Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
File:                     34352e3233382e35362e302f32322d3232203d3e203532343638.roa (raw, json)
Hash identifier:          sSmS3UsQ5n+8qARQxWBbPd6unFGc9kIIjPY6q6xAx/0=
Subject key identifier:   F6:11:2B:8B:FA:F0:7C:BA:A4:24:7D:27:C9:F4:0C:6E:54:02:CD:10
Certificate issuer:       /CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
Certificate serial:       4CE3A2CA8184588C3C4CD4624BC5EF0486C7B1AC
Authority key identifier: B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:54:55 +0000
ROA not before:           Tue 05 Mar 2024 17:49:55 +0000
ROA not after:            Tue 04 Mar 2025 17:54:55 +0000
asID:                     52468
IP address blocks:        45.238.56.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:a2:ca:81:84:58:8c:3c:4c:d4:62:4b:c5:ef:04:86:c7:b1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6200CE22A13E0365B263C1B068DE612DB3FA0CC
        Validity
            Not Before: Mar  5 17:49:55 2024 GMT
            Not After : Mar  4 17:54:55 2025 GMT
        Subject: CN=F6112B8BFAF07CBAA4247D27C9F40C6E5402CD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:0e:d1:7e:03:a2:64:59:ce:2c:ad:d5:81:
                    9e:db:89:35:2d:10:ad:e7:ab:ce:7d:4d:70:45:31:
                    f4:7a:64:6f:68:8d:c4:65:fc:2b:bd:48:b3:bd:f9:
                    4a:55:35:07:c4:4d:85:71:aa:3e:79:e9:35:63:9d:
                    48:30:a7:70:1a:4e:39:0c:4a:17:9f:9c:8d:c7:28:
                    66:37:ce:85:7b:97:78:c9:84:4e:3f:40:c4:53:5a:
                    0a:b6:92:02:34:29:6c:47:07:9a:43:d1:c7:c3:c8:
                    1c:ae:0a:c9:02:4a:dd:40:3c:19:26:f8:31:65:2b:
                    5a:32:0d:ee:5b:0e:70:22:01:85:e1:76:09:cb:7a:
                    fe:00:16:a8:09:90:4e:33:b4:4d:3a:ca:0e:90:9d:
                    71:19:f7:f2:0f:97:b0:e7:e2:a7:d8:80:fd:a3:b6:
                    7d:9d:cf:cf:c5:10:2c:eb:91:9c:91:7e:93:93:4f:
                    a6:62:9d:ea:70:e5:4e:1e:f3:fd:5b:5d:10:41:8a:
                    60:f9:65:2a:2d:5a:6b:51:4c:82:ff:35:28:81:cb:
                    ab:47:43:7e:c1:25:f0:cc:f5:98:de:53:45:52:0e:
                    d8:c5:77:35:71:90:43:ec:ee:da:d8:96:35:28:3b:
                    b6:72:39:24:1c:91:10:e2:ee:5b:b3:e8:f9:b4:32:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:11:2B:8B:FA:F0:7C:BA:A4:24:7D:27:C9:F4:0C:6E:54:02:CD:10
            X509v3 Authority Key Identifier:
                keyid:B6:20:0C:E2:2A:13:E0:36:5B:26:3C:1B:06:8D:E6:12:DB:3F:A0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6200CE22A13E0365B263C1B068DE612DB3FA0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF5299F15C072EB338CD27866457F79835E18A2FD63C47002C1EE31F358F737B/0/34352e3233382e35362e302f32322d3232203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:2d:31:ff:c9:03:9a:fa:75:ee:a6:db:83:90:b6:0e:2e:77:
         e8:fc:18:cf:1b:91:1f:22:e3:ae:23:92:0a:25:dc:65:12:f2:
         e5:f2:fe:91:ad:84:38:1b:d5:0b:c6:47:1b:5a:67:fb:d2:9a:
         6c:33:ed:a4:c8:ec:29:c1:a6:29:2d:dd:08:b1:9d:5e:6a:c1:
         7e:14:d9:fd:53:54:18:6d:93:39:f1:94:14:29:9e:89:82:ce:
         77:90:aa:f1:31:c3:b1:00:0b:be:91:0b:82:5b:da:99:cb:05:
         5b:85:2d:a8:97:79:d6:a8:df:91:90:a8:a1:38:9e:eb:f2:0b:
         4d:95:a9:1e:53:3a:96:30:d8:25:90:de:b4:b4:5a:ed:ae:59:
         76:a5:14:2c:41:16:a4:fb:47:3a:cd:1b:2f:49:3d:ab:d3:85:
         9c:b3:96:60:0d:3e:d5:c8:04:56:cc:72:bc:95:59:d6:8f:4c:
         02:e0:6f:96:06:24:96:ad:86:26:74:d9:33:b2:49:3c:c4:a2:
         d7:b6:14:de:92:af:c6:7f:e9:2c:65:cc:35:7a:d1:c0:dd:6a:
         d1:b2:cd:b5:a3:cb:f5:e7:01:45:ff:aa:e3:9b:97:e6:19:66:
         73:5b:0b:10:d3:dd:1b:5d:2a:70:cf:19:8d:dc:c7:36:9d:15:
         91:d1:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----