Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/34352e3232342e35322e302f32322d3234203d3e203532333237.roa
File:                     34352e3232342e35322e302f32322d3234203d3e203532333237.roa (raw, json)
Hash identifier:          XCpLzTgjUcKT9zJs7aINeWvMrnyJCXpMD2VLmxfPxYg=
Subject key identifier:   44:20:D3:7C:E5:23:09:4F:02:3B:38:E0:F3:11:4F:DF:62:82:83:06
Certificate issuer:       /CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
Certificate serial:       0AEAFB6F7AAB51395077C0D44579842EEA22D8C2
Authority key identifier: 1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/34352e3232342e35322e302f32322d3234203d3e203532333237.roa
Signing time:             Tue 04 Feb 2025 18:39:46 +0000
ROA not before:           Tue 04 Feb 2025 18:34:46 +0000
ROA not after:            Tue 03 Feb 2026 18:39:46 +0000
asID:                     52327
IP address blocks:        45.224.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ea:fb:6f:7a:ab:51:39:50:77:c0:d4:45:79:84:2e:ea:22:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF21857EA288ABC3D5018816284FC74ED1A1CCC
        Validity
            Not Before: Feb  4 18:34:46 2025 GMT
            Not After : Feb  3 18:39:46 2026 GMT
        Subject: CN=4420D37CE523094F023B38E0F3114FDF62828306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:28:64:41:57:e5:cf:26:de:24:96:8f:8f:
                    f7:18:b0:2e:a4:df:63:38:fe:5f:3b:20:e9:45:69:
                    68:39:b0:7a:df:65:b3:be:3c:b2:7e:01:33:1b:41:
                    6b:e3:f1:77:c4:c0:7c:c6:19:95:b1:b6:92:03:1b:
                    8b:8f:43:51:25:4f:0a:e7:a3:bb:a7:23:fc:6d:79:
                    b1:d8:25:7a:9c:30:7f:60:e9:ce:49:e8:62:2b:01:
                    9d:de:0c:97:1f:07:d3:7e:8a:14:37:4b:c2:b3:70:
                    92:1e:5b:4e:e9:1c:3e:85:38:67:96:3a:2e:1c:46:
                    ab:85:f3:48:60:24:7d:6f:ee:05:aa:aa:17:1b:0c:
                    05:a2:12:45:2a:4a:46:ab:48:8d:10:86:88:0a:26:
                    0b:9d:b5:d2:6a:39:9a:f3:71:83:31:24:99:45:5f:
                    6a:32:62:cc:58:6f:bc:5f:4b:ee:e2:a8:54:00:a4:
                    a0:ec:a1:db:87:a6:c3:a4:ab:33:b9:7f:8c:0d:b4:
                    ae:10:5b:41:10:f8:90:ea:33:9b:f5:35:06:dd:e2:
                    68:93:3a:9f:95:c3:b8:39:8c:38:53:0a:9f:eb:ad:
                    f1:ce:d0:6b:42:e2:37:33:74:b4:4b:82:c0:0d:e6:
                    29:ec:82:72:92:8a:c3:c2:f7:a0:74:41:f5:b2:5a:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:20:D3:7C:E5:23:09:4F:02:3B:38:E0:F3:11:4F:DF:62:82:83:06
            X509v3 Authority Key Identifier:
                keyid:1F:F2:18:57:EA:28:8A:BC:3D:50:18:81:62:84:FC:74:ED:1A:1C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FF21857EA288ABC3D5018816284FC74ED1A1CCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DFE6CDC7E766B98D80C28F25199F10970DD8987334F8EDB0B9D232DC5206854B/0/34352e3232342e35322e302f32322d3234203d3e203532333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:39:7a:58:ab:13:e5:00:cf:a6:2e:dc:98:7a:8e:71:01:
         84:d6:a1:a7:cc:d3:05:bf:b5:cf:e4:22:f4:0f:b8:c2:28:12:
         fc:f2:78:cf:df:db:d3:e2:ec:1f:0e:be:94:dd:ce:54:bc:64:
         79:05:18:64:52:95:4b:85:2e:13:1d:e0:77:22:49:7d:57:38:
         ab:aa:6b:9b:06:3c:fe:97:8f:67:ae:3f:79:47:6f:16:75:43:
         27:91:5b:3a:b9:4b:af:66:b5:1a:44:a7:b7:a2:7b:d6:a9:a0:
         1d:88:bc:da:2a:d4:c3:b9:b4:0a:b0:c9:ed:29:3f:e0:54:b1:
         51:f1:be:6f:1b:ff:de:1d:9a:2e:36:ed:0f:59:69:3d:26:b1:
         fd:11:91:21:ff:06:7c:71:01:57:45:13:91:d1:54:7d:07:77:
         11:27:29:37:f3:75:a8:39:29:28:3f:97:4b:5f:e5:56:62:c4:
         88:5c:33:e4:b1:2d:fa:f7:a0:75:a9:dc:de:b2:a8:b3:ce:a0:
         2b:7c:6c:b7:cf:7d:41:c6:a6:72:78:41:a4:1e:40:0b:0c:11:
         7a:4b:54:34:91:92:29:63:93:61:20:8c:c4:b9:c2:e5:47:f7:
         c2:34:4c:38:17:7b:5e:a6:f5:9f:70:07:ae:51:13:12:2f:39:
         f2:99:2e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----