Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa
File:                     34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa (raw, json)
Hash identifier:          XdDBtS3hAUuoRp0Qpwxjy5aQT7oqgPO9y8vstNdKMYY=
Subject key identifier:   9E:F7:40:7D:69:D3:21:81:37:45:0A:F3:CA:9C:CD:9D:34:9D:6A:B5
Certificate issuer:       /CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
Certificate serial:       74060B0DFEEA787C1D47D29E0F0E3B52A0B54C8A
Authority key identifier: 01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa
Signing time:             Tue 04 Feb 2025 18:15:57 +0000
ROA not before:           Tue 04 Feb 2025 18:10:57 +0000
ROA not after:            Tue 03 Feb 2026 18:15:57 +0000
asID:                     269782
IP address blocks:        45.184.248.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:06:0b:0d:fe:ea:78:7c:1d:47:d2:9e:0f:0e:3b:52:a0:b5:4c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A51A04B7D920D1806F07B0F77D143B1C7FAAE1
        Validity
            Not Before: Feb  4 18:10:57 2025 GMT
            Not After : Feb  3 18:15:57 2026 GMT
        Subject: CN=9EF7407D69D3218137450AF3CA9CCD9D349D6AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:51:7a:ac:32:65:2f:77:90:e4:a6:85:f3:
                    4d:e6:ef:20:78:04:25:9f:a5:e2:45:89:71:54:98:
                    bf:0b:1e:46:1e:72:5b:09:63:d4:f1:c6:c1:12:46:
                    8a:3b:e0:91:53:68:8d:bb:bd:5d:45:e4:91:02:89:
                    a6:fe:3c:aa:d6:bd:62:41:9c:d8:eb:97:7b:4a:eb:
                    6b:4a:97:93:4a:a3:09:d1:04:b1:01:32:32:08:5d:
                    c6:cc:e5:4c:c5:f5:1e:88:61:36:94:09:e4:4a:35:
                    fe:1e:d8:a1:41:cb:a7:ec:ef:f8:ff:94:81:01:27:
                    92:06:71:2c:45:b1:b5:e3:62:9f:8d:e9:87:2e:7c:
                    3c:6b:9d:56:f6:b6:8e:86:d6:8c:6f:2c:1f:e7:d8:
                    0b:82:f1:f0:57:07:b4:32:51:c2:82:11:17:c7:25:
                    26:cf:c8:ab:d3:5e:8c:5e:e8:2c:3f:ee:fb:3e:3b:
                    97:ec:ab:a8:85:65:3d:9d:b5:a1:d1:67:01:49:c3:
                    75:5c:3b:c2:eb:e0:a1:b4:03:39:df:4a:00:50:99:
                    e1:9c:9a:d7:45:8a:39:69:0a:99:83:be:fa:b9:f8:
                    09:b4:a1:e3:e1:9b:04:ad:73:bf:78:4e:1c:dc:4d:
                    04:4b:38:62:70:4b:7e:b9:52:04:ff:b0:d8:ce:b5:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F7:40:7D:69:D3:21:81:37:45:0A:F3:CA:9C:CD:9D:34:9D:6A:B5
            X509v3 Authority Key Identifier:
                keyid:01:A5:1A:04:B7:D9:20:D1:80:6F:07:B0:F7:7D:14:3B:1C:7F:AA:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01A51A04B7D920D1806F07B0F77D143B1C7FAAE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64D16A556598F74AADB775DDCCA121488CD33B365909E7AFF76D541FFCAFDC23/0/34352e3138342e3234382e302f32342d3234203d3e20323639373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:11:c3:72:61:ab:9e:ae:ab:a7:0c:be:5e:05:b8:ae:e2:
         fa:c2:9d:35:33:ec:ef:cd:f0:c9:68:b9:b2:98:10:ce:b8:7f:
         34:e2:e9:af:a8:23:cd:1d:9e:fa:ea:2d:c8:f6:aa:a4:52:c7:
         9a:fa:d0:d8:67:fd:8c:ac:44:b8:2b:5e:4b:c4:5d:eb:dc:43:
         eb:a0:d4:d3:20:c8:6e:0d:9f:6d:b4:83:3a:de:89:2c:1d:3a:
         98:54:fb:e2:05:bb:ed:04:75:d0:c2:e4:59:73:64:73:4f:78:
         88:6a:a4:f2:15:8e:39:95:fc:c8:a6:fe:a3:66:39:09:80:3f:
         c4:7b:2f:42:32:38:3f:79:77:b6:ec:cd:5b:9a:6f:da:d2:51:
         33:89:23:7f:44:84:a1:a8:44:03:4d:65:e4:d1:df:57:19:27:
         b3:82:6d:75:af:d6:64:6e:03:b4:4b:46:94:97:1d:b9:f4:ec:
         e0:c2:71:64:93:29:27:91:9d:5c:5b:2f:b2:d9:b6:ed:0d:c9:
         45:11:2b:86:82:72:f8:c0:36:b1:e4:d9:39:7e:52:bb:a4:71:
         02:2d:a0:5a:40:65:97:98:3c:a6:b8:6c:75:5c:5f:3c:cf:47:
         a8:da:8e:8e:c1:1f:bc:cc:8f:86:3e:37:3a:1a:61:03:fb:5e:
         02:73:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:56:07 2025 by rpki-client