Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32322d3232203d3e20323639373832.roa
File:                     34352e3138342e3234382e302f32322d3232203d3e20323639373832.roa (raw, json)
Hash identifier:          CZKQLFMDk+A67GQ30ySa6KCQ69yCQ96PHUgU5SKrMb8=
Subject key identifier:   E7:1A:9B:50:79:29:0B:5B:5E:49:3A:8E:1D:1E:53:92:F1:36:40:C3
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       345031D89CCEBAE0B7A27F25BB39F5DE5005E39C
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32322d3232203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:56 +0000
ROA not before:           Tue 04 Feb 2025 18:10:56 +0000
ROA not after:            Tue 03 Feb 2026 18:15:56 +0000
asID:                     269782
IP address blocks:        45.184.248.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:50:31:d8:9c:ce:ba:e0:b7:a2:7f:25:bb:39:f5:de:50:05:e3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:56 2025 GMT
            Not After : Feb  3 18:15:56 2026 GMT
        Subject: CN=E71A9B5079290B5B5E493A8E1D1E5392F13640C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:b7:33:98:18:ed:3b:a9:5b:db:15:44:a7:
                    52:99:b9:b0:00:ff:b8:b0:e2:e2:5b:82:33:31:b5:
                    e8:b1:e3:f5:e1:bc:e1:88:29:d3:2d:22:66:c4:45:
                    e3:7d:93:77:31:72:9a:a2:2d:bb:b9:d6:f4:a4:5d:
                    bc:91:ad:4a:a2:34:e2:61:24:44:86:7c:41:dc:1e:
                    69:12:13:69:ce:93:8a:e2:ab:c0:9a:c7:06:7f:b7:
                    04:09:cb:eb:af:57:5b:8f:37:1b:ba:42:da:45:46:
                    8a:bc:8f:c9:c0:e5:99:f7:85:ca:af:1d:54:7d:6b:
                    fc:33:b1:d9:9b:eb:84:df:54:06:42:dd:e2:32:e7:
                    12:82:e8:e9:e6:1a:61:46:9f:29:51:7b:26:84:4e:
                    06:6e:e8:2e:7d:77:d5:7e:db:44:1b:47:dc:6a:5a:
                    ba:8b:39:f4:06:0a:fd:2c:90:93:44:a4:e4:6e:23:
                    58:6c:11:e1:15:92:9d:63:5d:35:76:d7:b1:6d:05:
                    fc:50:39:9c:a4:98:a3:bd:c6:fd:f4:f5:7a:bc:d9:
                    3e:c1:75:e4:fc:bf:b5:dc:be:31:68:0e:b1:43:e8:
                    a7:0c:a7:13:11:ba:5e:ab:58:68:c0:ad:53:dc:0a:
                    9a:00:7b:1b:b0:e9:60:21:dd:e4:db:e2:0f:7f:4e:
                    2b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:9B:50:79:29:0B:5B:5E:49:3A:8E:1D:1E:53:92:F1:36:40:C3
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32322d3232203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:ae:92:a6:ce:98:1f:e6:dc:cc:49:fd:49:bc:4b:66:6a:de:
         48:80:aa:a3:54:68:62:a4:fe:c0:6a:05:70:e8:3e:5e:db:f5:
         33:c7:d0:4c:33:8d:d8:f7:44:05:a0:c6:43:70:e9:12:19:e7:
         1d:96:5d:aa:da:46:c7:78:5b:00:86:f0:fa:00:ed:17:9f:40:
         71:fe:56:6d:54:b6:af:2e:91:62:06:3b:6b:35:bd:fc:68:ab:
         7e:43:78:1e:9d:44:28:13:4e:65:50:90:75:6f:1c:0e:e9:76:
         9c:d8:34:3f:1e:18:1a:ed:47:83:93:b0:86:d2:fc:4e:52:d2:
         a5:f4:37:54:90:47:91:ce:33:ca:4a:a7:7e:08:93:d5:47:a0:
         a2:e8:1e:3e:d9:23:e4:37:3e:c4:42:8a:b9:23:b3:a2:08:73:
         9a:da:8f:da:8e:cf:42:52:02:af:83:c7:d3:3a:dc:38:31:5e:
         16:aa:28:ca:22:e4:91:86:c5:ce:b9:37:6c:5e:61:e4:05:24:
         dd:a8:28:7d:9d:16:3f:1d:4d:ce:4b:59:97:b3:84:21:fc:b1:
         2d:7c:bb:12:ea:82:7f:09:21:c5:12:25:c7:e6:4d:64:64:22:
         33:28:81:78:7d:6b:dd:e6:fd:a4:9d:4e:74:86:f6:7f:70:16:
         6b:ce:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:07 2025 by rpki-client