Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32332d3233203d3e20323639373738.roa
File:                     34352e3138302e36302e302f32332d3233203d3e20323639373738.roa (raw, json)
Hash identifier:          5xXMyA9HNdX5mnOa1jsyBmKd2ebM3S9nVIqmxeFgUKM=
Subject key identifier:   B2:55:7F:8B:9C:8A:94:E8:BB:D9:4E:54:2F:56:90:89:8F:80:0B:BD
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       0182C4A7725AEBA4B0B0FD735C427EF302541F44
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32332d3233203d3e20323639373738.roa
Signing time:             Sat 21 Dec 2024 04:30:01 +0000
ROA not before:           Sat 21 Dec 2024 04:25:01 +0000
ROA not after:            Sat 20 Dec 2025 04:30:01 +0000
asID:                     269778
IP address blocks:        45.180.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c4:a7:72:5a:eb:a4:b0:b0:fd:73:5c:42:7e:f3:02:54:1f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Dec 21 04:25:01 2024 GMT
            Not After : Dec 20 04:30:01 2025 GMT
        Subject: CN=B2557F8B9C8A94E8BBD94E542F5690898F800BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:e2:e9:c4:0e:a3:5b:1f:bc:ad:fa:95:ec:
                    5a:68:c4:e7:62:6a:50:f1:22:31:90:95:3e:10:0f:
                    b2:70:0c:84:db:16:91:a5:c6:fe:18:5a:d7:83:ce:
                    ec:81:ce:dc:38:5f:91:64:ac:5b:18:58:f9:f8:47:
                    45:d9:3e:6b:f2:85:3d:3e:7e:c5:1e:b1:de:1f:9f:
                    89:47:0b:43:34:19:43:45:33:b5:d5:5d:92:16:e7:
                    1c:b3:f6:1a:c8:24:30:0b:eb:7a:19:ee:92:20:c0:
                    b3:78:61:79:c4:1d:01:c1:c7:43:74:26:41:f7:58:
                    8d:16:cb:88:e2:ce:fb:7c:ab:06:ec:8c:9e:28:ca:
                    8d:9c:17:7a:6f:fd:9e:3d:b2:d9:11:8f:65:5d:cd:
                    da:1d:20:95:4a:34:54:fb:e2:ae:5f:04:04:aa:4b:
                    43:24:46:5c:b2:ab:6f:13:fd:1e:e3:6f:89:70:bb:
                    a9:56:23:2b:a6:c7:98:a4:1c:8d:02:92:75:b3:b1:
                    6c:b9:e5:1d:a3:9e:25:ed:8b:67:75:b2:71:12:38:
                    4f:77:fa:1f:cd:64:c5:45:79:87:c4:82:00:bc:bc:
                    01:89:03:dd:7f:2a:75:b3:3c:c3:0e:eb:17:82:7b:
                    2b:9f:fb:3c:82:b0:b0:f4:6e:ae:cc:88:ed:d8:19:
                    1e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:55:7F:8B:9C:8A:94:E8:BB:D9:4E:54:2F:56:90:89:8F:80:0B:BD
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36302e302f32332d3233203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:1c:ac:f7:4f:c8:48:ca:22:db:b5:95:47:28:8e:b3:05:
         68:d7:4e:14:cf:be:50:ac:6f:2b:db:9a:22:9e:c3:9b:e2:d3:
         03:1e:6b:0d:8c:46:b7:2c:21:7f:c5:e8:79:72:75:43:ff:58:
         c9:bd:4c:a2:b4:1b:6b:6d:db:1e:d4:76:7d:55:f4:11:f8:4e:
         6d:40:b9:1d:47:71:a1:7e:ec:58:38:92:4a:c5:e9:3f:a3:d3:
         5c:3f:6b:d2:0a:f9:dc:5a:0d:99:97:27:9f:e0:4e:83:68:e1:
         a6:67:9a:7d:29:99:c0:68:0b:ab:ab:70:b4:32:e7:63:10:47:
         5a:ce:11:42:8e:74:a6:01:b3:95:28:8d:13:4a:6c:80:9f:2d:
         cf:d1:f8:17:43:37:0c:3b:9a:0d:4e:43:2c:63:d8:81:6e:8e:
         e6:e6:87:e6:80:e1:0c:bb:72:2d:ef:a3:f0:8f:bc:45:10:d7:
         31:8c:5f:dc:f4:2e:33:5a:4f:e9:6c:29:77:05:a6:98:5f:0e:
         41:73:c0:30:b9:d1:3f:f6:76:0b:cf:8d:20:6a:75:1e:d6:ce:
         55:5c:5e:d6:20:99:29:5c:22:65:10:99:78:01:ea:75:71:89:
         df:45:08:c0:45:10:b4:02:13:e3:a1:42:b4:5d:35:70:aa:b9:
         58:d7:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:29 2025 by rpki-client