Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/34352e3232342e3135322e302f32322d3234203d3e20323634363638.roa
File:                     34352e3232342e3135322e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          60cyzQB3uyXIyTtp0MPxKDJaP0UB+J5rjgM/SrAGXX0=
Subject key identifier:   12:CE:5E:47:C5:56:D8:DF:19:68:A2:07:FA:3F:EE:91:2B:10:55:BE
Certificate issuer:       /CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
Certificate serial:       3713CA72B4EB6467707A78FDAF7992B81C29262B
Authority key identifier: AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/34352e3232342e3135322e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:12:33 +0000
ROA not before:           Tue 04 Feb 2025 18:07:33 +0000
ROA not after:            Tue 03 Feb 2026 18:12:33 +0000
asID:                     264668
IP address blocks:        45.224.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:13:ca:72:b4:eb:64:67:70:7a:78:fd:af:79:92:b8:1c:29:26:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC4F66836F8621D5CE8015EE7A781F4C097A7F15
        Validity
            Not Before: Feb  4 18:07:33 2025 GMT
            Not After : Feb  3 18:12:33 2026 GMT
        Subject: CN=12CE5E47C556D8DF1968A207FA3FEE912B1055BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:1c:df:1b:f6:15:2d:6b:4b:e3:97:63:9a:
                    b6:86:45:a7:b1:17:4e:87:41:b0:0d:3e:80:65:ea:
                    26:34:24:5c:52:fe:9b:ac:4e:b5:b5:54:05:2c:dd:
                    d0:a0:cb:75:ea:36:64:8c:18:e3:41:63:85:fb:5c:
                    46:9d:d1:18:45:a3:43:1e:2e:fc:cd:54:41:b1:5f:
                    01:b1:a1:f9:d7:88:30:58:a5:01:97:d3:4c:30:5f:
                    18:5b:2b:21:80:9b:3d:6b:71:df:c6:ba:77:ae:d5:
                    ea:23:47:09:95:fc:11:37:16:5a:3a:8b:11:ec:fd:
                    64:57:83:45:96:87:37:94:d5:e0:12:da:9c:f7:da:
                    9a:79:82:3c:2e:45:9d:40:6b:2a:46:93:7a:d7:05:
                    76:13:09:43:cf:f5:d4:0c:fb:3f:89:12:18:11:2e:
                    80:39:32:1e:84:48:d8:b2:18:66:d6:d4:6f:97:7f:
                    07:ca:a8:17:75:74:54:88:79:e5:63:83:36:42:73:
                    98:e2:cd:60:af:19:89:2d:ec:b4:29:f8:9c:9c:ac:
                    cc:52:58:5c:19:2d:65:20:8a:07:c3:6b:3b:87:d7:
                    4a:76:fa:03:73:44:b3:1f:5b:fd:b4:05:bb:14:3c:
                    26:a7:c5:d7:eb:b9:c6:2c:f3:01:ff:cd:73:b4:42:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CE:5E:47:C5:56:D8:DF:19:68:A2:07:FA:3F:EE:91:2B:10:55:BE
            X509v3 Authority Key Identifier:
                keyid:AC:4F:66:83:6F:86:21:D5:CE:80:15:EE:7A:78:1F:4C:09:7A:7F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC4F66836F8621D5CE8015EE7A781F4C097A7F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F377EE792808ACB7B88A4E6029FB03F60F388560B82424C1A3650BE67672A8E5/0/34352e3232342e3135322e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:79:cf:ae:d8:7a:2f:f3:8d:4d:24:e4:39:56:72:c9:d3:5c:
         0b:34:69:db:ce:e6:f6:1c:6d:a6:37:9b:05:6f:ff:26:01:f3:
         63:80:5b:86:83:95:60:04:d3:48:e6:8e:00:a9:5c:d5:c0:d1:
         c6:c6:dd:ee:e6:4d:ad:bc:c3:d3:aa:28:3e:82:11:b8:59:1c:
         4b:26:64:ce:61:c4:7d:43:c3:52:da:17:6f:28:89:e0:60:20:
         a6:08:55:ae:66:82:23:98:f9:21:19:bd:47:bf:b7:69:8e:44:
         c7:c2:1e:99:19:32:d0:b0:00:06:ae:f0:4a:9f:7b:17:ad:3d:
         39:1e:4b:8d:c2:60:38:7b:59:d0:28:4f:a7:c5:c7:2c:f1:aa:
         cb:30:92:50:82:54:29:8f:c0:c1:a7:59:47:3f:fc:58:49:a6:
         4a:ce:86:68:05:4f:91:c4:9a:4f:7b:20:0f:cd:ee:d2:fb:ff:
         ce:dd:04:f1:91:fb:72:85:40:63:fe:4d:96:d4:0d:f0:01:f8:
         c7:fc:02:8a:98:44:1d:ae:35:0d:36:7a:e3:9b:a8:d4:4a:d6:
         98:dd:56:36:cd:9c:bd:dd:75:48:15:46:d7:db:ed:9f:36:06:
         37:de:6d:16:42:62:0f:9a:92:bb:08:c4:dd:7a:f2:92:33:68:
         f0:e0:f0:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNxPKcrTrZGdwenj9r3mSuBwpJiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM0RjY2ODM2Rjg2MjFENUNFODAxNUVFN0E3ODFGNEMw
OTdBN0YxNTAeFw0yNTAyMDQxODA3MzNaFw0yNjAyMDMxODEyMzNaMDMxMTAvBgNV
BAMTKDEyQ0U1RTQ3QzU1NkQ4REYxOTY4QTIwN0ZBM0ZFRTkxMkIxMDU1QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTxzfG/YVLWtL45djmraGRaex
F06HQbANPoBl6iY0JFxS/pusTrW1VAUs3dCgy3XqNmSMGONBY4X7XEad0RhFo0Me
LvzNVEGxXwGxofnXiDBYpQGX00wwXxhbKyGAmz1rcd/Guneu1eojRwmV/BE3Flo6
ixHs/WRXg0WWhzeU1eAS2pz32pp5gjwuRZ1AaypGk3rXBXYTCUPP9dQM+z+JEhgR
LoA5Mh6ESNiyGGbW1G+XfwfKqBd1dFSIeeVjgzZCc5jizWCvGYkt7LQp+JycrMxS
WFwZLWUgigfDazuH10p2+gNzRLMfW/20BbsUPCanxdfrucYs8wH/zXO0QgX/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEs5eR8VW2N8ZaKIH+j/ukSsQVb4wHwYDVR0j
BBgwFoAUrE9mg2+GIdXOgBXuengfTAl6fxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMzc3RUU3OTI4MDhBQ0I3Qjg4QTRFNjAyOUZCMDNGNjBG
Mzg4NTYwQjgyNDI0QzFBMzY1MEJFNjc2NzJBOEU1LzAvQUM0RjY2ODM2Rjg2MjFE
NUNFODAxNUVFN0E3ODFGNEMwOTdBN0YxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BQzRGNjY4MzZGODYyMUQ1Q0U4
MDE1RUU3QTc4MUY0QzA5N0E3RjE1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjM3N0VFNzkyODA4QUNCN0I4OEE0RTYwMjlGQjAzRjYwRjM4ODU2MEI4
MjQyNEMxQTM2NTBCRTY3NjcyQThFNS8wLzM0MzUyZTMyMzIzNDJlMzEzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLeCY
MA0GCSqGSIb3DQEBCwUAA4IBAQCgec+u2Hov841NJOQ5VnLJ01wLNGnbzub2HG2m
N5sFb/8mAfNjgFuGg5VgBNNI5o4AqVzVwNHGxt3u5k2tvMPTqig+ghG4WRxLJmTO
YcR9Q8NS2hdvKIngYCCmCFWuZoIjmPkhGb1Hv7dpjkTHwh6ZGTLQsAAGrvBKn3sX
rT05HkuNwmA4e1nQKE+nxccs8arLMJJQglQpj8DBp1lHP/xYSaZKzoZoBU+RxJpP
eyAPze7S+//O3QTxkftyhUBj/k2W1A3wAfjH/AKKmEQdrjUNNnrjm6jUStaY3VY2
zZy93XVIFUbX2+2fNgY33m0WQmIPmpK7CMTdevKSM2jw4PC+
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:02 2025 by rpki-client