Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e392e302f32342d3234203d3e20323635383139.roa
File:                     34352e362e392e302f32342d3234203d3e20323635383139.roa (raw, json)
Hash identifier:          jyRIPv1K0mR4JXsjEpnkGMreIE2Sdym9YyPbefZLE1E=
Subject key identifier:   3C:08:73:CD:08:04:59:E9:3D:9B:9A:D5:7B:06:93:42:0A:B4:57:23
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       5ECF0D14D0D0B81163797358AEEEE85F3FC1F78B
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e392e302f32342d3234203d3e20323635383139.roa
Signing time:             Fri 31 Jan 2025 23:55:00 +0000
ROA not before:           Fri 31 Jan 2025 23:50:00 +0000
ROA not after:            Fri 30 Jan 2026 23:55:00 +0000
asID:                     265819
IP address blocks:        45.6.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:0d:14:d0:d0:b8:11:63:79:73:58:ae:ee:e8:5f:3f:c1:f7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Jan 31 23:50:00 2025 GMT
            Not After : Jan 30 23:55:00 2026 GMT
        Subject: CN=3C0873CD080459E93D9B9AD57B0693420AB45723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:17:4f:88:95:33:06:36:27:26:b3:de:26:
                    19:c8:7b:05:e4:b6:8c:ef:ba:56:d1:e9:63:20:80:
                    c0:3c:8a:b0:d7:22:3f:0a:19:97:fd:1e:34:19:9b:
                    80:31:dd:92:f8:22:70:8c:bf:44:94:0d:e7:12:f3:
                    d9:0f:18:60:b4:f0:5c:36:54:a5:97:4b:e3:04:99:
                    a1:b4:09:9c:68:ae:c5:53:91:7b:66:ad:53:ab:09:
                    46:55:81:b8:1f:17:4d:b4:90:7a:76:d6:da:9d:08:
                    6c:a1:1c:6d:5d:f7:55:08:be:67:73:aa:80:4d:64:
                    35:ee:d2:38:86:db:e8:79:df:d0:25:7b:bb:89:d5:
                    f1:1e:17:e0:70:82:c4:b0:9b:13:c6:a0:fb:9b:b8:
                    24:e4:a0:e8:a5:31:56:fe:b0:8f:66:83:61:d0:83:
                    b4:a6:9c:01:81:20:11:08:8c:c2:47:52:1a:f8:53:
                    b8:ee:33:9c:ab:65:e2:01:31:35:30:19:b2:b6:f0:
                    52:0f:9d:b7:70:48:3c:cf:6a:44:f0:4a:a3:bf:e4:
                    58:a0:46:6d:1a:6a:e6:98:e6:07:4a:b1:c7:5d:8b:
                    02:51:3c:50:a2:a2:6b:68:b5:db:a0:8b:cd:65:5d:
                    8f:f9:92:85:db:1b:f3:65:93:56:02:a4:75:21:b2:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:08:73:CD:08:04:59:E9:3D:9B:9A:D5:7B:06:93:42:0A:B4:57:23
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e392e302f32342d3234203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:dc:00:ce:bb:1e:49:70:30:89:0d:a0:26:85:1f:41:e3:
         c7:9d:3c:ae:53:a3:a5:44:63:a4:e9:02:8c:af:81:05:47:7f:
         b6:5e:60:3b:ea:23:e7:96:43:0d:79:cb:21:cb:46:af:9f:bb:
         ce:10:0a:bb:28:95:1b:4e:a3:c2:db:c8:ea:52:91:dd:76:7a:
         95:32:cd:0c:5b:15:44:b9:88:ab:9f:5a:36:d7:17:9e:8e:00:
         24:81:36:3e:74:41:d8:d9:b0:30:39:d4:29:df:7a:ba:98:5e:
         f4:45:1f:30:1b:c1:46:17:98:03:46:23:5b:e8:d7:cc:3f:08:
         83:75:0b:3c:ca:6f:c0:e9:35:b3:d1:d1:be:d0:97:34:e9:ad:
         b1:f4:54:c3:a0:d3:ad:c2:9a:4f:5b:e2:12:ad:4f:00:5e:44:
         27:9e:05:de:ad:ff:dd:1c:da:02:b9:3e:4b:c5:51:93:90:ec:
         78:69:71:0c:e1:86:80:82:15:c5:fc:6b:a5:31:07:4f:da:f7:
         7a:e9:a3:35:b5:97:7a:9d:bd:70:46:70:f1:01:a8:fc:8f:29:
         db:d0:32:fe:59:4c:d7:cc:92:5f:25:7b:3f:b7:6c:9f:6e:e6:
         cf:5f:3b:1d:e4:0b:0e:fb:93:bb:66:bf:57:92:0e:c3:21:43:
         15:b4:f4:64
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUXs8NFNDQuBFjeXNYru7oXz/B94swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MjNDOThDRjI1NDg4MzlENzRFRkQ5RkI3MzA0RjRE
QUI0QUU3NTAeFw0yNTAxMzEyMzUwMDBaFw0yNjAxMzAyMzU1MDBaMDMxMTAvBgNV
BAMTKDNDMDg3M0NEMDgwNDU5RTkzRDlCOUFENTdCMDY5MzQyMEFCNDU3MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlRdPiJUzBjYnJrPeJhnIewXk
tozvulbR6WMggMA8irDXIj8KGZf9HjQZm4Ax3ZL4InCMv0SUDecS89kPGGC08Fw2
VKWXS+MEmaG0CZxorsVTkXtmrVOrCUZVgbgfF020kHp21tqdCGyhHG1d91UIvmdz
qoBNZDXu0jiG2+h539Ale7uJ1fEeF+BwgsSwmxPGoPubuCTkoOilMVb+sI9mg2HQ
g7SmnAGBIBEIjMJHUhr4U7juM5yrZeIBMTUwGbK28FIPnbdwSDzPakTwSqO/5Fig
Rm0aauaY5gdKscddiwJRPFCiomtotdugi81lXY/5koXbG/Nlk1YCpHUhsl2jAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUPAhzzQgEWek9m5rVewaTQgq0VyMwHwYDVR0j
BBgwFoAUFkI8mM8lSIOddO/Z+3ME9Nq0rnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MUEyNjZGODE1MkNCQjEwNkYxRkVGRTE2NzIwMUIyREY4
MUNFMzg1MDJFQjgzNEZGOUU0MjFEODNFNzI4NDY5LzAvMTY0MjNDOThDRjI1NDg4
MzlENzRFRkQ5RkI3MzA0RjREQUI0QUU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjQyM0M5OENGMjU0ODgzOUQ3
NEVGRDlGQjczMDRGNERBQjRBRTc1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODFBMjY2RjgxNTJDQkIxMDZGMUZFRkUxNjcyMDFCMkRGODFDRTM4NTAy
RUI4MzRGRjlFNDIxRDgzRTcyODQ2OS8wLzM0MzUyZTM2MmUzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0GCTANBgkqhkiG
9w0BAQsFAAOCAQEAEz/cAM67HklwMIkNoCaFH0Hjx508rlOjpURjpOkCjK+BBUd/
tl5gO+oj55ZDDXnLIctGr5+7zhAKuyiVG06jwtvI6lKR3XZ6lTLNDFsVRLmIq59a
NtcXno4AJIE2PnRB2NmwMDnUKd96uphe9EUfMBvBRheYA0YjW+jXzD8Ig3ULPMpv
wOk1s9HRvtCXNOmtsfRUw6DTrcKaT1viEq1PAF5EJ54F3q3/3RzaArk+S8VRk5Ds
eGlxDOGGgIIVxfxrpTEHT9r3eumjNbWXep29cEZw8QGo/I8p29Ay/llM18ySXyV7
P7dsn27mz187HeQLDvuTu2a/V5IOwyFDFbT0ZA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:21 2025 by rpki-client