Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e302f32342d3234203d3e203133343839.roa
File:                     34352e3136392e3235332e302f32342d3234203d3e203133343839.roa (raw, json)
Hash identifier:          yK+4RTCwfwDo6OyjhGnzAr6CpIAR1kgnIQ8/7WgDR3g=
Subject key identifier:   93:92:95:FE:BD:46:84:6E:8A:02:26:9E:BE:C6:7B:9E:D6:35:B7:01
Certificate issuer:       /CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
Certificate serial:       25169381EE56C5CC7E8C961CAD4B748DC50923B3
Authority key identifier: A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e302f32342d3234203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:23:08 +0000
ROA not before:           Tue 04 Feb 2025 18:18:08 +0000
ROA not after:            Tue 03 Feb 2026 18:23:08 +0000
asID:                     13489
IP address blocks:        45.169.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:16:93:81:ee:56:c5:cc:7e:8c:96:1c:ad:4b:74:8d:c5:09:23:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A369DF483898E89CE1253AC0B9004E797CC9AF0F
        Validity
            Not Before: Feb  4 18:18:08 2025 GMT
            Not After : Feb  3 18:23:08 2026 GMT
        Subject: CN=939295FEBD46846E8A02269EBEC67B9ED635B701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:ac:cf:e8:a1:44:61:df:36:e4:91:ba:38:
                    66:da:d3:ad:0c:96:b7:ec:d0:da:de:fb:38:eb:cb:
                    60:b5:f1:b8:60:53:87:63:9f:ee:02:65:6a:25:b2:
                    f5:e3:1c:36:8e:a5:16:24:b1:23:c3:51:be:f6:dc:
                    a7:fa:ed:72:81:c6:f3:f5:4d:92:43:b7:71:ca:50:
                    fe:5f:c3:5a:c0:19:55:34:57:dc:fc:e5:d3:28:2a:
                    04:fd:fb:c4:54:47:1a:6a:e2:2e:b9:e2:ce:79:a1:
                    9c:a5:26:dc:c1:f6:81:8c:b7:7e:1d:a2:89:2f:f9:
                    f9:0c:b2:87:86:91:89:37:a2:8b:df:9c:8d:a3:50:
                    42:b0:9d:1a:ad:2f:ea:fe:0d:e0:2e:af:51:82:47:
                    81:6b:d9:ca:07:7d:00:2e:34:88:62:4a:43:e2:b4:
                    ab:ea:71:c0:22:d1:ad:2c:35:4a:fc:a0:d4:6d:b8:
                    0b:c6:e5:40:c6:e5:67:68:88:91:86:ce:b8:50:ad:
                    a7:fe:30:8e:b1:f3:76:0b:be:f5:54:23:8d:37:7f:
                    c7:7e:6e:a1:c8:8b:40:6f:0e:7a:14:2a:cf:0b:3a:
                    e8:33:1a:76:b0:0a:85:16:dc:26:d6:2e:2d:d7:c0:
                    78:10:e5:13:23:e6:58:41:3a:71:1a:73:ba:a7:72:
                    a7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:92:95:FE:BD:46:84:6E:8A:02:26:9E:BE:C6:7B:9E:D6:35:B7:01
            X509v3 Authority Key Identifier:
                keyid:A3:69:DF:48:38:98:E8:9C:E1:25:3A:C0:B9:00:4E:79:7C:C9:AF:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A369DF483898E89CE1253AC0B9004E797CC9AF0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04E12C2A0FE4D0633D4E8F2F4D6590CC843BA011459CC40A71A02B36A931B8/0/34352e3136392e3235332e302f32342d3234203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:5c:b8:11:a6:c1:62:ec:e6:5e:5c:d4:35:1d:4f:23:9c:5b:
         b1:dd:c1:40:17:3c:52:3f:76:61:a6:9a:72:9e:80:3d:ed:ae:
         fe:6d:35:de:63:b4:63:09:3d:98:40:15:75:f4:87:08:10:9d:
         bd:a5:32:24:2e:8e:c2:18:4d:ec:48:5e:85:3f:cd:6d:9d:0b:
         42:e2:de:6f:70:1e:51:a1:53:96:2b:dc:52:bd:14:1b:02:61:
         04:47:f6:4b:19:24:74:9e:9e:b2:b8:44:24:c5:6f:c9:f7:a6:
         27:86:b8:df:4c:60:1e:47:a9:3a:c8:0a:1d:d5:f2:84:86:67:
         5e:ad:68:80:70:d9:10:c8:8b:7a:3e:e3:fd:1b:e7:54:8c:4f:
         ac:57:42:26:e5:ee:39:4e:e3:7c:50:12:4b:9c:90:3b:30:b8:
         d1:2b:e2:cf:8c:ca:35:8f:bb:18:dc:7a:05:bf:89:cb:48:3b:
         c7:f8:8d:7b:e2:35:b1:d8:6b:2e:56:9a:76:83:8f:48:a5:24:
         64:1f:aa:1c:82:77:e9:d8:c7:a3:75:f4:55:10:33:eb:19:7a:
         bc:74:2b:25:94:ff:76:b3:cf:81:c6:47:4b:69:a2:b5:01:f3:
         c4:f0:3c:36:8a:11:51:c1:32:e2:f0:1b:ae:90:98:2d:fc:dd:
         a3:be:6a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:16 2025 by rpki-client