Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa
File:                     34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa (raw, json)
Hash identifier:          00QHCnhmXQ1VG4RphdiKc9rqhCyv5e4wyawaUJTCyfw=
Subject key identifier:   84:0C:89:47:04:34:4B:1A:AA:9D:73:4E:E3:A0:2C:32:08:41:A1:A9
Certificate issuer:       /CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39
Certificate serial:       7D1E735FF3120FBB5C304FD18EA0116FFC11FB91
Authority key identifier: 29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa
Signing time:             Tue 04 Feb 2025 18:22:53 +0000
ROA not before:           Tue 04 Feb 2025 18:17:53 +0000
ROA not after:            Tue 03 Feb 2026 18:22:53 +0000
asID:                     267828
IP address blocks:        45.173.216.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1e:73:5f:f3:12:0f:bb:5c:30:4f:d1:8e:a0:11:6f:fc:11:fb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39
        Validity
            Not Before: Feb  4 18:17:53 2025 GMT
            Not After : Feb  3 18:22:53 2026 GMT
        Subject: CN=840C894704344B1AAA9D734EE3A02C320841A1A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:08:23:52:db:e4:9f:53:fd:fb:7d:11:27:
                    e1:d3:f3:50:a1:99:4d:42:55:f9:f1:47:fa:b7:49:
                    b3:c7:23:e2:60:05:5e:ac:b6:34:5a:9b:86:f1:07:
                    68:1e:22:b4:a3:cc:3d:3d:39:95:69:09:43:a8:df:
                    d8:bd:b6:20:3e:56:58:32:ee:36:61:b8:1e:23:2f:
                    e9:9e:c2:f6:1d:70:44:73:2f:8e:f2:af:3e:5d:c5:
                    99:d3:ec:6c:00:ec:78:bb:b7:4a:4e:04:df:ae:df:
                    da:e8:d4:83:e5:79:53:1d:58:52:29:80:91:3d:0d:
                    ab:ab:27:ab:2a:b0:a8:84:42:96:a2:b5:83:75:fb:
                    ff:50:d5:55:21:35:a7:16:0d:76:5d:74:0a:f1:75:
                    ae:13:5f:2b:3c:c9:88:ad:e2:a5:37:37:0b:a2:a1:
                    74:f2:75:04:8b:ca:59:fd:ab:16:4a:85:30:f7:d3:
                    e5:d2:dc:36:6c:1c:f6:d7:65:3e:d3:d1:8d:c4:a6:
                    91:cf:c6:c0:93:c1:52:b7:4e:1b:3e:7e:1c:27:08:
                    21:68:69:e4:59:f1:d1:60:6e:5e:07:43:98:ae:01:
                    1d:32:c1:bb:37:15:dc:42:88:ad:a6:4a:c6:86:30:
                    fc:a0:03:26:bf:f9:2f:db:6b:46:13:64:1f:0e:2d:
                    3d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:89:47:04:34:4B:1A:AA:9D:73:4E:E3:A0:2C:32:08:41:A1:A9
            X509v3 Authority Key Identifier:
                keyid:29:89:35:C9:A4:3C:5C:9B:DC:9A:E1:F8:18:5B:FD:98:FF:1A:7B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/298935C9A43C5C9BDC9AE1F8185BFD98FF1A7B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E699A4AC5E7E33EA4631859F9725254302D1C195DE84573251829587A3BB466/0/34352e3137332e3231362e302f32322d3234203d3e20323637383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:cd:98:68:11:a5:7c:d1:71:46:1c:6f:ac:98:4a:df:2b:
         db:f8:84:23:d6:3f:29:6d:12:be:33:95:a8:d3:b8:7a:8c:f5:
         34:3c:bb:f4:59:73:73:9a:12:43:6f:72:d5:2a:91:db:98:57:
         87:69:6f:db:0f:3f:82:fd:cc:7d:93:c4:8f:7c:1d:ae:2f:82:
         44:9b:e2:fe:60:9f:7f:9d:0e:80:5c:25:15:e7:69:31:86:fe:
         b6:fe:6f:fa:54:09:e3:af:25:06:ae:9c:62:8a:9f:14:96:61:
         b4:1b:33:2f:d9:99:59:86:8a:10:d3:73:94:f0:51:1d:b4:d8:
         66:72:c9:cd:e8:77:97:72:9a:01:6c:8b:16:65:c0:e5:29:ab:
         df:5e:d8:9a:ae:73:92:f4:56:d9:d0:53:ae:56:98:2b:0b:e9:
         9b:2d:da:c9:d1:eb:de:56:79:9b:30:b9:ea:b3:4d:19:8d:01:
         02:2e:e0:0f:67:f0:12:1d:fa:c4:3f:6c:9a:56:5c:d0:a3:91:
         e8:08:b0:3b:24:71:b5:bd:ec:ea:74:d9:98:2a:a0:29:9d:a0:
         8f:45:57:fb:4f:86:e9:53:de:30:f5:10:d9:53:85:a8:b6:f7:
         34:ef:00:85:40:13:67:9d:75:5d:65:7b:ab:cf:47:93:30:8c:
         81:ab:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:35 2025 by rpki-client