Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa
File:                     34352e3136322e36302e302f32332d3234203d3e20323637363739.roa (raw, json)
Hash identifier:          04r0aYcgUAItm/Ek+HHn7So65HxpuINIA/vHixmZu+4=
Subject key identifier:   64:EA:D4:D7:D7:5B:93:BE:23:FF:70:B1:FA:A8:F6:62:E2:6F:F8:9E
Certificate issuer:       /CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
Certificate serial:       539C594B548845C3FDAC377EA38417E315D6385F
Authority key identifier: 11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa
Signing time:             Tue 04 Feb 2025 18:33:46 +0000
ROA not before:           Tue 04 Feb 2025 18:28:46 +0000
ROA not after:            Tue 03 Feb 2026 18:33:46 +0000
asID:                     267679
IP address blocks:        45.162.60.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:59:4b:54:88:45:c3:fd:ac:37:7e:a3:84:17:e3:15:d6:38:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795
        Validity
            Not Before: Feb  4 18:28:46 2025 GMT
            Not After : Feb  3 18:33:46 2026 GMT
        Subject: CN=64EAD4D7D75B93BE23FF70B1FAA8F662E26FF89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:69:f9:10:5d:e2:cf:a1:bb:c6:9c:74:6e:0e:
                    79:db:3f:d5:78:f7:ce:90:e8:93:c2:15:fc:ce:01:
                    00:52:1e:a8:95:fa:ad:62:78:bc:c8:e8:9f:ad:5d:
                    a6:bf:c4:62:bf:f3:2c:82:8a:8b:0a:98:8b:c6:3c:
                    b8:6e:39:5f:ee:47:1b:b1:65:12:93:4a:2c:bc:cd:
                    cd:6c:51:54:ea:10:fb:85:85:62:a4:6f:81:ba:db:
                    ad:16:d4:7f:7e:2a:19:6b:0c:37:f5:d5:ab:93:aa:
                    3e:b7:95:57:4a:7d:f5:5a:f4:8c:b8:5f:d5:f3:14:
                    31:f1:b1:58:90:65:98:69:b4:18:e5:04:a0:3d:83:
                    86:2d:11:27:00:13:4a:29:e1:28:6e:48:4d:1b:96:
                    61:7d:a5:a5:fc:16:2d:c3:54:96:3d:d4:70:2b:1f:
                    44:14:59:3f:89:a2:92:c0:fd:ae:7e:14:42:16:8d:
                    76:ba:78:01:1c:04:1a:ad:df:21:a9:0c:aa:68:4b:
                    72:d1:fc:d0:d2:1f:2b:71:8d:ce:9d:38:69:f8:35:
                    fa:c6:de:d9:ab:79:fa:57:c5:8d:8d:ea:a7:46:42:
                    8e:79:c3:ae:88:69:dd:e9:b0:0d:40:94:ad:21:38:
                    cb:78:76:b4:96:98:f5:63:a5:df:0b:54:a0:a1:80:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:D4:D7:D7:5B:93:BE:23:FF:70:B1:FA:A8:F6:62:E2:6F:F8:9E
            X509v3 Authority Key Identifier:
                keyid:11:C8:44:BF:5D:63:47:E3:DB:9F:44:B8:C3:EF:AC:1F:14:99:B7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11C844BF5D6347E3DB9F44B8C3EFAC1F1499B795.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B365A22F7894A2132ED3847D4085798E3711EC53AD6FCE7B8C050B24E8329276/0/34352e3136322e36302e302f32332d3234203d3e20323637363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:83:1c:56:8b:d9:04:9c:9c:ad:b8:0d:da:e4:55:57:59:06:
         52:e7:98:a1:f9:14:c1:a7:1c:c7:30:90:ee:53:0b:61:b2:24:
         d0:6b:b1:4f:d8:55:ce:76:fe:af:ad:55:dd:11:c5:e9:21:04:
         cf:09:58:8b:1a:d5:46:be:21:c4:3c:01:af:d5:c4:2b:20:82:
         c1:ff:46:23:96:54:cd:cc:d1:79:87:01:18:97:4d:a3:b8:3b:
         b3:c2:8b:7d:bc:22:6a:42:ba:50:82:1c:1c:df:79:49:07:65:
         3f:3e:34:96:8e:ab:68:26:60:9b:83:d7:a9:ef:4c:1f:31:f4:
         50:cd:8d:a3:00:c8:e9:85:5d:96:47:ca:a8:c5:8a:c7:4d:b8:
         2c:be:44:8b:66:ac:65:10:d5:e5:75:94:c8:20:d1:db:20:8d:
         be:0c:08:88:0b:04:49:11:39:f4:a0:30:f2:ce:c1:42:a5:ea:
         30:65:7f:7b:f8:d9:40:5a:ac:62:d0:7c:c9:e7:d9:df:d3:4b:
         a3:7c:0e:b7:55:c3:44:62:63:16:2b:c2:65:ab:62:4c:5a:70:
         0f:c3:53:de:f8:7b:e6:04:bf:06:2e:5a:dd:3c:52:0b:1f:19:
         48:48:df:d9:2e:ac:6e:54:e2:87:c3:3e:90:e3:f2:d5:d4:ed:
         a5:34:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:59 2025 by rpki-client