Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/34352e37312e352e302f32342d3234203d3e20323635383834.roa
File:                     34352e37312e352e302f32342d3234203d3e20323635383834.roa (raw, json)
Hash identifier:          axxgrXP2UbmcXRR4ncHWT/2BjBWDNtV6W7b0nwI/7jI=
Subject key identifier:   20:56:E0:25:E3:4C:13:04:D7:A3:DC:6C:E2:C8:11:A5:B0:C3:F4:C6
Certificate issuer:       /CN=2DEA145BF0F50E2678120C8945C5EB4082ED0C02
Certificate serial:       3F6682BDF2F216ECD4A37A274494DBFFABEFAA65
Authority key identifier: 2D:EA:14:5B:F0:F5:0E:26:78:12:0C:89:45:C5:EB:40:82:ED:0C:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/34352e37312e352e302f32342d3234203d3e20323635383834.roa
Signing time:             Tue 04 Feb 2025 18:46:20 +0000
ROA not before:           Tue 04 Feb 2025 18:41:20 +0000
ROA not after:            Tue 03 Feb 2026 18:46:20 +0000
asID:                     265884
IP address blocks:        45.71.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:66:82:bd:f2:f2:16:ec:d4:a3:7a:27:44:94:db:ff:ab:ef:aa:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DEA145BF0F50E2678120C8945C5EB4082ED0C02
        Validity
            Not Before: Feb  4 18:41:20 2025 GMT
            Not After : Feb  3 18:46:20 2026 GMT
        Subject: CN=2056E025E34C1304D7A3DC6CE2C811A5B0C3F4C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:10:56:3d:3f:8c:da:fc:20:a2:96:90:cb:
                    2c:d0:61:39:28:0b:df:f2:ab:16:3e:ae:55:81:d7:
                    ae:65:fa:6f:22:14:2c:a7:ef:b8:f0:12:51:c8:7e:
                    1f:16:f8:e0:81:aa:68:3a:15:ac:d9:bc:26:e1:99:
                    d0:56:b1:3e:c3:c6:c7:bf:b4:8c:99:47:6f:c4:45:
                    48:12:96:b9:a6:9c:b0:ad:fa:7b:6e:ee:24:8d:ef:
                    d4:3d:66:01:ce:4e:62:ef:ab:4d:df:64:c6:6b:ae:
                    cc:cf:dc:00:09:61:cb:6e:80:fa:a0:95:d7:43:53:
                    d3:c0:5e:e5:b9:20:3a:61:1b:a2:ee:f3:be:2b:81:
                    a1:1b:be:87:93:f4:82:50:10:bf:d4:f0:22:24:e3:
                    00:9c:82:25:b8:04:e1:1f:74:c9:2e:f5:63:1b:07:
                    4f:8e:ba:a2:bd:4f:f8:93:00:7f:c1:d3:25:3f:69:
                    df:32:76:c4:31:74:d9:ed:52:b3:47:9d:4c:25:cf:
                    8d:60:cf:52:40:77:33:1e:20:70:93:4b:cf:5e:d7:
                    ec:c1:fb:c1:4f:af:55:ea:67:1b:e4:d7:b5:28:8c:
                    2b:23:e7:d2:14:fc:54:8b:68:92:6d:59:b2:91:93:
                    67:08:a7:ac:b6:e6:b9:82:2e:cd:55:1b:da:66:de:
                    74:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:56:E0:25:E3:4C:13:04:D7:A3:DC:6C:E2:C8:11:A5:B0:C3:F4:C6
            X509v3 Authority Key Identifier:
                keyid:2D:EA:14:5B:F0:F5:0E:26:78:12:0C:89:45:C5:EB:40:82:ED:0C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2DEA145BF0F50E2678120C8945C5EB4082ED0C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7C1CBEFC75E34284CF1D19B83611EE23094A1B53115237FD2F3FA2BAE1B1D57/0/34352e37312e352e302f32342d3234203d3e20323635383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:94:c3:7b:84:ed:7f:dd:01:1f:39:0e:99:b2:03:08:0e:ef:
         23:f8:a7:cf:9c:85:64:02:1d:e4:85:eb:52:e1:f0:69:23:a9:
         8a:00:43:1e:f0:21:1c:3f:43:a7:07:1b:82:7c:62:52:9c:1b:
         c5:47:04:0f:ec:e9:33:5a:9e:46:2c:a2:24:49:d4:2c:bf:f7:
         f9:cf:93:8e:d0:ba:4c:5a:cf:0f:5f:e7:55:67:2b:50:87:c8:
         61:9b:6c:7b:f8:64:33:44:d9:8d:4d:3d:63:d4:65:9a:b9:71:
         51:9a:01:f7:de:4c:65:d7:9e:ee:83:ba:62:a4:db:07:a2:8f:
         43:77:ba:0d:55:30:a5:d6:2a:db:03:db:e8:02:6a:09:56:8f:
         9a:83:3b:98:24:9e:c5:74:24:1d:0d:bf:c1:6a:08:9b:c0:0a:
         91:70:af:4c:3d:1b:e5:47:28:be:1e:2f:3e:0e:40:c0:c4:b8:
         2e:b9:45:99:15:3e:79:1a:f3:48:8c:b3:71:c8:e3:18:30:f3:
         98:71:b1:15:90:09:12:e2:87:60:4c:10:b7:ff:82:70:9d:32:
         71:50:66:71:4a:42:f5:47:74:2a:91:42:ea:0e:a6:8b:11:83:
         6d:88:15:e7:56:8d:6a:1c:b1:e8:41:b1:73:10:18:cf:06:b6:
         26:ce:e4:db
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUP2aCvfLyFuzUo3onRJTb/6vvqmUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRFQTE0NUJGMEY1MEUyNjc4MTIwQzg5NDVDNUVCNDA4
MkVEMEMwMjAeFw0yNTAyMDQxODQxMjBaFw0yNjAyMDMxODQ2MjBaMDMxMTAvBgNV
BAMTKDIwNTZFMDI1RTM0QzEzMDREN0EzREM2Q0UyQzgxMUE1QjBDM0Y0QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkNBBWPT+M2vwgopaQyyzQYTko
C9/yqxY+rlWB165l+m8iFCyn77jwElHIfh8W+OCBqmg6FazZvCbhmdBWsT7Dxse/
tIyZR2/ERUgSlrmmnLCt+ntu7iSN79Q9ZgHOTmLvq03fZMZrrszP3AAJYctugPqg
lddDU9PAXuW5IDphG6Lu874rgaEbvoeT9IJQEL/U8CIk4wCcgiW4BOEfdMku9WMb
B0+OuqK9T/iTAH/B0yU/ad8ydsQxdNntUrNHnUwlz41gz1JAdzMeIHCTS89e1+zB
+8FPr1XqZxvk17UojCsj59IU/FSLaJJtWbKRk2cIp6y25rmCLs1VG9pm3nQhAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUIFbgJeNMEwTXo9xs4sgRpbDD9MYwHwYDVR0j
BBgwFoAULeoUW/D1DiZ4EgyJRcXrQILtDAIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FN0MxQ0JFRkM3NUUzNDI4NENGMUQxOUI4MzYxMUVFMjMw
OTRBMUI1MzExNTIzN0ZEMkYzRkEyQkFFMUIxRDU3LzAvMkRFQTE0NUJGMEY1MEUy
Njc4MTIwQzg5NDVDNUVCNDA4MkVEMEMwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yREVBMTQ1QkYwRjUwRTI2Nzgx
MjBDODk0NUM1RUI0MDgyRUQwQzAyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTdDMUNCRUZDNzVFMzQyODRDRjFEMTlCODM2MTFFRTIzMDk0QTFCNTMx
MTUyMzdGRDJGM0ZBMkJBRTFCMUQ1Ny8wLzM0MzUyZTM3MzEyZTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUcFMA0GCSqG
SIb3DQEBCwUAA4IBAQB+lMN7hO1/3QEfOQ6ZsgMIDu8j+KfPnIVkAh3khetS4fBp
I6mKAEMe8CEcP0OnBxuCfGJSnBvFRwQP7OkzWp5GLKIkSdQsv/f5z5OO0LpMWs8P
X+dVZytQh8hhm2x7+GQzRNmNTT1j1GWauXFRmgH33kxl157ug7pipNsHoo9Dd7oN
VTCl1irbA9voAmoJVo+agzuYJJ7FdCQdDb/BagibwAqRcK9MPRvlRyi+Hi8+DkDA
xLguuUWZFT55GvNIjLNxyOMYMPOYcbEVkAkS4odgTBC3/4JwnTJxUGZxSkL1R3Qq
kULqDqaLEYNtiBXnVo1qHLHoQbFzEBjPBrYmzuTb
-----END CERTIFICATE-----