Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34372e302f32342d3234203d3e20323636383134.roa
File:                     34352e3233372e34372e302f32342d3234203d3e20323636383134.roa (raw, json)
Hash identifier:          J5UgrPEny9g7Px/LL2zEwGqRGoLfDx+n6cTThFKdD30=
Subject key identifier:   40:AE:6C:0F:8B:80:63:35:AF:B2:A4:63:BC:96:31:05:5E:5E:AC:1B
Certificate issuer:       /CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
Certificate serial:       6C77DBA20F89F458034797E19D7C947CCEDA968E
Authority key identifier: 0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34372e302f32342d3234203d3e20323636383134.roa
Signing time:             Wed 05 Feb 2025 20:45:00 +0000
ROA not before:           Wed 05 Feb 2025 20:40:00 +0000
ROA not after:            Wed 04 Feb 2026 20:45:00 +0000
asID:                     266814
IP address blocks:        45.237.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:77:db:a2:0f:89:f4:58:03:47:97:e1:9d:7c:94:7c:ce:da:96:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DA02DE51F3AE9D4444B29FE5FC85286C264521F
        Validity
            Not Before: Feb  5 20:40:00 2025 GMT
            Not After : Feb  4 20:45:00 2026 GMT
        Subject: CN=40AE6C0F8B806335AFB2A463BC9631055E5EAC1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:ab:72:a2:d3:4f:dd:c7:75:f9:76:f3:bc:
                    5b:fe:83:c5:b0:0f:35:36:4e:b4:4e:f9:74:a1:65:
                    b0:a0:9d:18:95:fa:54:75:2e:f2:c9:4b:dc:69:54:
                    0a:dd:8f:89:e3:37:c6:d6:db:a2:2d:81:7d:44:30:
                    c9:b3:d1:a8:b6:10:07:ee:14:58:eb:db:dd:5c:f5:
                    8a:1b:d0:83:d0:cc:42:b8:ce:60:86:df:78:75:c3:
                    90:20:91:58:74:a9:4e:06:96:e6:c4:57:19:a5:77:
                    65:c2:19:df:3d:97:ba:1d:13:f4:2a:3a:a9:bf:25:
                    0f:5f:ba:c4:23:4f:78:fa:91:40:6d:ca:2e:bd:44:
                    2b:ae:a8:7a:b3:a7:8c:fe:8b:b7:fc:98:e5:ef:a3:
                    80:df:b5:95:53:2f:f5:63:54:3d:c7:3e:29:6b:26:
                    2f:b8:00:c4:8d:bc:98:57:31:86:e2:b5:b7:c2:be:
                    ad:45:68:28:fd:04:22:f0:c7:9b:70:0f:6d:bf:3d:
                    5e:71:e0:eb:b7:4d:bf:62:ce:52:44:44:22:44:47:
                    09:45:ff:2e:53:80:35:4b:f7:4a:70:81:b5:85:64:
                    ec:6d:38:5f:b2:26:90:9a:02:7e:91:3f:9a:39:fb:
                    02:fa:eb:4f:05:1a:d5:d6:db:f0:9a:65:97:d9:51:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AE:6C:0F:8B:80:63:35:AF:B2:A4:63:BC:96:31:05:5E:5E:AC:1B
            X509v3 Authority Key Identifier:
                keyid:0D:A0:2D:E5:1F:3A:E9:D4:44:4B:29:FE:5F:C8:52:86:C2:64:52:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DA02DE51F3AE9D4444B29FE5FC85286C264521F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F8B058EEBE5F0126CB5CF857141D29C8C547C2202AB9F080385A4F3CF857438/0/34352e3233372e34372e302f32342d3234203d3e20323636383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:f0:3f:c7:01:d1:16:2d:43:07:2e:e3:70:7d:83:4a:d5:8c:
         00:77:1d:96:f5:c1:33:d1:3e:d4:70:4d:67:1f:e1:4d:a8:24:
         39:b3:ed:f3:4e:c0:d1:56:87:f5:32:10:f8:57:76:c3:a9:50:
         a3:40:2a:2c:1e:ae:ff:39:af:c5:78:43:a5:50:96:83:6a:06:
         fd:fe:10:28:a7:7a:e1:f1:af:cd:31:3d:13:99:99:be:12:22:
         1f:a2:72:c6:8b:37:a4:f0:05:11:a3:b3:52:c8:19:ae:61:6b:
         5c:24:f9:03:39:60:0f:e6:aa:a8:3c:e3:dc:1a:32:6a:e3:ee:
         62:0e:f8:d7:99:dd:83:b3:8a:6d:0d:41:d5:40:0a:a0:ba:a8:
         d2:cb:db:61:1c:db:52:15:1f:9b:9b:ff:ab:e9:8b:11:7b:60:
         e9:a1:a4:cf:42:3c:8d:f0:f9:87:bf:90:ef:e9:af:52:11:0d:
         bf:a6:d4:a5:38:cd:2a:e2:c4:c1:91:a1:12:2f:5f:a5:4a:42:
         78:d8:33:ab:b3:f4:a9:99:18:80:92:fe:b5:d8:e2:cd:64:19:
         54:26:a8:b6:c1:a6:e9:2e:ee:35:49:b6:77:d7:07:48:b3:12:
         d1:55:9a:34:c6:12:f4:32:c8:38:be:94:9e:7e:f1:7c:5d:f8:
         50:56:f7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:27 2025 by rpki-client