d6:cc:
                    2f:c3:d4:90:0d:9a:68:fc:23:87:7d:56:c6:0c:94:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:58:AB:90:C2:C5:17:F0:49:B8:46:1A:FC:E8:90:AC:32:02:5A:34
            X509v3 Authority Key Identifier:
                keyid:A2:1F:E8:34:C0:EE:69:DF:79:13:D5:ED:88:48:00:CC:38:D7:39:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A21FE834C0EE69DF7913D5ED884800CC38D73955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5769CE652FDF35F576C768491EA3C13DD0831B1DE855091941C291755ED7E2EF/0/34352e3138312e3234382e302f32322d3234203d3e20323639373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:fd:17:95:f6:4d:9e:4b:4b:9d:34:89:b7:9b:84:4b:e8:98:
         35:da:17:3d:4e:6b:cb:ba:90:7e:fd:b7:a5:1d:48:ce:30:f9:
         f2:0f:83:0a:db:98:7f:39:33:0c:98:ee:f4:b3:c5:ef:49:d1:
         fd:87:fb:6f:e7:cb:7f:91:19:e9:98:dc:25:61:37:5a:96:10:
         29:1a:1c:d0:94:e5:36:76:69:24:a5:76:92:72:b6:33:a3:fe:
         62:22:2f:dd:06:83:3d:bb:15:c6:30:11:aa:59:d0:d5:ee:6f:
         7e:91:8e:44:9c:cc:db:fc:f6:92:e8:0b:f1:6a:38:6a:86:bb:
         63:2d:cf:31:4f:55:57:9c:6b:7a:b5:93:72:57:c1:98:9e:ab:
         0d:be:07:e0:ec:98:a6:b7:14:b6:43:9c:88:2b:ee:8b:62:a1:
         34:d5:ef:4c:2b:27:1e:18:25:5a:1b:7f:8d:ba:a3:af:f8:51:
         0c:6f:80:5c:4f:ec:3a:df:40:59:42:f0:8f:b6:20:59:ed:19:
         a5:93:93:cc:53:91:c4:a1:8c:50:e1:72:b2:0a:42:e9:21:51:
         13:1a:d2:ff:ff:86:aa:19:ab:48:97:1d:50:49:97:9f:75:84:
         69:c6:f4:3c:73:6d:36:1b:30:af:7e:14:32:7f:64:8c:53:a1:
         ea:14:bb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:51 2025 by rpki-client