Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/34352e3136342e3230342e302f32332d3233203d3e20323637373033.roa
File:                     34352e3136342e3230342e302f32332d3233203d3e20323637373033.roa (raw, json)
Hash identifier:          unM640YWzVk2VI07LXiykxM/55uhxTsCek4b7s3fAlo=
Subject key identifier:   6A:1D:5F:B8:32:EF:D3:BE:E0:04:1D:E3:61:9F:93:FC:CA:A7:36:C9
Certificate issuer:       /CN=503D82ECFA9B049714A0487B354E037EB0FE6DAB
Certificate serial:       33A7A63BDF2AB17661CB0C076C205FD5951FCD47
Authority key identifier: 50:3D:82:EC:FA:9B:04:97:14:A0:48:7B:35:4E:03:7E:B0:FE:6D:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/34352e3136342e3230342e302f32332d3233203d3e20323637373033.roa
Signing time:             Tue 05 Mar 2024 17:51:45 +0000
ROA not before:           Tue 05 Mar 2024 17:46:45 +0000
ROA not after:            Tue 04 Mar 2025 17:51:45 +0000
asID:                     267703
IP address blocks:        45.164.204.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a7:a6:3b:df:2a:b1:76:61:cb:0c:07:6c:20:5f:d5:95:1f:cd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503D82ECFA9B049714A0487B354E037EB0FE6DAB
        Validity
            Not Before: Mar  5 17:46:45 2024 GMT
            Not After : Mar  4 17:51:45 2025 GMT
        Subject: CN=6A1D5FB832EFD3BEE0041DE3619F93FCCAA736C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:b9:ab:8a:65:c7:4e:46:b1:ff:96:7d:77:
                    0e:ae:6c:a2:88:49:02:f6:c2:39:96:02:49:43:1e:
                    e3:9e:0b:6b:9d:0c:a3:ee:59:ea:b0:64:b5:3b:23:
                    83:92:85:46:eb:bc:1d:da:cc:df:be:c5:89:56:4c:
                    4a:35:29:58:85:62:52:79:f3:ca:2d:5f:36:b5:16:
                    d9:a2:b0:79:e3:c9:0e:eb:1a:45:f4:6b:eb:71:4c:
                    0c:1c:07:9c:3b:1b:b4:51:af:14:22:07:50:c9:8e:
                    cb:ac:cc:6b:52:53:e5:97:fa:b4:07:42:17:ca:ed:
                    27:ef:52:ce:75:6b:dc:df:26:be:5d:2e:b2:97:91:
                    7d:d7:55:d6:d6:8f:92:0b:54:ee:63:a0:4e:9b:dd:
                    52:74:04:7f:86:3c:94:15:9d:25:75:64:ca:61:d1:
                    6a:9a:38:c5:a5:83:4e:e2:fe:e7:fa:e7:e5:f1:73:
                    c2:66:9b:65:0b:92:c1:eb:24:6e:92:6b:07:49:68:
                    a9:bc:0a:d0:11:b8:88:4f:73:c0:d5:5a:38:dd:b0:
                    39:c4:d2:86:da:08:8c:c0:62:05:51:d3:85:a4:4a:
                    66:23:1d:f7:10:fc:8a:b0:77:b2:88:c4:b5:c8:ba:
                    e3:e6:f2:42:80:4e:af:c9:38:3c:fa:ff:e0:18:6f:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1D:5F:B8:32:EF:D3:BE:E0:04:1D:E3:61:9F:93:FC:CA:A7:36:C9
            X509v3 Authority Key Identifier:
                keyid:50:3D:82:EC:FA:9B:04:97:14:A0:48:7B:35:4E:03:7E:B0:FE:6D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/503D82ECFA9B049714A0487B354E037EB0FE6DAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77EDBE4658E59A5C7323C61CC36EE348D3E0A1EE0088421250C7E7731FA42429/0/34352e3136342e3230342e302f32332d3233203d3e20323637373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:bd:27:83:78:70:05:0f:8b:74:7b:ea:a6:f2:83:3b:d9:
         35:3c:cb:b0:90:b3:e6:d9:52:f4:c7:39:ea:1b:a9:ac:93:60:
         e9:5c:b9:18:bd:a8:8e:1c:c8:0b:35:23:30:e8:e5:84:7e:8e:
         a0:f3:25:ac:81:81:28:da:8b:df:46:eb:c6:12:19:44:ff:88:
         96:2d:0d:39:37:42:73:d2:f8:96:2a:0e:4c:6e:ce:50:dc:a7:
         bb:35:da:2f:2b:5f:17:67:71:12:b7:bf:e1:4b:f5:6b:15:1e:
         97:5c:4b:95:b5:35:24:10:31:be:a4:1b:8b:e9:c4:b4:f7:d1:
         fd:e2:67:7f:6c:b9:4a:fd:a8:e6:6e:15:cc:7a:3e:3f:9c:8d:
         52:20:3e:7a:df:b3:5f:fe:05:59:71:fe:70:04:f6:47:21:48:
         b3:c7:71:8b:90:99:6a:ab:33:ea:08:b4:04:60:44:36:44:d8:
         b6:05:00:51:7f:55:31:12:12:eb:d2:c3:f2:5e:05:31:9e:ce:
         74:ef:5f:b1:99:0d:c4:8d:27:a9:05:99:31:fd:78:94:82:ec:
         88:17:bb:79:b1:1a:de:3e:60:1f:dd:c7:e9:03:3f:86:5b:fe:
         01:c4:17:02:06:1c:60:f7:e7:d9:e3:6e:73:8f:cb:fc:4a:cf:
         a3:8c:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----