Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32342d3234203d3e20323636383536.roa
File:                     34352e3233392e3136302e302f32342d3234203d3e20323636383536.roa (raw, json)
Hash identifier:          zn6DV+xZ6EcULdGAISYQlEqJd2OZ9EuOQzXsNTEUE0M=
Subject key identifier:   3A:82:65:49:AF:89:F4:DC:ED:73:69:BE:0C:A6:70:61:34:01:2B:B5
Certificate issuer:       /CN=76799C3E256CD774538C329B5B66813C321D7693
Certificate serial:       7EBB49A2107FE1AFAE898CECC3BCC8A01BB4249E
Authority key identifier: 76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32342d3234203d3e20323636383536.roa
Signing time:             Tue 04 Feb 2025 18:49:57 +0000
ROA not before:           Tue 04 Feb 2025 18:44:57 +0000
ROA not after:            Tue 03 Feb 2026 18:49:57 +0000
asID:                     266856
IP address blocks:        45.239.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bb:49:a2:10:7f:e1:af:ae:89:8c:ec:c3:bc:c8:a0:1b:b4:24:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76799C3E256CD774538C329B5B66813C321D7693
        Validity
            Not Before: Feb  4 18:44:57 2025 GMT
            Not After : Feb  3 18:49:57 2026 GMT
        Subject: CN=3A826549AF89F4DCED7369BE0CA6706134012BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:90:8d:90:d9:03:6c:de:73:3d:58:bc:39:
                    e8:80:25:87:fd:47:8e:16:fe:46:42:b7:68:fd:28:
                    f1:27:90:1b:27:ab:99:04:c9:78:f3:94:10:b1:b9:
                    2e:7f:1a:bc:67:e8:7f:0c:6d:40:54:20:b0:8a:6f:
                    94:8b:df:a3:99:1a:17:85:f0:e7:f5:f6:cc:69:75:
                    d3:5a:06:c9:4d:89:9f:9d:2c:7d:3f:58:9b:f6:a8:
                    00:2f:c7:d6:90:74:33:c5:aa:79:00:a7:7c:98:e3:
                    e2:2b:51:28:21:9d:02:e2:57:ec:20:07:3c:c7:41:
                    42:b2:d7:4f:ae:0c:15:d9:85:25:0a:b5:72:38:2b:
                    4f:52:ee:fc:af:29:61:2b:18:c9:42:29:9b:b1:9f:
                    fa:7f:d5:ee:c6:58:da:51:9a:66:81:b3:d0:e8:3d:
                    2b:a4:74:c8:65:97:80:d0:6d:cd:c8:73:cd:e5:c3:
                    33:4c:1f:11:31:6e:b7:45:8c:ec:59:a1:f1:e1:18:
                    33:37:e1:ef:d2:85:18:2e:9c:b5:38:a7:1b:83:12:
                    54:61:cc:74:fc:51:0e:5c:4a:29:b6:74:66:76:d8:
                    72:4c:60:91:5c:00:25:f8:11:2f:0e:ca:64:15:5f:
                    e4:8a:5f:6f:57:77:01:34:b1:e7:a7:06:97:da:9c:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:65:49:AF:89:F4:DC:ED:73:69:BE:0C:A6:70:61:34:01:2B:B5
            X509v3 Authority Key Identifier:
                keyid:76:79:9C:3E:25:6C:D7:74:53:8C:32:9B:5B:66:81:3C:32:1D:76:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/76799C3E256CD774538C329B5B66813C321D7693.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/76799C3E256CD774538C329B5B66813C321D7693.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F70F01BA0E68A3508932A0015F236DCFAB3B2E5054F5FD0EF7F271069CFC7C4/0/34352e3233392e3136302e302f32342d3234203d3e20323636383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:06:29:ae:27:64:49:1e:92:05:25:5a:3f:7c:7d:57:f2:
         4a:7b:7f:6e:5d:84:53:f7:4f:9c:f5:cd:bb:ba:ad:b7:da:5e:
         ca:b9:6f:30:37:da:dd:55:f6:c2:86:00:9e:1f:cf:e1:1f:09:
         e7:75:ca:ab:c5:92:34:7c:e5:25:92:a9:3d:55:0f:97:3e:d1:
         e5:8e:7e:ba:d2:e7:b6:b7:56:77:06:24:ea:5b:1a:e9:5a:06:
         c7:dd:44:ff:72:24:e0:f7:06:fe:56:04:2c:e5:1c:33:7d:e8:
         b2:06:62:a1:26:6f:96:bd:bd:3a:de:fd:68:fd:b5:64:cd:fa:
         a2:d4:fe:5c:f7:85:5b:31:2d:71:05:0b:cb:1d:d3:f1:d8:b3:
         11:70:b5:88:bb:46:0a:a9:f5:82:38:4a:ee:51:ef:94:1e:77:
         ed:fc:f9:2c:fd:2c:86:6c:3f:26:b9:d8:ec:1c:a9:2c:2e:b5:
         32:1c:39:d4:92:c9:c1:23:1d:6c:1e:84:6d:2c:a6:9d:8a:0a:
         fa:38:7d:82:68:79:91:93:50:29:8d:16:28:02:c3:73:6f:2d:
         47:8b:fd:38:61:1d:8c:ab:d9:ef:26:32:d5:2d:af:32:7b:cf:
         57:21:01:03:b5:32:1e:c7:20:3b:e1:6f:71:76:48:e2:50:30:
         13:cf:f4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:07:44 2025 by rpki-client