Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/34352e3232392e342e302f32322d3234203d3e20323639383338.roa
File:                     34352e3232392e342e302f32322d3234203d3e20323639383338.roa (raw, json)
Hash identifier:          NBegLLXkE+qedZrW8Qo1uhxfUw80blJptKbzelVPBLM=
Subject key identifier:   34:30:BA:DC:AE:35:E7:FC:6B:65:CF:FD:91:F5:1B:21:2E:03:32:71
Certificate issuer:       /CN=938F00AB707A673E33DEB078154945BAC29E6E67
Certificate serial:       77C694B2103A29C9B6DF10E43AC49A029011F77D
Authority key identifier: 93:8F:00:AB:70:7A:67:3E:33:DE:B0:78:15:49:45:BA:C2:9E:6E:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/34352e3232392e342e302f32322d3234203d3e20323639383338.roa
Signing time:             Tue 05 Mar 2024 18:17:36 +0000
ROA not before:           Tue 05 Mar 2024 18:12:36 +0000
ROA not after:            Tue 04 Mar 2025 18:17:36 +0000
asID:                     269838
IP address blocks:        45.229.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c6:94:b2:10:3a:29:c9:b6:df:10:e4:3a:c4:9a:02:90:11:f7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938F00AB707A673E33DEB078154945BAC29E6E67
        Validity
            Not Before: Mar  5 18:12:36 2024 GMT
            Not After : Mar  4 18:17:36 2025 GMT
        Subject: CN=3430BADCAE35E7FC6B65CFFD91F51B212E033271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:44:8f:48:62:05:75:91:6d:78:4e:f0:c2:
                    46:9a:49:ab:24:68:f4:e2:fe:0a:fb:9b:47:fc:4e:
                    15:ee:db:86:a8:2e:6f:ac:a2:b4:dc:97:61:b7:46:
                    a6:9e:3c:36:2f:15:c4:e1:ed:04:c8:19:fd:60:2b:
                    ff:3f:d8:0c:92:1b:e9:8b:3d:34:08:4d:17:bf:0e:
                    02:94:45:22:65:3f:13:55:25:5d:f9:68:a3:e6:d2:
                    40:90:b4:d2:7e:15:4b:14:c4:8e:8f:02:5e:c7:49:
                    8a:bc:e1:0e:57:0f:b6:29:2b:92:62:b8:bd:c7:68:
                    6c:99:e2:96:18:ac:1e:eb:51:43:21:84:de:7b:99:
                    6e:99:ca:5f:f0:9a:37:30:6b:74:a3:20:ee:0e:99:
                    b0:7e:9c:b5:68:7d:52:73:55:58:8f:4e:a7:15:33:
                    de:fa:dc:bf:0c:b6:a0:9f:4b:f6:80:69:4b:30:7e:
                    46:97:70:9f:f6:6e:2b:24:e8:af:8e:47:78:bd:75:
                    67:3b:3f:d8:79:50:8f:dc:a2:e5:d0:31:93:b7:77:
                    a5:c8:ac:9a:1d:ac:d6:f9:fc:52:84:56:0e:ef:d7:
                    08:83:af:91:09:e2:8f:26:ec:00:23:cd:8f:15:59:
                    f1:d5:72:f4:e6:ca:92:41:13:be:9e:44:81:ad:32:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:30:BA:DC:AE:35:E7:FC:6B:65:CF:FD:91:F5:1B:21:2E:03:32:71
            X509v3 Authority Key Identifier:
                keyid:93:8F:00:AB:70:7A:67:3E:33:DE:B0:78:15:49:45:BA:C2:9E:6E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/938F00AB707A673E33DEB078154945BAC29E6E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/938F00AB707A673E33DEB078154945BAC29E6E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A11E26BB7B0180CF9D573D2F33932C14DAEB726C12A4FE5572059228BE377963/0/34352e3232392e342e302f32322d3234203d3e20323639383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bb:91:02:ab:a8:15:f5:ef:01:66:79:43:c5:de:42:84:1d:6c:
         5f:e2:95:fd:53:2e:85:c0:31:40:84:0e:0d:86:55:48:e1:a4:
         ce:44:62:57:5f:7b:ae:ac:72:77:97:f5:5d:1d:b1:29:a6:d9:
         4a:d7:6b:4d:5f:20:bc:4f:a8:04:a5:36:6e:fb:dd:9b:fa:18:
         54:17:3b:74:a5:ff:89:c2:ff:fe:f4:48:08:47:52:67:a4:ce:
         81:1b:04:8d:cc:9c:06:25:ed:cf:d3:c0:9e:cd:01:15:cd:44:
         28:af:bd:d7:b7:26:11:d7:54:c7:0a:02:2c:75:63:1e:3b:3f:
         c4:5a:2e:a7:8b:14:08:51:d0:72:55:68:65:af:6e:b7:dc:00:
         87:24:ac:c9:1f:c9:57:f2:07:05:d5:1e:e9:7d:78:b1:51:18:
         1f:26:30:8e:37:d2:d9:da:58:8a:d8:80:6d:c0:ed:f1:23:27:
         6b:0e:c5:48:fe:45:18:0a:e3:43:d6:ff:62:d4:4f:00:a3:d4:
         66:f8:e6:2e:92:ef:db:ec:ea:b5:a1:6c:99:1b:5e:1f:bc:6b:
         22:02:d8:17:66:c8:30:2e:55:b1:13:d2:71:85:a1:33:19:ba:
         6e:9a:3f:65:9a:8f:6e:a1:08:c7:3f:a7:39:ec:e7:0a:cc:65:
         ed:88:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----