Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/34352e3136392e39382e302f32332d3234203d3e20323637373930.roa
File:                     34352e3136392e39382e302f32332d3234203d3e20323637373930.roa (raw, json)
Hash identifier:          YNCZiywnyjRNvOWlLwvTd5szui/XKdb5YtFQQ/+Y9RI=
Subject key identifier:   5A:E2:FE:84:5B:09:89:83:68:B8:E0:6E:C1:DB:9C:AA:3E:5B:B0:A6
Certificate issuer:       /CN=DE8F7D598DEA40606B39C7B21C22841226056748
Certificate serial:       2D948DD8E7CCC403F22AA8D94D2D926EFA00BEB4
Authority key identifier: DE:8F:7D:59:8D:EA:40:60:6B:39:C7:B2:1C:22:84:12:26:05:67:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/34352e3136392e39382e302f32332d3234203d3e20323637373930.roa
Signing time:             Thu 21 Mar 2024 17:10:00 +0000
ROA not before:           Thu 21 Mar 2024 17:05:00 +0000
ROA not after:            Thu 20 Mar 2025 17:10:00 +0000
asID:                     267790
IP address blocks:        45.169.98.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:94:8d:d8:e7:cc:c4:03:f2:2a:a8:d9:4d:2d:92:6e:fa:00:be:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8F7D598DEA40606B39C7B21C22841226056748
        Validity
            Not Before: Mar 21 17:05:00 2024 GMT
            Not After : Mar 20 17:10:00 2025 GMT
        Subject: CN=5AE2FE845B09898368B8E06EC1DB9CAA3E5BB0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7d:3a:af:e8:f1:56:60:e9:96:a7:98:44:49:
                    09:47:a7:68:ee:62:bf:c0:ee:91:b5:a9:76:48:35:
                    54:70:5b:52:b4:d0:0f:83:77:cf:d4:78:34:db:d4:
                    f7:ca:cc:c8:0d:83:c3:4c:da:75:75:5a:c8:59:34:
                    68:16:95:55:c2:2d:69:93:97:9b:18:9c:88:10:36:
                    4c:20:71:2f:ef:13:c8:5d:7e:16:a8:3a:49:b4:81:
                    1e:43:44:0e:ba:5e:aa:d4:0d:cc:2d:05:05:75:6a:
                    57:ff:38:fb:83:46:4c:09:ef:55:3f:91:52:47:04:
                    b7:ad:9d:7a:de:62:33:55:5f:16:14:60:8f:ab:0a:
                    11:df:16:3f:06:35:4e:29:b9:68:01:d0:84:77:8d:
                    c3:fc:48:be:57:8c:ca:39:0f:e3:b4:28:16:f6:9f:
                    61:b7:71:58:a8:7b:a2:8f:3a:6d:ad:e1:48:5b:c7:
                    16:cd:98:4c:a7:6c:10:d6:45:84:35:ca:6d:7a:0c:
                    4d:80:1e:6c:0e:ac:c5:62:68:5d:93:57:86:be:88:
                    e5:11:7f:13:03:3b:0b:63:86:0a:5c:d2:d0:0e:e0:
                    0f:23:f4:64:79:58:85:33:c6:8f:26:f7:fe:3d:1c:
                    8a:39:64:12:67:04:84:ff:f2:02:f8:9a:42:44:1c:
                    1b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E2:FE:84:5B:09:89:83:68:B8:E0:6E:C1:DB:9C:AA:3E:5B:B0:A6
            X509v3 Authority Key Identifier:
                keyid:DE:8F:7D:59:8D:EA:40:60:6B:39:C7:B2:1C:22:84:12:26:05:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/DE8F7D598DEA40606B39C7B21C22841226056748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DE8F7D598DEA40606B39C7B21C22841226056748.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61EA6F8B64568BA33C02DA88126D8B67CEA4B74D4B4EAA489981B775EF6EFF90/0/34352e3136392e39382e302f32332d3234203d3e20323637373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:69:a3:a6:0f:22:e9:64:6c:cd:21:fa:c6:34:57:28:36:5a:
         f5:6f:ae:da:48:44:a4:fc:ed:00:d0:1f:48:ab:17:68:bd:aa:
         4a:96:20:ab:77:fe:2e:f2:5a:d1:01:f3:a3:2d:d2:50:24:10:
         e7:7b:81:70:f6:3a:dc:85:da:a8:05:08:4b:ff:89:79:02:49:
         b7:b4:21:f7:6a:8f:22:9b:b4:8f:f1:66:37:38:79:37:86:d1:
         f3:20:6f:88:8a:85:f4:da:1d:58:81:c3:da:41:f3:a7:33:cc:
         20:29:4c:34:8b:8b:ae:9c:ad:96:3c:bb:d2:56:b6:c5:e2:01:
         1f:ee:71:73:f3:54:18:2a:29:10:f3:5e:f1:9a:f3:4f:a0:57:
         e3:2d:2c:e9:ac:1d:2e:0e:ed:71:63:6e:4d:53:11:c7:30:24:
         d8:d1:4a:ca:28:da:f6:84:e3:42:d4:78:68:c5:8a:f2:a5:d3:
         ac:91:ed:79:30:3e:90:58:d7:01:83:d2:d6:2c:f8:03:eb:6c:
         32:fd:51:be:17:59:86:a9:ad:c6:c9:81:cd:ad:08:4c:ea:f4:
         01:ab:e7:5b:e2:c8:e5:b9:47:ff:a4:0c:5b:71:ac:36:10:24:
         3c:f7:71:63:54:a2:92:c1:24:72:63:70:d7:68:ed:06:36:36:
         97:92:02:7c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULZSN2OfMxAPyKqjZTS2SbvoAvrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREU4RjdENTk4REVBNDA2MDZCMzlDN0IyMUMyMjg0MTIy
NjA1Njc0ODAeFw0yNDAzMjExNzA1MDBaFw0yNTAzMjAxNzEwMDBaMDMxMTAvBgNV
BAMTKDVBRTJGRTg0NUIwOTg5ODM2OEI4RTA2RUMxREI5Q0FBM0U1QkIwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUfTqv6PFWYOmWp5hESQlHp2ju
Yr/A7pG1qXZINVRwW1K00A+Dd8/UeDTb1PfKzMgNg8NM2nV1WshZNGgWlVXCLWmT
l5sYnIgQNkwgcS/vE8hdfhaoOkm0gR5DRA66XqrUDcwtBQV1alf/OPuDRkwJ71U/
kVJHBLetnXreYjNVXxYUYI+rChHfFj8GNU4puWgB0IR3jcP8SL5XjMo5D+O0KBb2
n2G3cVioe6KPOm2t4UhbxxbNmEynbBDWRYQ1ym16DE2AHmwOrMViaF2TV4a+iOUR
fxMDOwtjhgpc0tAO4A8j9GR5WIUzxo8m9/49HIo5ZBJnBIT/8gL4mkJEHBtJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWuL+hFsJiYNouOBuwducqj5bsKYwHwYDVR0j
BBgwFoAU3o99WY3qQGBrOceyHCKEEiYFZ0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MUVBNkY4QjY0NTY4QkEzM0MwMkRBODgxMjZEOEI2N0NF
QTRCNzRENEI0RUFBNDg5OTgxQjc3NUVGNkVGRjkwLzAvREU4RjdENTk4REVBNDA2
MDZCMzlDN0IyMUMyMjg0MTIyNjA1Njc0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERThGN0Q1OThERUE0MDYwNkIz
OUM3QjIxQzIyODQxMjI2MDU2NzQ4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjFFQTZGOEI2NDU2OEJBMzNDMDJEQTg4MTI2RDhCNjdDRUE0Qjc0RDRC
NEVBQTQ4OTk4MUI3NzVFRjZFRkY5MC8wLzM0MzUyZTMxMzYzOTJlMzkzODJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2pYjAN
BgkqhkiG9w0BAQsFAAOCAQEAXmmjpg8i6WRszSH6xjRXKDZa9W+u2khEpPztANAf
SKsXaL2qSpYgq3f+LvJa0QHzoy3SUCQQ53uBcPY63IXaqAUIS/+JeQJJt7Qh92qP
Ipu0j/FmNzh5N4bR8yBviIqF9NodWIHD2kHzpzPMIClMNIuLrpytljy70la2xeIB
H+5xc/NUGCopEPNe8ZrzT6BX4y0s6awdLg7tcWNuTVMRxzAk2NFKyija9oTjQtR4
aMWK8qXTrJHteTA+kFjXAYPS1iz4A+tsMv1RvhdZhqmtxsmBza0ITOr0AavnW+LI
5blH/6QMW3GsNhAkPPdxY1SiksEkcmNw12jtBjY2l5ICfA==
-----END CERTIFICATE-----