Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/34352e3232362e3139302e302f32332d3234203d3e20323731393531.roa
File:                     34352e3232362e3139302e302f32332d3234203d3e20323731393531.roa (raw, json)
Hash identifier:          eNkktCawvWUY/O+fJoUsCeOWXxGOlIzfBVrvV06dLrk=
Subject key identifier:   05:05:BC:AD:65:B2:07:57:81:D5:F8:D7:CF:56:CD:A9:F1:8D:93:00
Certificate issuer:       /CN=7F8154FBFA7869CE49F7C27290C85E6C51C47697
Certificate serial:       3CC006C95AC7675A19D4D20D6314B0EF5AF614FF
Authority key identifier: 7F:81:54:FB:FA:78:69:CE:49:F7:C2:72:90:C8:5E:6C:51:C4:76:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/34352e3232362e3139302e302f32332d3234203d3e20323731393531.roa
Signing time:             Thu 12 Dec 2024 12:35:00 +0000
ROA not before:           Thu 12 Dec 2024 12:30:00 +0000
ROA not after:            Thu 11 Dec 2025 12:35:00 +0000
asID:                     271951
IP address blocks:        45.226.190.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c0:06:c9:5a:c7:67:5a:19:d4:d2:0d:63:14:b0:ef:5a:f6:14:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8154FBFA7869CE49F7C27290C85E6C51C47697
        Validity
            Not Before: Dec 12 12:30:00 2024 GMT
            Not After : Dec 11 12:35:00 2025 GMT
        Subject: CN=0505BCAD65B2075781D5F8D7CF56CDA9F18D9300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:bc:29:69:ea:f7:3b:34:c4:ef:a1:44:ac:
                    90:c1:e1:f3:94:4e:56:e3:1a:75:be:13:a2:97:c7:
                    b5:03:7f:79:ec:d7:e7:db:0e:18:e6:fa:2f:eb:9c:
                    4e:ed:13:0a:9a:a2:56:c2:c9:92:e6:93:22:52:62:
                    47:a0:87:cd:5a:f0:23:74:e0:f5:81:ef:f0:b2:f8:
                    9f:8e:ca:fb:fa:5f:ab:dc:0f:3a:27:4d:58:cd:4d:
                    44:a1:94:52:a1:bc:54:13:06:1f:b1:24:33:45:de:
                    32:24:0b:38:23:b0:50:02:34:6d:3b:8c:ac:2a:35:
                    80:b8:e6:60:1e:cd:00:95:b2:88:ae:e4:73:0c:e0:
                    3d:41:7f:3f:1c:a9:20:8d:16:16:46:eb:5f:78:63:
                    51:d4:3c:6c:3f:91:05:86:77:23:0f:e2:3a:1e:f3:
                    00:35:b4:8c:db:10:8d:a8:fb:6f:2f:0a:a9:bb:17:
                    23:67:25:7f:3f:ae:90:3b:dd:42:15:b9:0b:bd:56:
                    bf:ea:4f:ef:3d:e4:4e:e4:fb:2b:e9:f1:73:44:11:
                    f3:c9:c6:ab:04:eb:79:bc:78:56:72:f5:43:33:d4:
                    35:b7:86:a0:34:cb:7c:9a:92:18:51:8e:26:a3:71:
                    84:fb:73:b1:6c:ad:2d:de:91:b7:00:ad:70:d1:0e:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:BC:AD:65:B2:07:57:81:D5:F8:D7:CF:56:CD:A9:F1:8D:93:00
            X509v3 Authority Key Identifier:
                keyid:7F:81:54:FB:FA:78:69:CE:49:F7:C2:72:90:C8:5E:6C:51:C4:76:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F8154FBFA7869CE49F7C27290C85E6C51C47697.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/48B39E079A7B248FAAEC56E63DF90B4B1E89B775963D47105A8AFF4D08BF347C/0/34352e3232362e3139302e302f32332d3234203d3e20323731393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:f2:7c:eb:3b:5b:07:0d:16:84:2b:47:d8:6c:b1:c9:d8:
         16:01:3e:88:1e:7e:1e:28:5c:78:f7:6f:f4:b5:f0:12:b1:0f:
         5b:22:56:a4:0c:f6:3a:fe:6c:8a:c4:87:94:0a:cd:1f:f5:9f:
         7a:4e:88:a4:b9:cd:19:2d:c6:77:20:b6:21:59:0e:f9:b8:ba:
         ce:39:94:2a:90:56:67:13:4f:fc:99:84:8f:e6:57:7f:10:d3:
         f7:52:fa:b6:50:95:d8:56:51:7f:b6:e4:52:31:5d:02:ac:16:
         f1:07:41:03:c6:a1:2c:cd:10:ef:60:91:4e:9a:75:5e:d4:b7:
         04:a2:12:b9:ed:73:39:31:71:6e:4a:14:db:5c:a3:93:a8:96:
         ac:83:0d:f5:25:10:d8:2c:53:58:f5:f9:11:26:14:17:23:5e:
         18:e0:29:14:e9:0c:8b:f7:91:56:41:99:cc:5f:a0:42:ca:8c:
         d5:80:ba:2a:f8:2f:5d:b8:7b:b4:39:36:56:f7:91:11:7e:a9:
         4a:92:5f:e0:db:27:0c:4f:70:c3:c0:e9:31:22:7c:ae:2c:e0:
         9b:c1:b5:78:90:bf:e2:e3:59:57:b7:64:2e:d4:a7:1a:f5:60:
         ae:9b:71:01:1e:27:e1:e5:94:fc:2f:1e:67:9e:ff:24:59:c1:
         cc:91:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----