Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36322e302f32342d3234203d3e20323639373738.roa
File:                     34352e3138302e36322e302f32342d3234203d3e20323639373738.roa (raw, json)
Hash identifier:          BbPajcIKCosJZn/AFkqsBQti9NqkkEBhgSlJqczQ+fg=
Subject key identifier:   AD:51:9D:24:4F:D2:BF:61:C3:5B:B5:69:8C:0F:6C:7C:81:2F:FE:90
Certificate issuer:       /CN=33331641F47777E6D39D660CBD610B3AC5C71200
Certificate serial:       387B5CEA8C023B2635621842A310E458D73633A9
Authority key identifier: 33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36322e302f32342d3234203d3e20323639373738.roa
Signing time:             Sat 21 Dec 2024 04:30:00 +0000
ROA not before:           Sat 21 Dec 2024 04:25:00 +0000
ROA not after:            Sat 20 Dec 2025 04:30:00 +0000
asID:                     269778
IP address blocks:        45.180.62.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:5c:ea:8c:02:3b:26:35:62:18:42:a3:10:e4:58:d7:36:33:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33331641F47777E6D39D660CBD610B3AC5C71200
        Validity
            Not Before: Dec 21 04:25:00 2024 GMT
            Not After : Dec 20 04:30:00 2025 GMT
        Subject: CN=AD519D244FD2BF61C35BB5698C0F6C7C812FFE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:de:e1:5a:86:72:95:04:84:43:d1:c9:3c:
                    68:35:3a:0b:d7:a4:41:7a:96:4c:17:5c:e2:79:35:
                    44:31:f4:1b:8e:13:7f:1a:75:6e:04:8f:10:a5:7d:
                    11:69:c0:b7:9e:76:86:29:9c:f1:8e:10:45:99:a9:
                    e7:41:77:d5:7e:d8:20:e1:69:ff:37:69:62:5c:de:
                    24:44:cf:41:51:74:bb:a4:5f:7e:4a:b6:d3:51:a0:
                    ab:a9:5b:2b:27:d6:74:cb:c6:ee:5f:3b:63:51:54:
                    f2:87:5a:08:64:3b:e4:36:43:0d:e9:35:61:02:af:
                    5f:41:7e:4f:ae:d3:b8:80:dc:10:5f:fe:b0:e1:cb:
                    11:bf:65:e4:04:a5:44:25:84:e7:6c:89:b3:9d:c5:
                    dc:21:64:5d:7c:e2:dc:83:8f:31:ee:eb:9d:19:7b:
                    01:e1:db:80:4f:1c:f0:54:57:cc:ef:1a:43:cc:a6:
                    09:21:4f:54:f2:0d:07:ed:cc:0f:53:e5:7d:d5:4d:
                    4f:29:9d:d3:48:b6:90:fc:5c:97:db:b4:06:68:71:
                    03:80:41:64:d1:37:f0:5b:8d:c7:f3:71:42:b6:a9:
                    b7:d7:b7:23:fd:53:14:cd:83:c7:bb:21:9a:7d:99:
                    eb:73:5b:7d:25:ee:c6:94:60:e1:93:1d:27:f6:dc:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:51:9D:24:4F:D2:BF:61:C3:5B:B5:69:8C:0F:6C:7C:81:2F:FE:90
            X509v3 Authority Key Identifier:
                keyid:33:33:16:41:F4:77:77:E6:D3:9D:66:0C:BD:61:0B:3A:C5:C7:12:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/33331641F47777E6D39D660CBD610B3AC5C71200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/33331641F47777E6D39D660CBD610B3AC5C71200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/774DE35ED59D1DD73456E5AD73C7ABC1E7F63E07577313AB3297306453A2936D/0/34352e3138302e36322e302f32342d3234203d3e20323639373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a7:c4:99:df:c6:8a:91:3a:8d:f3:13:86:f1:99:04:6c:8f:
         3a:ef:0c:3e:bf:5f:9d:92:ef:36:52:41:d4:b1:68:e4:11:13:
         be:76:af:11:77:d8:ac:1b:66:ef:e8:bc:7b:43:ed:1f:79:ac:
         a0:11:1f:c9:18:c9:81:2d:93:83:c3:af:eb:f6:f3:6e:3b:e9:
         0e:c1:62:dc:26:98:3e:3d:55:4c:e2:ff:5c:86:c0:e1:2e:e0:
         29:d5:b3:3e:ae:b8:78:13:8c:83:61:99:08:a5:92:07:15:93:
         59:ac:c6:19:18:73:fe:55:b9:4c:4c:d3:fa:16:90:de:65:9c:
         ae:01:93:95:60:cd:79:c3:a8:48:e7:0f:e0:d2:73:43:4b:77:
         0f:22:9d:f3:02:cd:64:b2:d9:9e:68:bb:10:28:1b:ba:c3:c8:
         e4:0b:77:15:89:d8:d0:f4:1f:ac:dd:f9:15:39:61:65:42:77:
         41:69:78:69:00:0a:cb:f5:1a:cb:93:45:66:98:1a:b4:3e:cf:
         9a:68:6c:d2:73:5b:1f:65:03:db:99:e5:95:f3:94:25:5f:46:
         b5:2c:b4:d2:b3:ad:db:42:98:04:88:b3:8f:e6:ee:33:9e:2b:
         d0:24:5b:4d:9a:d9:8f:0f:42:57:d3:ec:3a:70:17:16:bb:f0:
         80:6e:73:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:23 2025 by rpki-client