Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32322d3234203d3e20323635383537.roa
File:                     34352e3232352e302e302f32322d3234203d3e20323635383537.roa (raw, json)
Hash identifier:          nxxxRjKJgxI9JzuSI3d7/ZN7HAN3NTzzqxBh+omro8A=
Subject key identifier:   F3:64:DE:94:95:C4:CF:34:1D:F4:26:A3:8F:3C:AD:08:F2:80:30:AB
Certificate issuer:       /CN=B1225D42FCF145DB2561F136DC359390925409AD
Certificate serial:       10E05087117FDD0DD051114FB158C194844BEFDD
Authority key identifier: B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32322d3234203d3e20323635383537.roa
Signing time:             Tue 05 Mar 2024 17:55:19 +0000
ROA not before:           Tue 05 Mar 2024 17:50:19 +0000
ROA not after:            Tue 04 Mar 2025 17:55:19 +0000
asID:                     265857
IP address blocks:        45.225.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e0:50:87:11:7f:dd:0d:d0:51:11:4f:b1:58:c1:94:84:4b:ef:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1225D42FCF145DB2561F136DC359390925409AD
        Validity
            Not Before: Mar  5 17:50:19 2024 GMT
            Not After : Mar  4 17:55:19 2025 GMT
        Subject: CN=F364DE9495C4CF341DF426A38F3CAD08F28030AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:89:20:86:1c:c6:6f:9f:c4:6d:66:95:50:
                    8f:c5:8d:1e:67:8b:ae:af:5b:7e:8c:0a:68:99:67:
                    86:ac:4f:19:ed:20:25:5c:7e:cf:97:64:7d:c4:51:
                    05:32:a0:87:c2:ba:d7:89:bd:d0:f8:3d:f9:ec:a2:
                    21:7a:b5:4a:cd:6d:68:c7:ae:07:3b:f2:ea:f7:75:
                    aa:d3:13:77:46:4f:49:8e:3c:8f:ad:94:3f:c8:52:
                    a1:98:54:59:c1:c1:ba:06:3f:7e:16:9b:20:21:e1:
                    62:72:ec:b9:27:42:eb:24:10:22:2b:4e:48:18:8d:
                    08:1f:e6:81:34:02:33:d2:5d:7b:aa:99:10:89:77:
                    b0:32:d7:fe:07:51:6e:cb:52:fb:3a:5a:f8:3d:e4:
                    f2:fb:1c:00:5a:dd:d6:d6:0e:ac:15:2f:c5:4f:fd:
                    32:bd:5c:42:96:d3:8f:ea:ec:f0:3a:86:ad:2c:2f:
                    03:b1:ab:f9:16:c9:50:4d:40:d0:94:e6:bd:53:4c:
                    d9:09:a7:b8:de:66:30:05:6e:84:ec:7f:1e:54:66:
                    6a:b5:ad:26:04:1f:fc:6b:16:06:cd:45:56:6e:ec:
                    92:96:04:ba:d7:74:34:3b:da:fb:32:d3:e4:c5:e1:
                    8a:24:16:fe:9e:15:a2:82:27:b3:ac:19:ae:d2:9b:
                    f0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:64:DE:94:95:C4:CF:34:1D:F4:26:A3:8F:3C:AD:08:F2:80:30:AB
            X509v3 Authority Key Identifier:
                keyid:B1:22:5D:42:FC:F1:45:DB:25:61:F1:36:DC:35:93:90:92:54:09:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/B1225D42FCF145DB2561F136DC359390925409AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1225D42FCF145DB2561F136DC359390925409AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1428A242FDBB798606463BD89090CADB5851D06F57FC6056A0B0AFC769CD1703/0/34352e3232352e302e302f32322d3234203d3e20323635383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:22:02:cd:f7:6a:ff:2c:a8:b2:96:35:35:c7:56:3c:94:78:
         23:ab:b1:f5:09:8d:7e:83:62:36:40:75:79:6d:23:de:f9:d0:
         d8:c4:26:4c:b2:15:72:c2:79:6a:f9:ee:a0:61:7a:71:34:14:
         c8:fa:77:4e:fc:81:3b:8f:e5:45:41:80:8f:29:2b:68:bf:0f:
         6f:2b:60:19:ab:8c:ae:af:f2:9e:91:6b:3f:02:00:68:5f:13:
         4f:e5:84:6a:6b:52:01:d5:5d:56:0f:70:cc:32:a0:8a:6b:42:
         73:40:65:68:1d:bf:83:98:f6:a9:91:a7:99:85:ff:f8:2a:11:
         a5:50:cb:f6:7d:0b:67:2f:3b:1f:21:37:20:18:fa:d6:7b:e6:
         b3:99:ce:4d:d4:08:bb:0b:26:51:92:a3:32:04:82:74:cd:69:
         68:e6:85:40:91:37:36:96:f2:f2:e9:14:34:30:a1:7c:f6:a7:
         3c:67:98:94:ff:2a:70:8f:5a:a9:29:15:42:8f:dc:9e:de:54:
         c5:41:1d:8f:98:b4:b9:7c:5f:22:53:36:e5:0b:c9:b5:dc:ef:
         40:c6:06:1e:b6:f8:bd:14:0b:af:03:97:bf:5b:ff:a7:e6:96:
         d8:0c:70:ac:b2:e1:e6:6f:85:27:63:10:ae:4b:44:40:c9:e5:
         b0:59:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----