Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa
File:                     34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa (raw, json)
Hash identifier:          xQtmlBiplX/iQSlkWHttJPldRxvwBScwApN1nUvB7k4=
Subject key identifier:   23:03:F5:16:7B:7B:BF:40:F2:79:A5:5F:3D:DB:3A:33:2C:64:55:30
Certificate issuer:       /CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
Certificate serial:       721E68AEB8C1008F531C35444B3793EBC6E40F53
Authority key identifier: 63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa
Signing time:             Tue 05 Mar 2024 17:40:18 +0000
ROA not before:           Tue 05 Mar 2024 17:35:18 +0000
ROA not after:            Tue 04 Mar 2025 17:40:18 +0000
asID:                     266684
IP address blocks:        45.228.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1e:68:ae:b8:c1:00:8f:53:1c:35:44:4b:37:93:eb:c6:e4:0f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637F3C6F4A4FAEC438B0EA735882742F9E106F8B
        Validity
            Not Before: Mar  5 17:35:18 2024 GMT
            Not After : Mar  4 17:40:18 2025 GMT
        Subject: CN=2303F5167B7BBF40F279A55F3DDB3A332C645530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:be:5f:fa:ea:b2:87:d6:d6:14:3f:0c:63:
                    4e:3c:73:08:1b:a5:d8:33:b7:1b:15:35:49:cf:fd:
                    af:05:77:69:a0:81:c7:7b:b0:e2:ff:52:11:1b:7d:
                    e8:e2:4e:72:97:90:98:a7:5c:9e:47:32:06:df:d1:
                    6c:2e:33:1b:c1:e0:96:0f:59:b1:e2:5c:69:87:a6:
                    91:3c:ac:ee:4a:db:af:5c:e6:8a:f7:f3:69:30:04:
                    b8:02:f2:c2:0c:b5:99:c8:54:73:7e:ab:3a:e3:09:
                    4c:4b:31:f6:15:57:2c:20:c1:cc:33:d9:10:da:19:
                    38:a9:2d:ab:f6:3c:1d:a2:ea:0f:74:11:97:c4:3d:
                    77:74:49:db:26:e1:ef:75:47:99:a1:11:46:50:47:
                    86:d0:ac:bd:8b:34:8c:d2:35:45:59:73:ce:99:a2:
                    d5:19:fe:35:8c:d9:6d:86:da:2e:54:6e:fd:43:46:
                    00:8f:41:c2:ff:99:40:ba:b3:42:bb:94:f5:b2:7c:
                    ae:6d:da:8e:cc:fe:2d:92:b8:8c:d4:eb:fb:11:af:
                    29:59:06:dd:66:d7:4e:6b:5b:6a:c1:ea:84:eb:08:
                    4d:93:52:d1:25:d3:b3:82:13:b3:97:33:3f:28:e1:
                    fa:0e:e9:17:dc:5d:6d:71:bc:da:77:b2:a5:62:84:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:03:F5:16:7B:7B:BF:40:F2:79:A5:5F:3D:DB:3A:33:2C:64:55:30
            X509v3 Authority Key Identifier:
                keyid:63:7F:3C:6F:4A:4F:AE:C4:38:B0:EA:73:58:82:74:2F:9E:10:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/637F3C6F4A4FAEC438B0EA735882742F9E106F8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76326EE858E2FE109424F3675E35EC58EFEA663CABC2C593B0A012FB5A986C03/0/34352e3232382e3232302e302f32332d3233203d3e20323636363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:11:5e:e1:6f:33:d4:00:4f:c9:d2:52:0b:59:f4:75:0a:
         f5:65:39:f7:6f:67:fc:79:80:0f:a7:8f:9b:2c:2d:ab:a6:37:
         f5:43:9f:a2:00:bf:64:7d:d0:85:54:8c:9c:f0:14:39:81:84:
         e2:54:ab:a3:77:72:b7:6a:93:18:bd:0d:ce:62:b4:72:10:3c:
         ab:b9:91:51:8e:ca:f7:8a:9b:59:8b:a3:da:56:b6:4a:03:59:
         a6:1d:f3:0d:71:5d:fe:e7:f8:34:e0:15:c1:cb:03:00:e5:dc:
         d8:a6:0d:e8:9a:16:ad:1e:ec:62:19:9b:42:9b:1a:8a:c3:10:
         a4:1f:2d:21:04:d7:91:12:52:b0:6c:ae:02:12:82:77:97:8c:
         f9:cc:7e:4d:77:d3:c0:d3:56:a0:8d:d2:39:09:4d:dc:d9:7f:
         76:92:07:20:b2:1e:10:76:be:c1:d7:b6:b6:e7:4b:4f:66:b5:
         77:4c:35:f0:ea:94:62:2e:ed:d5:e9:2e:17:d2:a3:a2:65:00:
         93:fc:ef:36:b6:ae:42:d6:f4:1d:60:f5:af:b8:d5:17:44:3c:
         01:2f:78:4a:b9:14:8c:24:5f:1b:3d:03:24:a3:63:48:ba:ac:
         45:ab:df:57:d4:f2:96:7e:f9:94:1a:43:13:c8:e5:b0:1e:d7:
         95:14:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----