Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/34352e3233302e33342e302f32332d3234203d3e203634313039.roa
File:                     34352e3233302e33342e302f32332d3234203d3e203634313039.roa (raw, json)
Hash identifier:          py7SwEogYW7OlG4gh9g/9TmQ8H1L8j3pKcEm/vflPK4=
Subject key identifier:   65:45:C6:0E:69:63:F4:E0:93:4C:E7:5A:65:F8:BF:5E:D3:8D:CF:55
Certificate issuer:       /CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
Certificate serial:       44269571B07E74E4D0B4AA9E1E78CB4F2EED8961
Authority key identifier: 42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/34352e3233302e33342e302f32332d3234203d3e203634313039.roa
Signing time:             Tue 04 Feb 2025 18:41:52 +0000
ROA not before:           Tue 04 Feb 2025 18:36:52 +0000
ROA not after:            Tue 03 Feb 2026 18:41:52 +0000
asID:                     64109
IP address blocks:        45.230.34.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:26:95:71:b0:7e:74:e4:d0:b4:aa:9e:1e:78:cb:4f:2e:ed:89:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420ABCEF8B249B3FD63274C0B382D6F5BEA11A09
        Validity
            Not Before: Feb  4 18:36:52 2025 GMT
            Not After : Feb  3 18:41:52 2026 GMT
        Subject: CN=6545C60E6963F4E0934CE75A65F8BF5ED38DCF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:9f:6e:bf:68:5d:2a:28:37:de:8f:cd:06:
                    c1:d2:5d:82:1e:56:61:31:90:03:dd:a5:9b:b3:0b:
                    3b:f8:bb:33:b9:34:ca:a9:17:4e:2e:11:f4:00:fc:
                    da:47:36:29:2d:c3:32:3e:94:56:58:2b:10:c6:fa:
                    e9:07:84:64:16:b1:f1:80:9b:ab:86:9b:02:fc:2a:
                    ea:59:51:29:d7:63:32:82:f3:44:63:b4:eb:eb:cc:
                    21:be:6c:ee:1f:72:25:92:d0:44:c0:b7:8d:ef:d9:
                    9a:c5:e1:25:29:97:6a:b7:f9:eb:73:9b:09:e4:72:
                    7c:d1:26:02:46:00:73:31:54:aa:14:c2:9f:fd:9a:
                    a9:0c:19:50:c6:d3:3e:8d:fd:a6:16:3f:09:3d:b0:
                    a1:64:d0:e6:52:27:b8:42:25:f8:f3:6d:76:df:68:
                    a5:44:b1:81:23:16:83:9e:5c:86:a8:3f:81:ae:07:
                    ae:ac:19:a9:16:bd:42:04:88:84:0a:75:15:f5:87:
                    6b:71:c3:f2:6c:7a:56:b0:23:bb:5d:90:87:42:cd:
                    34:dd:c2:27:15:d6:f0:72:75:a5:80:95:fa:a1:53:
                    cf:42:16:b6:e2:3c:a9:14:7c:30:99:c7:e0:2e:e9:
                    fc:c4:9b:f0:23:c2:ec:2a:60:6b:37:8a:81:69:af:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:45:C6:0E:69:63:F4:E0:93:4C:E7:5A:65:F8:BF:5E:D3:8D:CF:55
            X509v3 Authority Key Identifier:
                keyid:42:0A:BC:EF:8B:24:9B:3F:D6:32:74:C0:B3:82:D6:F5:BE:A1:1A:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/420ABCEF8B249B3FD63274C0B382D6F5BEA11A09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5C6678EC0CDDBCD56D81FA88C20F319770C3C6199A47C178058BF964F3E37588/0/34352e3233302e33342e302f32332d3234203d3e203634313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:06:d6:3c:3a:8b:6e:54:f0:47:cf:39:3d:9f:31:ef:ee:fe:
         ca:0f:ea:ce:a3:e6:06:2c:b8:77:40:c8:63:32:49:70:0c:cc:
         b0:83:2a:45:e7:ec:4e:f6:92:f9:99:c8:d8:76:79:c2:da:a2:
         ad:4e:70:a4:6f:cf:bb:ec:da:f4:7c:a6:b3:c2:53:c4:c4:f6:
         dc:8a:b1:a0:bb:96:4f:8c:a8:02:52:69:b1:f3:50:ce:79:b8:
         1d:2e:ea:7e:97:1a:03:50:08:bd:a6:f0:4d:1a:3f:33:18:70:
         a8:50:ef:55:ff:e2:7e:52:88:82:72:97:8f:88:f1:7b:08:2b:
         f2:98:c1:cb:21:be:b3:00:02:d4:5d:35:04:7f:b8:95:97:f7:
         97:21:37:1f:20:34:b7:ac:8f:d3:17:dd:ca:98:9d:3e:7a:f0:
         82:73:0b:2d:76:72:42:82:0d:8d:1c:0a:ac:9b:f2:d0:67:2e:
         89:91:b4:e3:6d:c0:39:16:30:93:1c:91:68:a8:9d:27:f7:34:
         c8:2b:20:aa:fc:43:8a:7f:e4:37:1f:1d:e0:05:2e:c2:72:f5:
         d8:8a:88:88:f2:b0:0f:5b:09:34:12:65:f0:11:ee:7c:47:a1:
         1b:3f:03:f6:eb:8b:ea:de:eb:f3:ae:88:1f:fc:7b:9c:af:1e:
         66:2b:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:46 2025 by rpki-client