Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABC75B98D878FD0382CC4E011F61F95A91ABEE9BA8863A37582F21ADB91AA705/0/34352e3233322e3136342e302f32322d3234203d3e20323636373539.roa
File:                     34352e3233322e3136342e302f32322d3234203d3e20323636373539.roa (raw, json)
Hash identifier:          DmeJYPR0rgCEfJc20cSLAWhFCHDkiwqRMk2T4rjRI/E=
Subject key identifier:   66:EC:52:6E:D6:9B:23:80:21:21:06:40:31:48:1F:57:11:95:0F:7F
Certificate issuer:       /CN=9D90FCFF0E4010B6A6F3CE436D90606B031E1202
Certificate serial:       6F1DF9C7B537C2F8F9C17633AB849FAC26E910CB
Authority key identifier: 9D:90:FC:FF:0E:40:10:B6:A6:F3:CE:43:6D:90:60:6B:03:1E:12:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D90FCFF0E4010B6A6F3CE436D90606B031E1202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABC75B98D878FD0382CC4E011F61F95A91ABEE9BA8863A37582F21ADB91AA705/0/34352e3233322e3136342e302f32322d3234203d3e20323636373539.roa
Signing time:             Tue 04 Feb 2025 18:50:14 +0000
ROA not before:           Tue 04 Feb 2025 18:45:14 +0000
ROA not after:            Tue 03 Feb 2026 18:50:14 +0000
asID:                     266759
IP address blocks:        45.232.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1d:f9:c7:b5:37:c2:f8:f9:c1:76:33:ab:84:9f:ac:26:e9:10:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D90FCFF0E4010B6A6F3CE436D90606B031E1202
        Validity
            Not Before: Feb  4 18:45:14 2025 GMT
            Not After : Feb  3 18:50:14 2026 GMT
        Subject: CN=66EC526ED69B23802121064031481F5711950F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:5f:2c:9f:4f:c3:8e:30:6e:6f:a6:7e:f0:
                    d5:03:0d:fb:de:70:78:7b:09:30:0d:66:a5:28:59:
                    16:36:a7:0e:f9:c8:98:51:47:4f:76:80:51:c9:98:
                    2b:32:d5:4d:0f:d5:d0:8b:5e:78:2a:aa:91:bc:d1:
                    83:9b:de:78:65:20:40:70:bb:4b:b5:db:97:df:7c:
                    f1:d4:d1:1d:bd:89:cb:d7:e4:10:05:d5:af:cc:10:
                    da:28:07:66:c3:2b:d1:8b:a1:5d:9e:f5:d4:24:2a:
                    a3:ec:2a:2e:6d:66:14:72:6a:27:6a:9e:39:b9:73:
                    a8:d7:a4:b9:df:e3:d4:5b:39:a3:5f:14:f3:c4:35:
                    a2:9b:41:6c:ac:94:96:93:07:db:0f:ba:cb:9d:60:
                    a1:d7:cf:ba:14:05:f9:84:2e:41:f5:a9:47:94:b9:
                    81:9b:68:68:b0:c9:5c:21:83:05:b0:02:a9:15:c7:
                    ab:dd:df:e4:24:a2:ff:c3:a3:94:6f:80:1e:72:9d:
                    55:35:3c:18:08:32:60:7c:8c:ca:b9:a4:df:de:be:
                    9f:0d:d8:ed:3c:47:83:a8:94:2a:a0:20:1e:6d:b9:
                    c4:60:20:fe:6f:92:44:40:05:ed:d3:13:fd:1d:b9:
                    e2:8c:22:0a:0f:8f:88:5c:17:8c:27:42:08:ff:a4:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EC:52:6E:D6:9B:23:80:21:21:06:40:31:48:1F:57:11:95:0F:7F
            X509v3 Authority Key Identifier:
                keyid:9D:90:FC:FF:0E:40:10:B6:A6:F3:CE:43:6D:90:60:6B:03:1E:12:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABC75B98D878FD0382CC4E011F61F95A91ABEE9BA8863A37582F21ADB91AA705/0/9D90FCFF0E4010B6A6F3CE436D90606B031E1202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9D90FCFF0E4010B6A6F3CE436D90606B031E1202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABC75B98D878FD0382CC4E011F61F95A91ABEE9BA8863A37582F21ADB91AA705/0/34352e3233322e3136342e302f32322d3234203d3e20323636373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:16:10:dc:d5:23:ed:62:f0:a5:15:c3:f9:f1:3d:2d:a8:7d:
         01:f3:29:de:be:f0:96:a8:3d:3e:64:9f:7f:5d:d7:1d:53:69:
         20:9a:96:32:79:96:ca:b0:00:c4:6f:83:c1:f7:64:f5:d8:95:
         c2:43:c7:77:20:96:bd:09:af:d8:b0:bc:60:ec:95:82:2f:64:
         6d:c5:b4:be:78:e4:4d:a6:0d:3c:c5:f9:34:b7:33:86:60:44:
         01:47:c9:d8:02:5e:23:91:04:d0:ce:27:73:e7:98:66:af:ec:
         2f:57:05:0b:a2:9a:5e:e0:b7:29:52:21:6d:b1:95:43:9b:66:
         1e:6b:47:18:07:f7:7a:99:a7:8f:80:3e:82:c7:1e:90:04:d8:
         57:b5:2f:e0:40:68:3c:16:d0:d5:8b:90:46:1c:4f:0e:0c:50:
         49:10:ad:56:16:29:44:ca:5b:fb:0b:16:0a:12:ac:2f:ac:e5:
         f4:9b:8f:61:70:cf:e5:93:36:65:b8:b4:89:c0:c7:e0:0f:7a:
         e5:1f:c1:b2:10:6c:c5:9e:ef:75:45:72:f9:d1:08:8d:57:75:
         89:6a:7a:a2:8d:65:7b:77:d7:ff:d2:0f:3b:f4:45:f4:47:3f:
         84:4c:8c:19:d5:a2:07:b5:0d:6f:e1:a5:d0:50:a1:31:bb:b4:
         77:e8:e8:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbx35x7U3wvj5wXYzq4SfrCbpEMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5MEZDRkYwRTQwMTBCNkE2RjNDRTQzNkQ5MDYwNkIw
MzFFMTIwMjAeFw0yNTAyMDQxODQ1MTRaFw0yNjAyMDMxODUwMTRaMDMxMTAvBgNV
BAMTKDY2RUM1MjZFRDY5QjIzODAyMTIxMDY0MDMxNDgxRjU3MTE5NTBGN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAV8sn0/DjjBub6Z+8NUDDfve
cHh7CTANZqUoWRY2pw75yJhRR092gFHJmCsy1U0P1dCLXngqqpG80YOb3nhlIEBw
u0u125fffPHU0R29icvX5BAF1a/MENooB2bDK9GLoV2e9dQkKqPsKi5tZhRyaidq
njm5c6jXpLnf49RbOaNfFPPENaKbQWyslJaTB9sPusudYKHXz7oUBfmELkH1qUeU
uYGbaGiwyVwhgwWwAqkVx6vd3+Qkov/Do5RvgB5ynVU1PBgIMmB8jMq5pN/evp8N
2O08R4OolCqgIB5tucRgIP5vkkRABe3TE/0dueKMIgoPj4hcF4wnQgj/pNrTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZuxSbtabI4AhIQZAMUgfVxGVD38wHwYDVR0j
BBgwFoAUnZD8/w5AELam885DbZBgawMeEgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BQkM3NUI5OEQ4NzhGRDAzODJDQzRFMDExRjYxRjk1QTkx
QUJFRTlCQTg4NjNBMzc1ODJGMjFBREI5MUFBNzA1LzAvOUQ5MEZDRkYwRTQwMTBC
NkE2RjNDRTQzNkQ5MDYwNkIwMzFFMTIwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RDkwRkNGRjBFNDAxMEI2QTZG
M0NFNDM2RDkwNjA2QjAzMUUxMjAyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUJDNzVCOThEODc4RkQwMzgyQ0M0RTAxMUY2MUY5NUE5MUFCRUU5QkE4
ODYzQTM3NTgyRjIxQURCOTFBQTcwNS8wLzM0MzUyZTMyMzMzMjJlMzEzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzczNTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeik
MA0GCSqGSIb3DQEBCwUAA4IBAQATFhDc1SPtYvClFcP58T0tqH0B8ynevvCWqD0+
ZJ9/XdcdU2kgmpYyeZbKsADEb4PB92T12JXCQ8d3IJa9Ca/YsLxg7JWCL2RtxbS+
eORNpg08xfk0tzOGYEQBR8nYAl4jkQTQzidz55hmr+wvVwULoppe4LcpUiFtsZVD
m2Yea0cYB/d6maePgD6Cxx6QBNhXtS/gQGg8FtDVi5BGHE8ODFBJEK1WFilEylv7
CxYKEqwvrOX0m49hcM/lkzZluLSJwMfgD3rlH8GyEGzFnu91RXL50QiNV3WJanqi
jWV7d9f/0g879EX0Rz+ETIwZ1aIHtQ1v4aXQUKExu7R36Ogt
-----END CERTIFICATE-----