Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa
File:                     34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa (raw, json)
Hash identifier:          rEC14oFzR7NI8S6ji8AoT+ZZu3aINs/IHEYUyHBVgew=
Subject key identifier:   18:4B:F1:AD:45:78:B8:5A:B7:C4:13:06:39:65:02:41:DD:4C:9B:03
Certificate issuer:       /CN=4470F62467DDCEB1FB33F608BFE49A945C530595
Certificate serial:       2E5A0338E5EE03473A402A8F447BA5A55EAE15E3
Authority key identifier: 44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa
Signing time:             Tue 04 Feb 2025 18:21:43 +0000
ROA not before:           Tue 04 Feb 2025 18:16:43 +0000
ROA not after:            Tue 03 Feb 2026 18:21:43 +0000
asID:                     266783
IP address blocks:        45.189.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5a:03:38:e5:ee:03:47:3a:40:2a:8f:44:7b:a5:a5:5e:ae:15:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4470F62467DDCEB1FB33F608BFE49A945C530595
        Validity
            Not Before: Feb  4 18:16:43 2025 GMT
            Not After : Feb  3 18:21:43 2026 GMT
        Subject: CN=184BF1AD4578B85AB7C4130639650241DD4C9B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:40:97:65:02:35:35:9c:b2:1c:96:a9:33:
                    6d:ab:8c:85:08:94:4a:fc:6e:c5:a4:44:97:76:39:
                    42:27:2e:3a:9c:b5:40:5b:61:87:42:c9:c2:fe:66:
                    f2:b4:bd:9b:70:16:3c:74:de:7b:46:78:23:ef:55:
                    10:8c:b7:bf:28:91:bf:63:ed:28:4f:a0:98:7d:14:
                    16:81:40:d0:bd:25:c4:29:64:c5:20:ab:75:5e:da:
                    ee:49:d6:b7:94:24:e2:f0:60:23:0a:d8:18:65:55:
                    70:e0:71:29:92:ea:30:2a:38:bf:87:d7:4c:c4:35:
                    e7:1a:ca:06:05:46:f0:f9:e4:4a:b7:5d:55:49:e6:
                    cb:91:7e:5b:a1:c1:07:e6:0e:c7:fe:3c:f5:ac:ba:
                    d5:0c:6c:ac:c7:d4:5d:17:25:30:2a:61:5b:3a:dd:
                    c7:35:89:02:19:fc:17:1c:3c:2c:e8:e4:22:9f:9f:
                    43:7d:a6:97:68:fb:e6:98:7c:cb:a0:89:95:f9:9e:
                    37:dc:b0:4b:54:ac:0a:b8:c7:21:39:ba:3a:41:f3:
                    f8:ce:58:de:8e:17:70:85:61:0c:2f:6c:65:42:4f:
                    aa:75:84:ce:9f:80:c4:e1:6c:c4:3d:40:28:71:bd:
                    f2:95:16:73:f3:04:e2:0d:49:60:2b:d5:41:02:37:
                    c5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4B:F1:AD:45:78:B8:5A:B7:C4:13:06:39:65:02:41:DD:4C:9B:03
            X509v3 Authority Key Identifier:
                keyid:44:70:F6:24:67:DD:CE:B1:FB:33:F6:08:BF:E4:9A:94:5C:53:05:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/4470F62467DDCEB1FB33F608BFE49A945C530595.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4470F62467DDCEB1FB33F608BFE49A945C530595.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75A0DA945073C5FFD52E3EACE62984E85C16C068C0BD86F18F46BB84BB0A25AB/0/34352e3138392e3131322e302f32322d3234203d3e20323636373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:04:c0:4a:47:cb:38:22:6b:4c:33:33:ef:9c:64:5c:8e:
         79:70:97:04:9d:15:9b:2b:e9:60:6d:b1:2c:25:ed:8c:41:70:
         ef:2b:46:98:c5:47:cc:ca:85:61:d5:b0:12:5f:e4:14:c2:d9:
         46:8d:50:eb:ea:2e:08:db:b7:68:6c:b9:76:74:5b:18:7c:1a:
         bd:e7:33:06:2c:21:55:3d:e3:29:90:0f:60:e0:d3:be:3c:6a:
         2d:c2:36:c1:60:86:ba:d3:85:71:4d:b1:37:07:79:14:97:58:
         ec:86:14:ce:63:fb:7c:e8:48:d2:b7:d7:63:7c:7a:11:43:cd:
         32:e2:33:f1:13:48:d5:82:b9:e0:7c:4e:b0:88:0e:f1:3c:bf:
         4e:11:d6:81:0b:63:86:b6:4f:7e:d9:55:03:4e:97:07:7d:69:
         8e:3b:9c:61:a7:8f:6e:5c:4e:78:c0:03:c3:43:fb:f5:82:8d:
         69:ff:b4:63:5c:b8:a8:28:af:b7:02:41:d2:c8:a2:f4:ea:83:
         0d:22:ed:5b:4f:35:d9:c2:4a:08:09:a0:60:cc:4c:8a:bf:4a:
         02:55:21:3e:c4:27:0c:7b:22:bc:87:db:19:58:a1:c5:ac:49:
         ea:dc:83:51:9a:9e:44:0c:cd:8b:93:83:52:41:ee:ec:1f:f5:
         cb:0f:6d:35
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULloDOOXuA0c6QCqPRHulpV6uFeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQ3MEY2MjQ2N0REQ0VCMUZCMzNGNjA4QkZFNDlBOTQ1
QzUzMDU5NTAeFw0yNTAyMDQxODE2NDNaFw0yNjAyMDMxODIxNDNaMDMxMTAvBgNV
BAMTKDE4NEJGMUFENDU3OEI4NUFCN0M0MTMwNjM5NjUwMjQxREQ0QzlCMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxkCXZQI1NZyyHJapM22rjIUI
lEr8bsWkRJd2OUInLjqctUBbYYdCycL+ZvK0vZtwFjx03ntGeCPvVRCMt78okb9j
7ShPoJh9FBaBQNC9JcQpZMUgq3Ve2u5J1reUJOLwYCMK2BhlVXDgcSmS6jAqOL+H
10zENecaygYFRvD55Eq3XVVJ5suRfluhwQfmDsf+PPWsutUMbKzH1F0XJTAqYVs6
3cc1iQIZ/BccPCzo5CKfn0N9ppdo++aYfMugiZX5njfcsEtUrAq4xyE5ujpB8/jO
WN6OF3CFYQwvbGVCT6p1hM6fgMThbMQ9QChxvfKVFnPzBOINSWAr1UECN8V1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGEvxrUV4uFq3xBMGOWUCQd1MmwMwHwYDVR0j
BBgwFoAURHD2JGfdzrH7M/YIv+SalFxTBZUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NUEwREE5NDUwNzNDNUZGRDUyRTNFQUNFNjI5ODRFODVD
MTZDMDY4QzBCRDg2RjE4RjQ2QkI4NEJCMEEyNUFCLzAvNDQ3MEY2MjQ2N0REQ0VC
MUZCMzNGNjA4QkZFNDlBOTQ1QzUzMDU5NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NDcwRjYyNDY3RERDRUIxRkIz
M0Y2MDhCRkU0OUE5NDVDNTMwNTk1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzVBMERBOTQ1MDczQzVGRkQ1MkUzRUFDRTYyOTg0RTg1QzE2QzA2OEMw
QkQ4NkYxOEY0NkJCODRCQjBBMjVBQi8wLzM0MzUyZTMxMzgzOTJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzczODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb1w
MA0GCSqGSIb3DQEBCwUAA4IBAQB48gTASkfLOCJrTDMz75xkXI55cJcEnRWbK+lg
bbEsJe2MQXDvK0aYxUfMyoVh1bASX+QUwtlGjVDr6i4I27dobLl2dFsYfBq95zMG
LCFVPeMpkA9g4NO+PGotwjbBYIa604VxTbE3B3kUl1jshhTOY/t86EjSt9djfHoR
Q80y4jPxE0jVgrngfE6wiA7xPL9OEdaBC2OGtk9+2VUDTpcHfWmOO5xhp49uXE54
wAPDQ/v1go1p/7RjXLioKK+3AkHSyKL06oMNIu1bTzXZwkoICaBgzEyKv0oCVSE+
xCcMeyK8h9sZWKHFrEnq3INRmp5EDM2Lk4NSQe7sH/XLD201
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:53 2025 by rpki-client