Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa
File:                     34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa (raw, json)
Hash identifier:          QRshXJxs0lURtvW/MKjoS6uw8AKnyP+6aoa8wfSrWOM=
Subject key identifier:   2E:0A:54:CC:72:1E:44:4D:74:C5:61:25:A8:34:4D:38:69:AB:7D:0E
Certificate issuer:       /CN=6EE358D5638125E1616F9AF891B9621DFB84CDB8
Certificate serial:       7B4BECD26A99986A38710617730055D655EDF925
Authority key identifier: 6E:E3:58:D5:63:81:25:E1:61:6F:9A:F8:91:B9:62:1D:FB:84:CD:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa
Signing time:             Thu 23 Jan 2025 02:30:00 +0000
ROA not before:           Thu 23 Jan 2025 02:25:00 +0000
ROA not after:            Thu 22 Jan 2026 02:30:00 +0000
asID:                     266816
IP address blocks:        45.233.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:ec:d2:6a:99:98:6a:38:71:06:17:73:00:55:d6:55:ed:f9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE358D5638125E1616F9AF891B9621DFB84CDB8
        Validity
            Not Before: Jan 23 02:25:00 2025 GMT
            Not After : Jan 22 02:30:00 2026 GMT
        Subject: CN=2E0A54CC721E444D74C56125A8344D3869AB7D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:c3:07:31:a5:60:ab:50:1e:71:ae:7d:e7:
                    c2:68:50:25:4a:9b:9c:68:2a:39:3d:88:11:53:83:
                    94:85:8d:25:e6:59:9e:24:dd:e8:a6:c0:6f:03:56:
                    2d:69:6d:67:f1:15:1a:9b:f7:03:88:e3:92:eb:a4:
                    69:27:59:98:3d:57:8a:85:48:d5:90:6f:a1:38:7c:
                    16:d4:df:04:f4:b2:f9:16:cd:08:75:3e:fa:5b:25:
                    03:b9:62:e8:e6:35:59:f5:5e:3b:e5:db:d0:71:4e:
                    46:0a:6f:2c:98:e4:bc:ac:58:d9:e4:db:0c:03:30:
                    47:1f:08:1e:62:05:94:1d:13:a7:e6:55:c5:89:dc:
                    3a:bd:e3:69:be:2d:34:07:e6:98:b3:7f:34:48:b4:
                    aa:da:e5:f7:00:14:64:09:c4:85:01:bf:e0:77:78:
                    7d:2b:3d:7a:c4:ad:c8:f5:53:03:0e:26:c2:ed:55:
                    6b:86:91:3f:cb:1b:9f:ba:73:04:ae:b9:aa:a4:1a:
                    47:d2:8a:db:a8:af:1b:30:b7:71:c1:bd:a0:04:0b:
                    d2:26:4d:49:65:e1:90:01:54:a2:5c:de:11:11:9f:
                    92:2d:8f:da:42:ca:b8:e1:23:66:df:46:37:c8:34:
                    bf:be:d6:e3:b4:40:a4:39:d7:61:95:4b:1b:be:59:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0A:54:CC:72:1E:44:4D:74:C5:61:25:A8:34:4D:38:69:AB:7D:0E
            X509v3 Authority Key Identifier:
                keyid:6E:E3:58:D5:63:81:25:E1:61:6F:9A:F8:91:B9:62:1D:FB:84:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/34352e3233332e3136382e302f32322d3234203d3e20323636383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:63:de:e0:a3:26:b8:32:28:42:c4:ec:2d:30:c2:c7:69:e3:
         b0:ba:eb:a2:dc:64:8f:d9:86:73:69:96:d4:ef:a2:b8:d5:a7:
         b0:e2:dd:ea:77:49:d1:70:65:ee:e3:ad:a3:95:1f:ea:07:c2:
         96:e1:9e:b0:bc:a5:d0:43:a7:e8:1b:69:d1:50:05:c3:73:7d:
         85:ba:d5:be:70:7a:cf:2a:53:99:93:10:51:23:09:c6:8b:bd:
         41:6d:b2:d0:cb:df:fa:ff:fd:47:c5:ea:95:0d:5c:f3:2f:bb:
         dd:da:9d:2d:a5:40:c6:d0:c5:df:82:7d:ea:2a:eb:c2:7f:6b:
         9d:10:e9:c5:7f:81:7a:a8:05:e9:f8:30:87:31:93:58:3e:10:
         f5:af:e3:25:be:c1:ed:83:0e:06:6f:0a:77:ed:74:0c:e8:79:
         03:ec:04:60:58:4a:3b:3c:71:54:1d:a8:66:d0:c7:e4:c5:81:
         2c:5a:88:6f:0c:86:30:fd:34:f3:c3:70:67:4a:41:4b:36:ea:
         a3:aa:d1:ce:ed:2f:10:e3:ef:19:1e:42:17:c4:34:22:24:ab:
         ec:5a:26:a1:1c:09:4e:24:23:30:42:fb:30:be:4e:6b:4b:8a:
         92:63:92:61:71:93:9d:49:a7:34:cb:cc:75:96:48:a0:b4:bd:
         9b:dd:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:31 2025 by rpki-client