Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3132392e302f32342d3234203d3e20323636363838.roa
File:                     34352e3232392e3132392e302f32342d3234203d3e20323636363838.roa (raw, json)
Hash identifier:          XVkPC6n0RFFDssq0t+9VGM2iSZsLF3IPqZ49Kj5mbmc=
Subject key identifier:   43:E0:6E:46:98:9A:BC:76:28:4E:10:4C:AA:B4:86:B5:57:92:49:D1
Certificate issuer:       /CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
Certificate serial:       6B5411AF25A77BD121D0BAD2ED250B2B1AF11CEE
Authority key identifier: 65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3132392e302f32342d3234203d3e20323636363838.roa
Signing time:             Tue 04 Feb 2025 18:24:42 +0000
ROA not before:           Tue 04 Feb 2025 18:19:42 +0000
ROA not after:            Tue 03 Feb 2026 18:24:42 +0000
asID:                     266688
IP address blocks:        45.229.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:54:11:af:25:a7:7b:d1:21:d0:ba:d2:ed:25:0b:2b:1a:f1:1c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5
        Validity
            Not Before: Feb  4 18:19:42 2025 GMT
            Not After : Feb  3 18:24:42 2026 GMT
        Subject: CN=43E06E46989ABC76284E104CAAB486B5579249D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:27:35:49:05:94:29:8f:d4:7a:64:d0:71:
                    3d:3b:ad:7f:f3:b0:4f:0b:9b:12:37:ef:15:70:00:
                    ab:0c:ac:e7:9e:a6:99:22:96:09:3a:27:86:1e:11:
                    34:b9:1d:3e:eb:72:93:40:e8:5b:c5:be:0f:6a:b0:
                    c3:e9:33:a7:d4:c0:64:a1:21:fc:c6:ac:7c:17:c3:
                    47:f9:9e:ad:06:14:9e:19:55:e8:86:eb:9c:60:51:
                    94:02:3b:24:5f:e1:f1:ad:39:81:37:6b:b2:7e:be:
                    e6:e2:55:b9:9f:9f:d9:a8:a9:af:88:76:83:c8:48:
                    c7:9d:ec:87:c5:50:4b:13:8c:05:2d:54:5c:0b:34:
                    40:81:cf:a3:a1:1b:0d:5c:b6:cd:1d:f7:54:b6:88:
                    ec:a7:f4:41:71:78:b8:69:c8:ab:04:d6:ca:5e:f0:
                    c7:5e:ca:ea:d6:35:ab:0d:62:44:e5:8f:0a:5b:c6:
                    2a:61:73:5b:5f:4e:f5:3f:a6:bb:e0:f9:ac:dd:6a:
                    ac:3b:48:37:48:eb:1b:64:71:69:32:7f:97:ae:d9:
                    9b:59:a1:65:57:14:4b:b2:20:0e:09:a3:53:7a:1c:
                    bf:29:d7:25:94:2d:fe:8f:bf:91:6d:df:5e:08:3e:
                    24:70:64:6d:83:b5:a2:72:15:82:00:19:97:57:f4:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:6E:46:98:9A:BC:76:28:4E:10:4C:AA:B4:86:B5:57:92:49:D1
            X509v3 Authority Key Identifier:
                keyid:65:EC:EA:C0:6B:89:A1:E4:24:4A:56:95:B4:C5:FB:A9:D3:A9:F8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65ECEAC06B89A1E4244A5695B4C5FBA9D3A9F8B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59672F6C5768FDB8F5B53E4B4FABE8317B9D9F288357DFEB38054AA2DC7E8C29/0/34352e3232392e3132392e302f32342d3234203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ee:4c:05:63:d9:37:2b:ec:91:9e:f4:cd:cd:36:ec:d4:ba:99:
         7c:4d:d2:b4:a3:08:f3:fa:56:2c:9d:c9:4b:eb:87:b7:65:c3:
         41:c1:81:bd:61:57:7b:6f:bf:bd:cc:a4:af:ce:1c:fa:a8:65:
         a5:24:9d:96:e1:9c:e4:09:25:ca:d8:ec:95:57:b8:f3:17:79:
         6a:b3:40:42:d5:1a:3f:cc:15:d1:20:8d:99:cf:74:cf:42:13:
         98:ab:eb:72:c6:a2:5f:d1:25:b3:3f:3c:cc:42:20:e1:bc:74:
         a3:ae:af:b5:fe:b1:23:01:7b:41:03:d3:d0:60:df:3d:93:6e:
         bf:b5:0e:eb:d1:24:b7:ec:ba:07:91:70:9b:58:76:40:86:6f:
         d3:70:0c:fc:4d:81:c2:50:77:a9:74:07:31:6f:28:5f:69:93:
         5e:f4:15:4b:5b:25:8e:f0:15:27:07:52:2a:6c:20:a0:a5:b6:
         6c:52:7d:50:fb:bf:fe:6e:2e:0d:0b:a8:87:0b:56:01:88:5a:
         c0:7f:fe:ec:12:17:7b:7e:4d:e5:ce:3d:0d:05:3b:81:d2:aa:
         9f:5c:2a:79:c2:1e:f7:f5:9b:1a:2a:31:ab:5c:6b:ad:b3:0e:
         c2:a8:cd:2d:5f:a2:81:ba:40:3d:5c:3b:7d:75:9b:70:fa:4f:
         21:c0:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:00 2025 by rpki-client