Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36322e302f32332d3233203d3e20323639373738.roa
File:                     34352e3138302e36322e302f32332d3233203d3e20323639373738.roa (raw, json)
Hash identifier:          +U5Lbg6zTDFywBPWYiJEoKZYISo0CYeR6nmHSMa8oAI=
Subject key identifier:   53:EC:9E:CA:71:3A:11:A3:C8:6C:F7:CC:2C:D1:8F:E4:C9:3E:1A:EB
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       6FB00EE9FD172B0EF6A9CE4C11BC95D443879627
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36322e302f32332d3233203d3e20323639373738.roa
Signing time:             Sat 21 Dec 2024 04:30:01 +0000
ROA not before:           Sat 21 Dec 2024 04:25:01 +0000
ROA not after:            Sat 20 Dec 2025 04:30:01 +0000
asID:                     269778
IP address blocks:        45.180.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b0:0e:e9:fd:17:2b:0e:f6:a9:ce:4c:11:bc:95:d4:43:87:96:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Dec 21 04:25:01 2024 GMT
            Not After : Dec 20 04:30:01 2025 GMT
        Subject: CN=53EC9ECA713A11A3C86CF7CC2CD18FE4C93E1AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5d:5d:81:1f:f1:11:b2:84:dd:b9:11:61:4a:
                    83:7e:b2:e2:b0:eb:c5:01:93:08:fe:92:e9:68:49:
                    67:5e:44:cb:b2:04:c9:f6:22:f4:18:4e:38:db:45:
                    36:b4:38:83:a1:f5:c7:46:e7:1e:26:64:3f:a5:8b:
                    66:98:b9:35:3c:44:14:ca:0c:50:0c:64:e0:08:41:
                    d2:33:6b:d1:c8:6b:2f:91:98:4c:b7:7d:66:76:ef:
                    8e:33:b1:58:3f:dc:11:0a:2f:9a:37:47:7b:16:73:
                    c6:e5:2f:8e:a9:62:c9:64:55:ac:23:ce:dd:e3:23:
                    dd:ae:da:1d:82:de:fc:34:2b:17:e3:85:c1:77:3e:
                    50:46:e6:15:ba:e2:5d:5c:1c:53:26:17:12:08:05:
                    d2:b6:da:bf:9d:59:7e:e2:12:df:f7:01:4c:fd:16:
                    ac:ee:a6:f1:26:4d:c7:d6:6b:a8:d6:95:f4:02:cd:
                    4e:8c:e5:6c:3c:93:54:77:f1:7b:5b:e1:49:65:2c:
                    9b:0b:3d:2f:3f:93:3d:fe:e4:ad:82:bf:cd:48:ca:
                    62:23:58:46:dc:bf:d3:ad:ba:6c:7b:9e:aa:72:2d:
                    72:ae:38:3c:cd:33:a5:42:8f:36:cf:0d:37:9c:80:
                    07:e3:26:f3:70:37:a5:d2:cd:10:5d:d6:2e:14:f0:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EC:9E:CA:71:3A:11:A3:C8:6C:F7:CC:2C:D1:8F:E4:C9:3E:1A:EB
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36322e302f32332d3233203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:1c:5b:ff:7c:64:a2:12:65:c8:37:e1:ca:86:51:6b:d3:7f:
         82:6f:0f:50:8f:96:f5:e9:57:a2:53:04:54:ad:1a:31:35:3d:
         0c:61:0d:1d:a4:05:48:18:00:b1:40:01:58:26:41:80:3d:4f:
         91:9b:01:d2:32:ee:b0:2b:22:a3:28:69:e0:b1:38:e5:db:23:
         47:1a:76:4b:75:e9:aa:dd:32:92:0b:81:a0:8f:f0:8a:5c:17:
         cb:73:39:6e:8a:a1:d6:e6:8c:a6:94:ec:8d:05:88:18:e2:d4:
         79:74:19:38:03:1c:da:ca:e7:de:86:8d:14:64:da:5e:36:07:
         5b:db:99:e5:95:d3:d4:cd:46:b4:fb:9e:4a:44:a6:d5:be:36:
         84:ea:5e:3d:2f:53:10:52:49:bd:8f:61:b4:f7:08:22:42:0b:
         bf:4b:e5:15:76:79:6d:0b:4a:3c:76:39:c2:2b:c5:ec:42:89:
         d7:f3:f5:a2:3e:6a:3d:61:02:66:42:f0:30:4e:e1:20:63:3a:
         06:3c:30:03:9e:12:fa:6d:b8:a8:b0:71:d4:da:3f:fa:60:bb:
         d9:3d:f0:c3:ca:d0:d7:f3:1a:37:b9:c8:86:4e:e9:7e:5e:fe:
         69:27:36:55:1a:0e:91:82:53:bf:da:db:3a:d2:4e:a2:10:c3:
         5d:1b:7a:e1
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUb7AO6f0XKw72qc5MEbyV1EOHlicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMzMzE2NDFGNDc3NzdFNkQzOUQ2NjBDQkQ2MTBCM0FD
NUM3MTIwMDAeFw0yNDEyMjEwNDI1MDFaFw0yNTEyMjAwNDMwMDFaMDMxMTAvBgNV
BAMTKDUzRUM5RUNBNzEzQTExQTNDODZDRjdDQzJDRDE4RkU0QzkzRTFBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXV2BH/ERsoTduRFhSoN+suKw
68UBkwj+kuloSWdeRMuyBMn2IvQYTjjbRTa0OIOh9cdG5x4mZD+li2aYuTU8RBTK
DFAMZOAIQdIza9HIay+RmEy3fWZ2744zsVg/3BEKL5o3R3sWc8blL46pYslkVawj
zt3jI92u2h2C3vw0KxfjhcF3PlBG5hW64l1cHFMmFxIIBdK22r+dWX7iEt/3AUz9
FqzupvEmTcfWa6jWlfQCzU6M5Ww8k1R38Xtb4UllLJsLPS8/kz3+5K2Cv81IymIj
WEbcv9Otumx7nqpyLXKuODzNM6VCjzbPDTecgAfjJvNwN6XSzRBd1i4U8BaTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU+yeynE6EaPIbPfMLNGP5Mk+GuswHwYDVR0j
BBgwFoAUMzMWQfR3d+bTnWYMvWELOsXHEgAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NzRERTM1RUQ1OUQxREQ3MzQ1NkU1QUQ3M0M3QUJDMUU3
RjYzRTA3NTc3MzEzQUIzMjk3MzA2NDUzQTI5MzZELzAvMzMzMzE2NDFGNDc3NzdF
NkQzOUQ2NjBDQkQ2MTBCM0FDNUM3MTIwMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMzMzMTY0MUY0Nzc3N0U2RDM5
RDY2MENCRDYxMEIzQUM1QzcxMjAwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzc0REUzNUVENTlEMURENzM0NTZFNUFENzNDN0FCQzFFN0Y2M0UwNzU3
NzMxM0FCMzI5NzMwNjQ1M0EyOTM2RC8wLzM0MzUyZTMxMzgzMDJlMzYzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM3MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS20PjAN
BgkqhkiG9w0BAQsFAAOCAQEATxxb/3xkohJlyDfhyoZRa9N/gm8PUI+W9elXolME
VK0aMTU9DGENHaQFSBgAsUABWCZBgD1PkZsB0jLusCsioyhp4LE45dsjRxp2S3Xp
qt0ykguBoI/wilwXy3M5boqh1uaMppTsjQWIGOLUeXQZOAMc2srn3oaNFGTaXjYH
W9uZ5ZXT1M1GtPueSkSm1b42hOpePS9TEFJJvY9htPcIIkILv0vlFXZ5bQtKPHY5
wivF7EKJ1/P1oj5qPWECZkLwME7hIGM6BjwwA54S+m24qLBx1No/+mC72T3ww8rQ
1/MaN7nIhk7pfl7+aSc2VRoOkYJTv9rbOtJOohDDXRt64Q==
-----END CERTIFICATE-----