Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa
File:                     34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa (raw, json)
Hash identifier:          TdAfWSwdY/Xm2FnDIsaS7D9lZJaH5qO7GSWGEa7NFCo=
Subject key identifier:   D4:4B:82:39:6F:F0:E5:F2:67:37:81:B9:C9:43:70:B0:ED:C3:85:44
Certificate issuer:       /CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
Certificate serial:       467EDBC9F94C0E072EB3780090240D518DF8582F
Authority key identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa
Signing time:             Fri 14 Feb 2025 14:09:49 +0000
ROA not before:           Fri 14 Feb 2025 14:04:49 +0000
ROA not after:            Fri 13 Feb 2026 14:09:49 +0000
asID:                     266793
IP address blocks:        45.234.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:7e:db:c9:f9:4c:0e:07:2e:b3:78:00:90:24:0d:51:8d:f8:58:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E840FECAB68344FF2B11C283CC52BA203CF728F
        Validity
            Not Before: Feb 14 14:04:49 2025 GMT
            Not After : Feb 13 14:09:49 2026 GMT
        Subject: CN=D44B82396FF0E5F2673781B9C94370B0EDC38544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:3a:f4:5b:3b:29:b2:f5:6a:e8:8e:d0:03:
                    79:f8:32:1a:6c:1c:f0:26:fe:b7:23:00:94:98:34:
                    f0:0a:2d:51:7f:6c:4d:05:fd:4b:ff:0d:4f:a4:47:
                    42:a1:a1:74:d3:31:97:64:12:73:cf:df:d7:1e:ea:
                    c2:a7:80:0e:03:41:4b:33:a3:18:c9:79:bd:c0:84:
                    b9:74:86:bc:ff:f0:ab:46:22:b0:ca:38:2e:11:19:
                    a1:b7:f6:ae:c9:9f:f3:e2:73:9c:a1:ac:d9:dc:3f:
                    9b:c4:17:fe:9d:22:af:1e:d7:37:84:db:1c:49:5b:
                    f2:e3:f1:76:68:fc:ff:0b:c8:6c:a3:70:25:e7:c5:
                    98:d8:52:b6:dc:07:cc:9f:81:c4:dc:45:d2:8f:8a:
                    de:37:bd:32:24:bf:e4:ab:16:c9:96:25:e0:29:f8:
                    00:f2:92:09:c5:02:15:d1:89:33:fe:13:c7:30:7a:
                    50:24:88:55:d6:86:ad:cf:69:c4:f8:6d:0e:86:cd:
                    84:35:e4:ae:0d:66:f4:b8:1d:f1:d9:f3:6b:91:41:
                    4c:71:1e:95:18:e2:67:a6:c1:3a:8a:97:cd:61:c9:
                    d3:9f:54:15:1e:8c:f8:7f:25:a9:e2:be:76:57:96:
                    12:c0:be:3f:fa:19:ef:86:8d:c1:af:f4:4c:4f:8f:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4B:82:39:6F:F0:E5:F2:67:37:81:B9:C9:43:70:B0:ED:C3:85:44
            X509v3 Authority Key Identifier:
                keyid:6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/34352e3233342e3136312e302f32342d3234203d3e20323636373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:68:62:c6:a5:d4:f1:d5:61:12:57:86:0f:72:07:a1:3c:67:
         ee:71:7b:11:4f:9b:d9:04:3a:dc:6e:a8:db:01:42:62:a1:52:
         5d:8a:75:95:d3:fd:05:da:7e:69:bb:a7:dc:6e:89:e2:0d:aa:
         f2:a6:81:d9:9b:35:a1:5f:06:aa:a4:3a:83:d5:3f:f6:02:1b:
         4b:c3:51:c3:9d:25:91:31:87:b9:b7:95:25:60:56:2e:7e:02:
         79:eb:9e:5b:04:60:8e:44:0a:f7:c2:5d:2a:de:31:5e:90:41:
         f5:0e:e9:66:70:d3:08:09:c2:40:7e:8a:83:97:f2:a0:69:71:
         e2:53:00:c1:04:7b:db:4e:f2:c7:15:57:17:60:ac:30:5a:70:
         e5:69:b4:61:6a:4d:87:c9:71:55:da:21:50:7c:ce:75:81:d8:
         8e:53:b4:c2:92:3b:fe:3f:9c:5a:35:11:15:68:d9:8f:05:16:
         49:1f:21:5f:f2:7a:be:a4:b9:00:09:09:11:29:19:b8:3e:ac:
         02:fc:a3:24:65:a2:4b:85:73:58:e2:2c:cd:d8:7b:7e:1c:2b:
         10:82:ec:00:0c:aa:1d:c6:7f:69:24:23:01:e3:36:e6:91:43:
         f8:c0:d8:8a:36:55:04:e3:97:f4:0b:11:32:93:39:23:ef:32:
         df:71:95:c8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURn7byflMDgcus3gAkCQNUY34WC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU4NDBGRUNBQjY4MzQ0RkYyQjExQzI4M0NDNTJCQTIw
M0NGNzI4RjAeFw0yNTAyMTQxNDA0NDlaFw0yNjAyMTMxNDA5NDlaMDMxMTAvBgNV
BAMTKEQ0NEI4MjM5NkZGMEU1RjI2NzM3ODFCOUM5NDM3MEIwRURDMzg1NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ETr0WzspsvVq6I7QA3n4Mhps
HPAm/rcjAJSYNPAKLVF/bE0F/Uv/DU+kR0KhoXTTMZdkEnPP39ce6sKngA4DQUsz
oxjJeb3AhLl0hrz/8KtGIrDKOC4RGaG39q7Jn/Pic5yhrNncP5vEF/6dIq8e1zeE
2xxJW/Lj8XZo/P8LyGyjcCXnxZjYUrbcB8yfgcTcRdKPit43vTIkv+SrFsmWJeAp
+ADykgnFAhXRiTP+E8cwelAkiFXWhq3PacT4bQ6GzYQ15K4NZvS4HfHZ82uRQUxx
HpUY4memwTqKl81hydOfVBUejPh/JanivnZXlhLAvj/6Ge+GjcGv9ExPj3IBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU1EuCOW/w5fJnN4G5yUNwsO3DhUQwHwYDVR0j
BBgwFoAUboQP7KtoNE/ysRwoPMUrogPPco8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQTkzNzg0NkY3QTlDQjlEODMxMzE1RDc0MjVEQjlCNjhE
RUIwNEM0QzAwQUY2Qzg5MzI3RDAxQkFEMTRGMEFBLzAvNkU4NDBGRUNBQjY4MzQ0
RkYyQjExQzI4M0NDNTJCQTIwM0NGNzI4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82RTg0MEZFQ0FCNjgzNDRGRjJC
MTFDMjgzQ0M1MkJBMjAzQ0Y3MjhGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEE5Mzc4NDZGN0E5Q0I5RDgzMTMxNUQ3NDI1REI5QjY4REVCMDRDNEMw
MEFGNkM4OTMyN0QwMUJBRDE0RjBBQS8wLzM0MzUyZTMyMzMzNDJlMzEzNjMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczOTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeqh
MA0GCSqGSIb3DQEBCwUAA4IBAQARaGLGpdTx1WESV4YPcgehPGfucXsRT5vZBDrc
bqjbAUJioVJdinWV0/0F2n5pu6fcboniDarypoHZmzWhXwaqpDqD1T/2AhtLw1HD
nSWRMYe5t5UlYFYufgJ5655bBGCORAr3wl0q3jFekEH1DulmcNMICcJAfoqDl/Kg
aXHiUwDBBHvbTvLHFVcXYKwwWnDlabRhak2HyXFV2iFQfM51gdiOU7TCkjv+P5xa
NREVaNmPBRZJHyFf8nq+pLkACQkRKRm4PqwC/KMkZaJLhXNY4izN2Ht+HCsQguwA
DKodxn9pJCMB4zbmkUP4wNiKNlUE45f0CxEykzkj7zLfcZXI
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:36 2025 by rpki-client