Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa
File:                     34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa (raw, json)
Hash identifier:          7M4yGAdoxXV4mEVfqwFBO00SLJ83SLhZPBQ0O7mqDpk=
Subject key identifier:   1F:FD:09:93:E3:D2:6B:F3:54:56:48:B8:9C:C0:5F:C9:2C:E9:DA:27
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       402AD66E869C54AC0A9DFE9F168E09BF520DE510
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa
Signing time:             Tue 04 Feb 2025 18:21:48 +0000
ROA not before:           Tue 04 Feb 2025 18:16:48 +0000
ROA not after:            Tue 03 Feb 2026 18:21:48 +0000
asID:                     267919
IP address blocks:        45.179.200.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2a:d6:6e:86:9c:54:ac:0a:9d:fe:9f:16:8e:09:bf:52:0d:e5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Feb  4 18:16:48 2025 GMT
            Not After : Feb  3 18:21:48 2026 GMT
        Subject: CN=1FFD0993E3D26BF3545648B89CC05FC92CE9DA27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:17:43:d3:b6:ed:2a:6b:76:80:a9:c1:10:
                    d6:72:da:c6:ed:79:bf:a9:a6:43:60:04:b5:cd:3c:
                    b8:a4:99:28:99:5a:7f:05:fe:05:7c:52:20:2f:85:
                    1c:55:7a:e6:dd:c6:00:66:8b:23:84:dd:11:ba:de:
                    60:51:c2:cf:f6:84:08:32:b9:45:32:91:1f:20:f4:
                    75:b1:d5:50:7c:17:44:1f:23:f0:97:ff:71:e6:31:
                    c2:20:4f:89:b3:7c:47:11:c6:a3:ee:a1:d8:7d:52:
                    ba:f7:72:9c:b6:4f:aa:4e:8b:70:19:71:c7:5d:31:
                    3a:21:13:43:6a:5f:08:81:99:4f:6c:2e:b0:0a:cf:
                    86:c1:bb:7f:ad:de:6d:e2:01:ba:9f:e2:c1:c5:16:
                    53:8a:99:83:4f:c3:df:e7:51:ab:bc:0e:77:2f:16:
                    35:a2:95:26:dc:8e:f3:c0:ab:c8:8e:57:a1:e2:17:
                    a8:b5:83:02:24:c6:18:f5:2b:36:65:4a:e3:33:06:
                    64:2b:cc:00:3e:38:e0:00:08:a7:95:51:6a:70:69:
                    30:49:bc:97:92:9b:08:61:2f:04:d2:45:06:11:f7:
                    9b:5f:98:00:3e:a5:8d:2e:b2:e0:c1:30:a8:db:46:
                    d6:d4:93:ea:d0:03:55:90:43:f3:d3:e2:81:e0:66:
                    cf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FD:09:93:E3:D2:6B:F3:54:56:48:B8:9C:C0:5F:C9:2C:E9:DA:27
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/34352e3137392e3230302e302f32332d3234203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c2:4e:af:36:d8:61:18:11:3d:b7:70:d9:2b:56:1c:3c:23:
         69:bc:7a:84:0d:30:f2:28:2d:b3:28:27:3b:bb:18:02:51:e8:
         b4:00:f9:21:d1:de:fb:af:a0:00:40:5d:b5:35:c3:10:15:f0:
         b8:73:c2:b6:a0:0d:f9:b1:e0:2d:66:0a:f6:26:b9:eb:d8:df:
         b6:06:c0:ee:e6:30:8c:e1:29:92:05:20:98:e7:02:f5:55:fb:
         5d:37:e6:7d:98:6c:87:52:00:73:cf:69:e4:bd:5b:fa:09:97:
         0c:98:93:60:fd:d7:15:cb:74:fa:75:1d:07:15:db:a3:a2:67:
         42:8c:97:42:10:aa:0c:bb:b2:96:a0:43:c3:7d:81:65:d9:ba:
         6a:42:74:5e:a2:5d:84:e4:bf:70:73:1f:d3:f7:03:e9:eb:fa:
         91:fc:f6:82:53:0b:f0:07:4f:a5:f8:7c:1e:5b:3e:64:56:a4:
         e1:68:da:a7:42:54:93:1c:1c:c8:79:83:df:e6:f6:09:3f:ba:
         54:39:70:15:3f:f5:e3:cb:5a:d7:f9:60:a0:66:1c:03:23:60:
         f6:e3:48:f2:cd:8f:86:2e:13:e4:23:1e:9f:29:ec:a9:18:bd:
         08:c9:63:64:6a:79:d8:e6:ea:16:be:c1:09:94:53:fa:ca:d4:
         98:cc:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----