Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa
File:                     34352e3233322e3130362e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier:          r5kSIDS+3JgeliMXw2MSC2o+MPmW9pUHfJyKLs+mQI4=
Subject key identifier:   D4:A5:AF:0E:1B:CE:A8:7D:54:0F:CE:24:22:B4:97:3D:B6:80:3B:4C
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       6C82FF08AF685D0C552C9C5201D6DEA57A3070B1
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:03 +0000
ROA not before:           Tue 04 Feb 2025 18:01:03 +0000
ROA not after:            Tue 03 Feb 2026 18:06:03 +0000
asID:                     27843
IP address blocks:        45.232.106.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:82:ff:08:af:68:5d:0c:55:2c:9c:52:01:d6:de:a5:7a:30:70:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:03 2025 GMT
            Not After : Feb  3 18:06:03 2026 GMT
        Subject: CN=D4A5AF0E1BCEA87D540FCE2422B4973DB6803B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:ef:1a:22:0a:13:8e:d5:d9:01:8a:97:bf:
                    2b:06:45:bd:6a:26:e4:8a:be:3f:fe:14:bb:9d:58:
                    1a:71:90:f8:4e:3d:f4:ed:82:0c:9f:fd:37:a9:f5:
                    a9:5f:d0:7e:7c:7b:76:a3:43:5c:2c:89:2f:b3:28:
                    71:1e:f0:49:f7:09:e6:12:3d:d8:04:18:2f:3e:68:
                    b4:e5:67:5a:80:ac:0c:6c:55:74:fb:10:24:c9:ed:
                    66:79:e0:df:65:df:12:fa:29:89:e9:1f:73:b7:c9:
                    35:75:23:ab:b7:8b:39:64:4d:42:0b:09:e4:40:09:
                    2d:ea:1c:17:b6:3e:d9:32:5f:86:c2:68:15:22:bc:
                    f2:5d:f3:0b:2a:74:85:fc:7e:f6:5b:a2:8c:8a:b7:
                    ec:16:05:6e:42:a1:ef:fe:b2:5f:36:3e:c3:05:0c:
                    3a:b0:12:9f:6d:27:50:2e:b2:8f:61:8a:9e:58:98:
                    15:ce:b2:ea:e4:a2:2d:94:58:5c:cc:e2:7e:1a:6d:
                    6d:9d:74:00:0d:c2:c2:e3:b4:9c:27:d9:fb:54:cf:
                    72:6f:39:21:f4:b0:dc:95:20:65:2d:5d:06:77:fc:
                    8e:f1:b3:4c:58:68:56:65:58:58:42:40:d1:1f:24:
                    f7:f6:a8:07:d2:29:93:26:34:91:60:16:ed:c5:d5:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A5:AF:0E:1B:CE:A8:7D:54:0F:CE:24:22:B4:97:3D:B6:80:3B:4C
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/34352e3233322e3130362e302f32332d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:a6:d5:65:db:9c:56:0a:f2:70:a3:84:08:f6:a7:71:d2:
         17:fb:66:b0:10:68:d8:e1:e7:37:92:fb:b4:89:67:a7:7d:b4:
         e4:18:37:19:01:14:c0:ae:3e:ea:21:d2:d8:ac:f2:0a:ee:71:
         cf:5b:d2:58:44:e2:84:d8:0d:af:18:f9:1c:e4:b2:22:ff:9c:
         ee:3c:00:4d:d1:21:03:71:4d:79:d4:fa:a1:3d:4b:88:3c:4f:
         92:64:e0:08:70:c1:87:65:5e:95:42:76:29:50:90:3e:10:7f:
         94:c9:d8:7e:13:05:ee:ec:22:af:7a:e3:04:8c:dd:ce:62:55:
         32:d7:d0:6a:a0:c0:49:85:ea:54:d6:96:43:34:13:01:4e:3b:
         b1:3b:69:0b:37:94:c7:3e:6d:16:fa:0a:92:50:3a:5a:a7:d0:
         de:fd:86:79:5e:a7:72:2f:d9:ed:e1:fe:ea:ca:07:61:d9:b5:
         f0:c7:87:0c:ee:e6:08:26:44:ec:5e:e0:d6:f1:c5:ba:b2:7d:
         e1:06:96:ae:08:12:eb:5d:d4:e3:73:e9:1a:f3:de:01:69:c6:
         4a:f3:88:6b:e1:1e:a5:43:60:51:72:d5:b3:b9:79:e4:53:cc:
         84:03:91:44:54:a8:97:29:72:33:f6:9a:70:c1:23:1b:c5:36:
         ff:df:7f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----