Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/34352e3232362e3137362e302f32322d3234203d3e203532343638.roa
File:                     34352e3232362e3137362e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          khC5uLW1GZe7MO0f/zkgy6SMeVoaNWU+6ugk8n0GEes=
Subject key identifier:   AC:C7:C2:CE:25:9F:25:78:AC:66:10:C0:75:25:BD:E5:32:91:23:54
Certificate issuer:       /CN=9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130
Certificate serial:       56AD2467E1132CB840F6D976638AC898126567C4
Authority key identifier: 9A:6E:BF:99:07:6B:09:A5:1C:AE:9A:3E:21:C8:CC:5B:2F:66:11:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/34352e3232362e3137362e302f32322d3234203d3e203532343638.roa
Signing time:             Wed 05 Mar 2025 16:55:00 +0000
ROA not before:           Wed 05 Mar 2025 16:50:00 +0000
ROA not after:            Wed 04 Mar 2026 16:55:00 +0000
asID:                     52468
IP address blocks:        45.226.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ad:24:67:e1:13:2c:b8:40:f6:d9:76:63:8a:c8:98:12:65:67:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130
        Validity
            Not Before: Mar  5 16:50:00 2025 GMT
            Not After : Mar  4 16:55:00 2026 GMT
        Subject: CN=ACC7C2CE259F2578AC6610C07525BDE532912354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:59:e9:41:b3:12:c2:1c:39:72:24:e6:2e:
                    6b:b2:95:d0:bf:05:06:dd:d9:d0:3e:3a:57:1c:2f:
                    50:6c:15:08:a6:4e:6a:46:d9:d3:fe:e8:05:42:76:
                    5d:3c:72:95:cc:60:d3:b4:64:30:31:04:0d:6d:ee:
                    ba:96:c2:72:e6:41:17:4d:3e:cb:c0:c7:51:d9:71:
                    0d:29:e8:25:9c:f3:54:1d:0f:1b:8a:17:30:1e:9e:
                    3d:be:90:00:ad:24:fc:99:1c:1e:ba:91:65:31:cb:
                    c3:ca:7e:22:d8:21:1d:ad:a3:82:e0:1f:4d:40:47:
                    7b:48:5e:a7:db:3f:71:72:69:53:ac:9e:38:d7:ac:
                    93:5b:10:06:83:4f:94:de:34:22:21:f3:7a:92:fb:
                    e6:fc:85:77:59:75:ed:83:55:f9:fd:7b:7f:3a:d2:
                    71:a8:d6:4f:7a:8e:49:0d:b9:76:2d:f0:da:c9:69:
                    6b:38:29:77:c9:a4:19:8e:3a:bc:69:91:d8:be:9f:
                    16:76:1d:95:f0:61:28:3d:d1:98:c4:9e:90:35:8b:
                    51:73:3c:3b:dd:65:7e:53:66:df:3b:30:ab:e5:5d:
                    c4:82:64:c4:f0:91:06:48:52:23:46:d1:0f:eb:4c:
                    07:56:3e:ef:18:f4:6e:79:d4:ed:57:fc:a3:05:ae:
                    73:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C7:C2:CE:25:9F:25:78:AC:66:10:C0:75:25:BD:E5:32:91:23:54
            X509v3 Authority Key Identifier:
                keyid:9A:6E:BF:99:07:6B:09:A5:1C:AE:9A:3E:21:C8:CC:5B:2F:66:11:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A6EBF99076B09A51CAE9A3E21C8CC5B2F661130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/08AC0AE189DBB7AC3E2D7C14F5D919A845BF1B7F2F73F497294DCC3F96AAA006/0/34352e3232362e3137362e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:1f:56:8e:d4:77:ff:9b:04:a1:ae:2f:8a:f3:d6:66:65:0f:
         19:04:13:e7:10:6d:19:4a:8d:1f:10:d8:02:4b:57:18:83:ee:
         52:45:aa:6f:ac:ec:4c:0f:c9:24:ac:a0:78:30:2c:30:0b:fa:
         52:6c:b3:07:04:4e:68:bb:ad:64:77:23:af:e5:42:27:84:7e:
         3e:65:91:3c:09:ce:8e:a4:2d:42:f8:a4:06:4e:f6:fb:6d:b5:
         93:90:46:4c:60:a3:4b:48:6e:47:42:3c:72:14:5e:cb:9f:69:
         5d:45:20:2c:b3:74:95:06:48:91:84:ad:f5:08:b0:2c:62:02:
         62:03:93:2a:71:8b:be:d5:c2:f1:19:97:6e:c1:17:2d:75:3e:
         d4:4b:d9:14:c1:7b:fe:0a:a1:01:17:37:65:97:f6:ec:60:86:
         87:56:d3:d7:54:70:d4:e1:15:cc:7b:a0:fd:37:29:87:b6:bb:
         13:1b:39:8b:0a:86:94:15:52:4c:51:3f:1a:da:d6:07:d5:0f:
         a9:f2:5e:71:51:e3:2c:82:37:48:7b:33:28:05:c1:32:21:a1:
         b1:cd:0d:35:ec:eb:9b:9b:f8:ed:0f:05:33:ca:ae:98:fe:c6:
         5d:47:86:ed:d3:11:ad:a7:9a:4e:89:1a:6d:b1:61:82:ed:1d:
         03:47:81:98
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVq0kZ+ETLLhA9tl2Y4rImBJlZ8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE2RUJGOTkwNzZCMDlBNTFDQUU5QTNFMjFDOENDNUIy
RjY2MTEzMDAeFw0yNTAzMDUxNjUwMDBaFw0yNjAzMDQxNjU1MDBaMDMxMTAvBgNV
BAMTKEFDQzdDMkNFMjU5RjI1NzhBQzY2MTBDMDc1MjVCREU1MzI5MTIzNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi1npQbMSwhw5ciTmLmuyldC/
BQbd2dA+OlccL1BsFQimTmpG2dP+6AVCdl08cpXMYNO0ZDAxBA1t7rqWwnLmQRdN
PsvAx1HZcQ0p6CWc81QdDxuKFzAenj2+kACtJPyZHB66kWUxy8PKfiLYIR2to4Lg
H01AR3tIXqfbP3FyaVOsnjjXrJNbEAaDT5TeNCIh83qS++b8hXdZde2DVfn9e386
0nGo1k96jkkNuXYt8NrJaWs4KXfJpBmOOrxpkdi+nxZ2HZXwYSg90ZjEnpA1i1Fz
PDvdZX5TZt87MKvlXcSCZMTwkQZIUiNG0Q/rTAdWPu8Y9G551O1X/KMFrnPVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUrMfCziWfJXisZhDAdSW95TKRI1QwHwYDVR0j
BBgwFoAUmm6/mQdrCaUcrpo+IcjMWy9mETAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wOEFDMEFFMTg5REJCN0FDM0UyRDdDMTRGNUQ5MTlBODQ1
QkYxQjdGMkY3M0Y0OTcyOTREQ0MzRjk2QUFBMDA2LzAvOUE2RUJGOTkwNzZCMDlB
NTFDQUU5QTNFMjFDOENDNUIyRjY2MTEzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTZFQkY5OTA3NkIwOUE1MUNB
RTlBM0UyMUM4Q0M1QjJGNjYxMTMwLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDhBQzBBRTE4OURCQjdBQzNFMkQ3QzE0RjVEOTE5QTg0NUJGMUI3RjJG
NzNGNDk3Mjk0RENDM0Y5NkFBQTAwNi8wLzM0MzUyZTMyMzIzNjJlMzEzNzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3isDAN
BgkqhkiG9w0BAQsFAAOCAQEAYx9WjtR3/5sEoa4vivPWZmUPGQQT5xBtGUqNHxDY
AktXGIPuUkWqb6zsTA/JJKygeDAsMAv6UmyzBwROaLutZHcjr+VCJ4R+PmWRPAnO
jqQtQvikBk72+221k5BGTGCjS0huR0I8chRey59pXUUgLLN0lQZIkYSt9QiwLGIC
YgOTKnGLvtXC8RmXbsEXLXU+1EvZFMF7/gqhARc3ZZf27GCGh1bT11Rw1OEVzHug
/Tcph7a7Exs5iwqGlBVSTFE/GtrWB9UPqfJecVHjLII3SHszKAXBMiGhsc0NNezr
m5v47Q8FM8qumP7GXUeG7dMRraeaTokabbFhgu0dA0eBmA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:32 2025 by rpki-client