Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32322d3232203d3e20323635383139.roa
File:                     34352e362e382e302f32322d3232203d3e20323635383139.roa (raw, json)
Hash identifier:          ZYZGqrysEHPQEts4gwbd1l2Ixas+93EdF/BdhapJcnQ=
Subject key identifier:   AA:C2:B1:E0:B8:F5:E0:23:0F:71:1E:67:38:1D:59:4B:6D:8F:CD:3B
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       50A60EC92FECD4FB035AE877EC7AA2E49EEC8926
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32322d3232203d3e20323635383139.roa
Signing time:             Fri 31 Jan 2025 23:55:00 +0000
ROA not before:           Fri 31 Jan 2025 23:50:00 +0000
ROA not after:            Fri 30 Jan 2026 23:55:00 +0000
asID:                     265819
IP address blocks:        45.6.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a6:0e:c9:2f:ec:d4:fb:03:5a:e8:77:ec:7a:a2:e4:9e:ec:89:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Jan 31 23:50:00 2025 GMT
            Not After : Jan 30 23:55:00 2026 GMT
        Subject: CN=AAC2B1E0B8F5E0230F711E67381D594B6D8FCD3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:e4:0e:11:a9:86:5e:34:a7:1c:d5:76:92:
                    6b:ae:fd:80:db:44:98:57:5e:7f:f8:c1:97:f2:7d:
                    d5:c7:52:10:01:d1:6d:a8:8c:1d:1a:36:23:9e:d6:
                    b4:d4:d0:b8:09:33:43:04:a4:a4:8c:9c:2c:38:1d:
                    f4:63:04:6d:79:0a:31:21:55:c6:c7:73:2d:63:87:
                    62:f3:16:81:65:43:8e:2f:0c:8b:7c:45:e0:ec:08:
                    f2:a8:68:3b:9e:9c:39:c6:33:0d:91:b0:56:ba:1a:
                    70:06:1c:28:53:e5:73:ef:e9:3b:6b:e2:d9:3f:46:
                    0a:ec:5a:66:67:3e:db:4b:bd:42:71:25:e1:08:dd:
                    07:31:95:bd:1a:6d:73:7e:0a:bb:23:c7:65:31:83:
                    3b:56:ea:cb:2d:86:30:62:7f:2f:f5:06:b7:f1:51:
                    c9:09:b5:bd:73:6b:ec:db:d3:25:1c:f8:34:34:b8:
                    6c:7b:3f:bc:51:8a:29:88:24:30:a1:9c:79:af:df:
                    0c:8d:d9:d7:d5:2a:72:38:7e:04:e9:5c:4b:1c:e8:
                    15:92:2e:23:37:2d:e2:08:3f:77:e8:a9:8e:1d:dd:
                    13:b8:88:cb:49:a9:ba:25:41:dd:a8:62:89:f3:8c:
                    73:f0:b5:eb:98:68:75:7f:36:a9:fd:a7:dc:5c:c8:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C2:B1:E0:B8:F5:E0:23:0F:71:1E:67:38:1D:59:4B:6D:8F:CD:3B
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32322d3232203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:8a:21:91:4f:f3:ee:49:13:45:6e:5f:67:1a:dc:bc:7d:
         61:83:f5:83:67:be:9a:34:02:f1:55:39:16:b2:c3:b7:b6:ef:
         07:7e:37:24:70:d1:db:6e:ba:eb:bd:08:9a:48:38:4e:24:ed:
         b1:dc:c2:39:07:47:8b:c0:f3:12:16:57:50:aa:a3:11:49:f4:
         2c:3a:d7:82:49:0f:2b:3f:9b:dd:c3:fc:b0:02:71:5a:03:da:
         bb:53:3b:f3:ae:56:3e:9e:e7:89:c5:c8:42:ae:28:6d:1f:3a:
         c8:78:4c:60:22:32:71:53:75:8e:18:c5:e3:59:5a:ad:98:cc:
         02:e5:b2:b9:b6:99:3f:c3:dd:83:d5:17:af:fa:0a:88:6d:cd:
         53:b6:b1:fb:77:46:03:7b:73:40:f4:36:d8:1e:9e:ba:61:f0:
         b7:ba:2f:5a:e8:f4:23:5b:38:72:eb:88:09:f5:5a:1b:a7:11:
         a5:cc:8f:a5:6e:13:ae:0a:61:37:f2:51:78:5d:a8:f3:5f:d5:
         b5:12:77:5e:cb:69:27:2d:fb:42:b5:28:d8:7f:86:eb:fe:8d:
         a1:c5:2b:9a:67:1e:46:57:55:dd:bb:d3:ef:22:c8:6d:97:4b:
         9c:54:87:0e:24:0e:d5:a6:21:5b:c4:d8:88:14:5e:64:40:f7:
         91:7d:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----