Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38342e302f32332d3233203d3e20323636383134.roa
File:                     34352e3233342e38342e302f32332d3233203d3e20323636383134.roa (raw, json)
Hash identifier:          J5YLwgEp13aoy7fxYupgJGGy+x/yHrm5Svi6LYNfFSU=
Subject key identifier:   E8:97:F6:34:E9:71:D6:0D:79:5C:59:CD:76:04:26:C1:61:8D:2E:76
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       57DA1EA1FF89311CC4C00AE51F69ACE1B73CDD1F
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38342e302f32332d3233203d3e20323636383134.roa
Signing time:             Wed 05 Feb 2025 20:45:01 +0000
ROA not before:           Wed 05 Feb 2025 20:40:01 +0000
ROA not after:            Wed 04 Feb 2026 20:45:01 +0000
asID:                     266814
IP address blocks:        45.234.84.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:1e:a1:ff:89:31:1c:c4:c0:0a:e5:1f:69:ac:e1:b7:3c:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Feb  5 20:40:01 2025 GMT
            Not After : Feb  4 20:45:01 2026 GMT
        Subject: CN=E897F634E971D60D795C59CD760426C1618D2E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1e:1b:11:06:19:aa:37:e4:3c:4d:46:ab:c3:
                    d5:59:9c:b5:38:e0:5f:eb:04:cf:de:4c:e1:15:73:
                    cb:4c:7d:37:46:a9:ae:ea:4f:31:b3:bc:df:ea:cc:
                    f1:84:d0:5e:6e:e7:a8:b8:4b:58:08:c4:7b:a2:b9:
                    39:9c:17:9b:e0:c3:5a:08:34:59:44:92:6a:d9:e4:
                    06:13:70:0c:2d:8e:22:1a:51:3c:ec:70:67:b5:f6:
                    16:22:b3:d6:bd:b2:eb:cf:4e:2b:05:f4:99:f7:2b:
                    9d:b5:3f:c9:89:0d:f7:9b:e7:32:36:56:1c:f0:ae:
                    0b:f6:05:18:5d:7e:ff:d1:c6:67:0d:ff:af:65:97:
                    1b:40:a2:66:8f:7e:91:49:7e:3b:2f:2f:c6:0b:3b:
                    3b:80:0a:35:a6:6a:3c:d7:dd:4f:c6:11:14:18:4f:
                    0b:23:cd:df:f8:2f:87:13:1c:4b:bc:6d:95:fa:13:
                    cd:e4:82:b0:89:f9:8f:45:02:8d:c4:25:cc:9b:53:
                    4a:f3:12:84:c2:ba:78:e7:95:ec:1d:7e:38:e5:a3:
                    dc:b9:aa:94:d6:5d:cc:b7:9d:39:11:2b:ca:09:4b:
                    62:64:66:4f:9e:22:ec:12:97:37:db:86:e3:b0:74:
                    df:2e:16:8e:b4:9f:aa:03:64:26:51:0d:36:47:94:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:97:F6:34:E9:71:D6:0D:79:5C:59:CD:76:04:26:C1:61:8D:2E:76
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233342e38342e302f32332d3233203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:5d:3b:e5:3d:88:9b:36:7b:14:24:54:b1:eb:35:f2:63:
         15:f9:4e:66:e9:aa:41:31:e2:32:28:a6:6e:05:fc:06:f8:4d:
         33:01:e5:bb:41:48:14:b1:0f:f0:c9:de:82:dc:2d:0f:62:0c:
         8a:4f:5e:cb:a8:74:1e:32:64:12:73:f0:76:91:7e:38:9d:c4:
         bc:81:c4:12:8f:62:28:73:d1:5f:74:47:e7:39:a3:7f:95:36:
         fe:c5:17:69:7e:5c:98:e9:f2:30:dc:cf:8e:e2:9a:8c:00:b2:
         a7:a1:81:33:11:9f:76:7a:06:2c:35:a1:b8:45:d6:cb:c2:c2:
         35:96:ab:43:ea:a7:1c:2d:02:44:2c:c2:f1:e5:15:e4:d3:1f:
         df:29:04:20:28:f7:23:75:74:f9:7e:b4:9e:14:68:ab:56:ad:
         f5:b4:a8:c5:73:6b:fb:ae:d1:4b:c2:c3:db:df:e7:ef:77:60:
         ca:d7:1f:4c:c5:b0:cd:d2:0a:db:b6:ab:89:46:d4:b7:ae:b3:
         89:72:15:08:bb:01:c4:13:f9:94:8a:b5:07:f5:3f:db:b9:90:
         32:6a:63:e3:ee:8b:6d:2e:17:bf:99:49:25:62:f3:64:2c:ff:
         2c:d9:f1:12:b9:5b:8e:6d:14:de:8e:f9:7f:de:b3:01:d8:1f:
         47:45:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:12 2025 by rpki-client