Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36322e302f32342d3234203d3e20323731393134.roa
File:                     34352e3233302e36322e302f32342d3234203d3e20323731393134.roa (raw, json)
Hash identifier:          DyvBS1f6iaqZaTYwX7yidyI2roYZxMAUbSRUTMsP5EQ=
Subject key identifier:   72:FA:44:B2:0B:1F:EA:6F:72:03:A9:C4:A4:5E:D8:B3:4B:CE:5A:CF
Certificate issuer:       /CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
Certificate serial:       4B3BE698A2A931C9445C3FC70309003408CBE3CD
Authority key identifier: 13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36322e302f32342d3234203d3e20323731393134.roa
Signing time:             Tue 04 Feb 2025 18:10:00 +0000
ROA not before:           Tue 04 Feb 2025 18:05:00 +0000
ROA not after:            Tue 03 Feb 2026 18:10:00 +0000
asID:                     271914
IP address blocks:        45.230.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3b:e6:98:a2:a9:31:c9:44:5c:3f:c7:03:09:00:34:08:cb:e3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
        Validity
            Not Before: Feb  4 18:05:00 2025 GMT
            Not After : Feb  3 18:10:00 2026 GMT
        Subject: CN=72FA44B20B1FEA6F7203A9C4A45ED8B34BCE5ACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:6d:0f:2a:cb:a7:f4:9c:a6:2e:e3:df:fb:
                    47:b4:ec:95:0a:ad:0c:20:cc:2e:3b:8e:7c:be:95:
                    72:26:f7:2a:23:d6:b1:2f:8d:b7:14:9a:2d:f5:e8:
                    af:f7:b3:9c:73:50:a0:61:c7:c2:fd:e7:35:98:1e:
                    cb:26:29:df:15:8f:58:16:e3:28:d4:e2:ed:05:14:
                    73:c0:a2:42:ed:f5:73:8a:8b:a5:51:e4:bf:d3:0a:
                    97:58:c7:61:be:67:73:80:d0:dd:9d:6d:94:42:c6:
                    fd:12:34:71:93:8b:1b:f8:93:f6:65:fd:87:c8:66:
                    58:da:2c:24:d1:b6:03:2c:03:57:17:62:c4:81:0c:
                    a9:18:87:7b:ba:32:cb:3c:27:b5:14:02:52:6d:61:
                    da:8e:84:2e:10:df:20:8e:93:6b:3c:f3:77:18:77:
                    c6:96:66:99:da:13:3f:99:24:f6:f6:2b:86:23:9e:
                    31:3b:62:de:c9:3d:62:8b:53:a4:89:8a:8b:81:68:
                    08:5c:3a:fc:47:54:97:ba:c9:21:06:64:33:38:8f:
                    29:ac:7d:e5:de:45:6e:88:e9:5e:cd:7e:5b:e8:cf:
                    a8:62:1c:a1:56:e0:9a:53:e1:3e:62:3d:43:b4:23:
                    19:9e:44:e1:26:38:44:e5:2a:3b:15:38:26:13:08:
                    28:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FA:44:B2:0B:1F:EA:6F:72:03:A9:C4:A4:5E:D8:B3:4B:CE:5A:CF
            X509v3 Authority Key Identifier:
                keyid:13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36322e302f32342d3234203d3e20323731393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:9e:b5:9e:95:42:a5:46:05:89:97:31:ac:ef:15:44:c5:85:
         33:e4:54:51:dc:e9:43:af:56:aa:91:24:3e:ca:63:16:80:56:
         8b:c4:7a:21:8b:9b:2f:58:d2:6a:a1:b3:b5:67:35:68:64:bd:
         b0:f6:78:2a:82:79:98:91:81:6a:60:fa:2c:e7:ba:e9:ab:e2:
         3e:81:6a:b9:66:fa:0a:4e:29:16:64:0c:87:7a:8f:5d:18:a6:
         2b:b0:fa:a2:5b:f5:be:c0:9f:31:b1:66:15:66:93:76:11:cb:
         37:2a:3f:46:d5:54:f5:9f:64:66:89:4f:83:68:90:75:4d:a5:
         99:10:d7:51:23:43:db:6e:36:0b:19:52:3a:3a:b7:b5:1d:b1:
         f9:3f:e6:69:19:56:18:f6:32:c0:d9:43:f7:5a:0f:56:9d:17:
         d6:cf:01:ba:80:84:fa:29:c9:42:e4:2f:ba:b5:90:7a:09:1f:
         4a:69:3f:57:9d:44:fb:e3:c9:42:e8:54:74:e1:fc:03:9f:52:
         8a:60:b6:8f:bd:ea:a9:05:91:7a:d8:e6:9b:d1:b2:80:30:8b:
         de:1f:68:17:9d:c9:96:28:79:e4:78:f5:cb:1c:2a:c9:81:bd:
         37:b7:1c:32:93:23:b7:01:c3:84:a3:72:51:5f:ab:47:14:16:
         e7:37:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:04 2025 by rpki-client