Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/34352e3137392e39322e302f32322d3234203d3e20323637393133.roa
File:                     34352e3137392e39322e302f32322d3234203d3e20323637393133.roa (raw, json)
Hash identifier:          3Sp05B4/LDMcFHMXbdW2rA0qIl4XRF2VO8sOuqM0SYc=
Subject key identifier:   CE:4F:31:AD:59:E7:D3:F8:9A:D8:6B:D6:DC:61:0C:67:E2:6D:D1:01
Certificate issuer:       /CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
Certificate serial:       32C52E020492988A2314D50360EA8B2449D8720B
Authority key identifier: 4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/34352e3137392e39322e302f32322d3234203d3e20323637393133.roa
Signing time:             Tue 04 Feb 2025 18:10:13 +0000
ROA not before:           Tue 04 Feb 2025 18:05:13 +0000
ROA not after:            Tue 03 Feb 2026 18:10:13 +0000
asID:                     267913
IP address blocks:        45.179.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c5:2e:02:04:92:98:8a:23:14:d5:03:60:ea:8b:24:49:d8:72:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE
        Validity
            Not Before: Feb  4 18:05:13 2025 GMT
            Not After : Feb  3 18:10:13 2026 GMT
        Subject: CN=CE4F31AD59E7D3F89AD86BD6DC610C67E26DD101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:3e:b9:55:cf:f6:80:0e:af:9d:02:93:07:
                    6e:95:a0:5c:a6:8a:f7:71:9a:32:71:69:a3:10:20:
                    5f:f3:3b:f9:b2:b0:f5:d3:64:99:36:17:97:00:19:
                    c4:55:d1:66:91:16:8d:48:0b:a0:a6:67:03:66:8a:
                    17:9f:8f:f5:68:57:0d:a1:4b:ce:6d:fe:60:ef:8f:
                    b5:28:cd:d8:1d:86:fc:96:4d:07:21:7d:4b:fe:3c:
                    ca:d6:c0:c6:cb:b5:0e:d3:58:13:e2:6a:96:12:af:
                    fc:6d:2c:32:de:97:3a:31:57:6a:b5:1f:af:80:5d:
                    2c:0c:9c:70:39:3b:71:14:3a:55:04:28:90:99:9f:
                    78:2f:30:76:22:75:7b:11:46:6d:2e:6d:ce:95:5f:
                    ab:4c:78:49:ce:fd:3e:de:86:b9:64:d7:d4:9c:14:
                    94:82:a1:75:6f:a6:a5:5f:c1:f5:d6:e0:58:ae:7a:
                    3c:84:79:80:71:0e:62:9c:35:12:ee:89:4d:40:11:
                    af:36:68:ec:f9:cf:da:84:ae:6c:e9:a7:66:f6:38:
                    b5:65:72:37:83:5b:54:cc:a4:ed:1f:89:1d:0b:ff:
                    2d:aa:3f:bb:5a:d3:71:53:c2:d7:30:8d:d6:e6:0a:
                    90:49:b1:e2:76:ec:1a:09:f6:20:b2:e1:fe:af:48:
                    78:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4F:31:AD:59:E7:D3:F8:9A:D8:6B:D6:DC:61:0C:67:E2:6D:D1:01
            X509v3 Authority Key Identifier:
                keyid:4A:AC:30:C2:DB:C3:1A:CD:C2:E2:45:55:F5:03:1C:3C:F6:BA:0D:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4AAC30C2DBC31ACDC2E24555F5031C3CF6BA0DEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D66001E7DE8844AED0AB420C5E09E69C547C86AB3AD69ADB24326A536315EA3/0/34352e3137392e39322e302f32322d3234203d3e20323637393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:7f:e8:10:81:f9:c4:9f:87:35:9b:9a:cd:b9:5e:71:1c:67:
         31:01:7d:3f:8b:71:e5:8f:aa:80:21:cd:11:9a:79:d8:2d:af:
         7d:dd:4f:c9:99:8d:49:78:a8:91:79:7d:71:77:e0:8d:0e:4d:
         6e:0e:17:9a:cd:1b:6d:23:8c:bc:1f:76:f4:bf:07:6f:bd:1f:
         24:73:b5:f4:b4:4d:13:9e:f5:77:cb:54:21:a6:84:65:71:cf:
         7e:2c:a7:38:e7:24:d3:9e:2b:48:57:3c:d9:cc:01:b6:45:43:
         e6:66:ab:b4:f6:81:62:35:1c:e4:a4:32:8e:dd:c0:3a:4e:31:
         d4:2d:b0:b3:2b:85:ba:65:ab:66:49:82:62:3e:99:bf:2a:5c:
         fa:05:ac:0a:a7:09:02:83:22:7b:6f:e1:5e:5c:b7:85:61:8d:
         19:a7:b8:d4:2a:72:d6:fe:02:78:b9:60:2e:5d:ec:da:5b:83:
         3e:3e:e2:9d:fb:bb:a9:8b:c2:f1:f6:3a:0b:8d:74:ce:f1:e4:
         dc:82:05:7b:6c:9b:12:f8:ba:27:31:92:84:17:cf:68:85:00:
         7e:58:48:9c:1c:bb:a7:a1:f6:ac:fa:15:05:81:52:57:80:8a:
         2d:e1:63:0a:56:df:8a:ec:2d:01:1f:09:be:de:f6:05:d1:1d:
         3d:83:0f:3d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMsUuAgSSmIojFNUDYOqLJEnYcgswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFBQzMwQzJEQkMzMUFDREMyRTI0NTU1RjUwMzFDM0NG
NkJBMERFRTAeFw0yNTAyMDQxODA1MTNaFw0yNjAyMDMxODEwMTNaMDMxMTAvBgNV
BAMTKENFNEYzMUFENTlFN0QzRjg5QUQ4NkJENkRDNjEwQzY3RTI2REQxMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yD65Vc/2gA6vnQKTB26VoFym
ivdxmjJxaaMQIF/zO/mysPXTZJk2F5cAGcRV0WaRFo1IC6CmZwNmihefj/VoVw2h
S85t/mDvj7UozdgdhvyWTQchfUv+PMrWwMbLtQ7TWBPiapYSr/xtLDLelzoxV2q1
H6+AXSwMnHA5O3EUOlUEKJCZn3gvMHYidXsRRm0ubc6VX6tMeEnO/T7ehrlk19Sc
FJSCoXVvpqVfwfXW4FiuejyEeYBxDmKcNRLuiU1AEa82aOz5z9qErmzpp2b2OLVl
cjeDW1TMpO0fiR0L/y2qP7ta03FTwtcwjdbmCpBJseJ27BoJ9iCy4f6vSHjjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUzk8xrVnn0/ia2GvW3GEMZ+Jt0QEwHwYDVR0j
BBgwFoAUSqwwwtvDGs3C4kVV9QMcPPa6De4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDY2MDAxRTdERTg4NDRBRUQwQUI0MjBDNUUwOUU2OUM1
NDdDODZBQjNBRDY5QURCMjQzMjZBNTM2MzE1RUEzLzAvNEFBQzMwQzJEQkMzMUFD
REMyRTI0NTU1RjUwMzFDM0NGNkJBMERFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80QUFDMzBDMkRCQzMxQUNEQzJF
MjQ1NTVGNTAzMUMzQ0Y2QkEwREVFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ2NjAwMUU3REU4ODQ0QUVEMEFCNDIwQzVFMDlFNjlDNTQ3Qzg2QUIz
QUQ2OUFEQjI0MzI2QTUzNjMxNUVBMy8wLzM0MzUyZTMxMzczOTJlMzkzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM5MzEzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2zXDAN
BgkqhkiG9w0BAQsFAAOCAQEAnX/oEIH5xJ+HNZuazblecRxnMQF9P4tx5Y+qgCHN
EZp52C2vfd1PyZmNSXiokXl9cXfgjQ5Nbg4Xms0bbSOMvB929L8Hb70fJHO19LRN
E571d8tUIaaEZXHPfiynOOck054rSFc82cwBtkVD5martPaBYjUc5KQyjt3AOk4x
1C2wsyuFumWrZkmCYj6Zvypc+gWsCqcJAoMie2/hXly3hWGNGae41Cpy1v4CeLlg
Ll3s2luDPj7infu7qYvC8fY6C410zvHk3IIFe2ybEvi6JzGShBfPaIUAflhInBy7
p6H2rPoVBYFSV4CKLeFjClbfiuwtAR8Jvt72BdEdPYMPPQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:13:37 2025 by rpki-client