Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323636373137.roa
File:                     34352e3233312e35342e302f32342d3234203d3e20323636373137.roa (raw, json)
Hash identifier:          JTHVLPZ6qqKY/45Qp1Eb+LFl88iUj5QuRSnMyBG9ZLs=
Subject key identifier:   A5:9A:70:C3:B6:44:A5:A7:36:F8:66:12:0C:23:A3:34:95:DE:B1:CA
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       3599222AFEA74B465375A364DBD2EBC69E5F86DA
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323636373137.roa
Signing time:             Tue 04 Feb 2025 18:14:03 +0000
ROA not before:           Tue 04 Feb 2025 18:09:03 +0000
ROA not after:            Tue 03 Feb 2026 18:14:03 +0000
asID:                     266717
IP address blocks:        45.231.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:99:22:2a:fe:a7:4b:46:53:75:a3:64:db:d2:eb:c6:9e:5f:86:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Feb  4 18:09:03 2025 GMT
            Not After : Feb  3 18:14:03 2026 GMT
        Subject: CN=A59A70C3B644A5A736F866120C23A33495DEB1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:a6:7f:91:ad:35:3a:d1:93:60:f9:6c:2f:
                    73:a0:22:d5:40:d5:31:50:c0:88:c5:4c:43:b4:52:
                    b6:ba:d9:e4:11:30:51:8c:55:02:1c:26:d0:de:49:
                    94:c2:ac:2c:19:71:2c:27:74:77:e9:2c:70:88:d9:
                    31:8b:dd:6b:e6:e1:bd:c3:9b:b3:4c:4f:21:19:25:
                    81:8c:65:07:44:af:08:f9:32:f3:8e:0e:a9:9d:e8:
                    0d:9e:7a:1f:98:17:cb:72:1d:d6:7b:56:73:27:01:
                    85:c6:6e:8e:43:4d:29:f6:0b:ad:4e:8c:87:e2:35:
                    e9:04:1b:1a:1d:fa:80:16:c0:98:87:a6:50:26:71:
                    3e:82:bd:a4:b8:01:65:84:df:69:34:ae:99:33:32:
                    14:1b:ae:ea:47:61:3c:64:13:a1:ae:e2:25:f8:92:
                    e9:35:8d:89:1f:87:8c:13:e4:1c:c1:f4:79:c0:9d:
                    01:fd:70:15:54:9a:68:cf:64:b7:0f:9d:bf:e3:38:
                    62:7b:e2:48:4a:c8:a0:a5:87:ef:88:c6:a0:8f:04:
                    f2:49:4e:28:8f:7b:b9:7f:99:87:b9:1a:dc:1d:35:
                    84:36:82:25:d3:f5:bb:9e:c4:66:20:40:8d:af:d5:
                    8c:71:ec:e8:4f:9a:d7:03:51:ae:63:9d:8a:f6:4d:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9A:70:C3:B6:44:A5:A7:36:F8:66:12:0C:23:A3:34:95:DE:B1:CA
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/34352e3233312e35342e302f32342d3234203d3e20323636373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:eb:dc:4b:bc:0d:87:b6:80:c8:8f:a5:a3:32:d4:6b:c9:
         89:6b:89:75:e8:d1:08:19:e9:b9:43:08:cd:38:81:38:ee:2e:
         1a:a7:8c:f5:a8:7e:88:df:c5:dd:1d:84:18:2e:88:b3:df:01:
         9a:cf:a0:93:00:fc:27:fc:c3:f6:66:53:f2:95:a8:18:d1:8f:
         6b:93:b5:d5:f8:da:15:71:83:de:ed:5c:87:3d:55:30:c1:b5:
         a1:ff:9d:b5:94:85:de:d8:5a:75:58:d0:06:86:4c:0b:31:aa:
         91:e0:4d:43:38:ad:79:db:d6:0a:0e:0a:c7:80:7b:29:11:11:
         ae:85:83:84:29:58:4f:e8:ef:40:66:4b:bd:dd:47:18:e7:d8:
         c3:e4:8f:06:47:9f:b5:7c:d9:23:8f:4c:54:9c:03:af:7b:8f:
         1f:b1:9c:56:98:9d:14:82:42:12:f3:a3:d6:b3:c8:08:d1:78:
         a8:aa:6e:14:04:8b:7f:98:07:9e:5f:8b:41:ea:a2:7b:51:a6:
         3d:01:10:fe:8e:8e:b2:45:78:f7:b4:c0:38:7f:40:1f:99:a3:
         40:a5:8b:e6:01:b8:84:fe:58:2b:59:72:27:18:7f:5c:83:fe:
         e9:86:b7:3c:92:0f:c1:41:fb:0c:ac:00:ed:40:e2:28:aa:66:
         8c:4e:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:09:34 2025 by rpki-client