Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3234203d3e20323632323334.roa
File:                     34352e342e38342e302f32322d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          twEy7bdoo/l2wo/YsooQws+LT6ZY72YfOsxQVx1fYkY=
Subject key identifier:   33:81:CD:71:CF:E5:2E:F6:29:F9:EA:6A:98:3F:17:30:7F:C1:03:27
Certificate issuer:       /CN=4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658
Certificate serial:       50AD882C168813944D34B67A8203E3A696170E63
Authority key identifier: 4E:56:D1:3A:FF:B6:D3:35:35:BA:82:AE:BB:1E:C9:AB:F8:95:56:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3234203d3e20323632323334.roa
Signing time:             Tue 04 Feb 2025 20:05:33 +0000
ROA not before:           Tue 04 Feb 2025 20:00:33 +0000
ROA not after:            Tue 03 Feb 2026 20:05:33 +0000
asID:                     262234
IP address blocks:        45.4.84.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ad:88:2c:16:88:13:94:4d:34:b6:7a:82:03:e3:a6:96:17:0e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658
        Validity
            Not Before: Feb  4 20:00:33 2025 GMT
            Not After : Feb  3 20:05:33 2026 GMT
        Subject: CN=3381CD71CFE52EF629F9EA6A983F17307FC10327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:df:0d:84:ac:11:17:03:70:7e:f9:de:05:
                    b9:80:d3:5f:0a:60:2a:00:d8:9b:e7:23:57:48:99:
                    32:97:c1:2f:9e:d8:8a:92:70:a7:1f:72:e2:1b:e0:
                    3c:94:3a:1e:29:ae:7c:5b:ab:cb:d4:4f:72:33:22:
                    21:88:43:33:f7:d0:f2:61:65:6d:87:0a:7d:a4:24:
                    b0:3c:81:b1:7f:2a:69:f3:da:0f:49:44:c5:5d:74:
                    78:22:62:e1:3b:99:03:ef:f9:c3:de:43:d7:a0:db:
                    5e:45:15:0a:8c:d1:b0:8a:48:ef:6a:03:c3:95:0c:
                    50:b5:4d:c7:1b:dc:da:e1:0b:46:3d:61:4f:3d:ba:
                    00:c2:bd:02:b3:83:2d:fc:8c:05:32:62:ab:a4:fb:
                    b4:ac:b2:e3:9f:5f:07:34:d4:f5:9f:98:25:99:2d:
                    18:02:ad:b7:e9:06:f7:65:25:25:90:e6:67:65:df:
                    7a:55:7a:84:07:aa:0b:fe:44:44:d5:f9:e0:92:7d:
                    0e:db:dd:5a:6d:c0:77:a6:1e:f7:81:30:8c:82:73:
                    de:7e:14:bb:71:86:ff:28:77:4b:d4:44:52:0c:c2:
                    1c:5f:19:08:15:56:f5:14:5d:8a:33:69:2c:97:ee:
                    f6:e1:d1:47:38:17:f5:8d:73:d2:e3:c6:24:5e:6a:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:81:CD:71:CF:E5:2E:F6:29:F9:EA:6A:98:3F:17:30:7F:C1:03:27
            X509v3 Authority Key Identifier:
                keyid:4E:56:D1:3A:FF:B6:D3:35:35:BA:82:AE:BB:1E:C9:AB:F8:95:56:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E56D13AFFB6D33535BA82AEBB1EC9ABF8955658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9ACDE3AC52B046994745D659009D8070C20B635BD7A480A773D692EA9908D42/0/34352e342e38342e302f32322d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:26:1d:13:4d:b2:2e:53:f3:a6:3a:47:d5:6a:45:ed:8b:64:
         8a:6f:8a:9a:db:a4:64:8d:44:79:25:3e:95:7a:5f:d0:38:b8:
         48:e3:36:fc:f5:73:84:ec:e7:0b:3d:99:4b:80:11:6d:26:41:
         3d:31:1a:af:6b:ce:2f:82:2e:87:5f:9f:24:eb:b4:fd:02:61:
         a2:c9:82:f7:ee:19:f1:f0:05:eb:e8:72:3f:57:f3:40:72:c7:
         2c:b0:a5:16:e8:7e:2b:68:82:98:a0:d3:2f:ad:14:0c:67:4e:
         f9:97:8e:ad:2a:34:ad:6c:ab:b8:a2:d5:ee:f3:d3:7c:62:c8:
         bd:52:a9:78:6f:d3:74:77:59:3f:fb:23:d8:61:e5:5b:db:e6:
         8b:d8:d8:aa:2b:1e:2e:94:b3:07:4a:fb:02:bb:ba:8f:2f:15:
         ce:6e:d8:e9:89:e2:4d:e7:13:a3:fb:8d:d6:f5:d0:b4:eb:43:
         5d:a3:18:62:75:b7:d1:ab:b3:9d:dd:77:68:a5:83:ae:3d:eb:
         d6:d2:0d:c7:71:b3:a6:90:fe:bf:d5:d6:bb:81:f9:59:a5:15:
         a3:ac:39:40:38:31:ba:bc:26:fa:05:ec:f7:55:e6:8d:de:c0:
         7b:a2:81:84:c8:6f:a2:22:a4:81:5b:dc:98:c1:61:28:af:3d:
         62:ad:f2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:27 2025 by rpki-client