Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34372e302f32342d3234203d3e20323636393032.roa
File:                     34352e3136312e34372e302f32342d3234203d3e20323636393032.roa (raw, json)
Hash identifier:          R49+wWAjZezXpnjFE7SoK205+j8QHF55FrOQnSN8YaY=
Subject key identifier:   B2:E7:6F:31:A9:8B:8C:37:78:D5:86:01:F8:1F:9A:F3:13:77:F5:AE
Certificate issuer:       /CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
Certificate serial:       4C540D5F1791AD26E4D85A9DD37F54B935C02AF7
Authority key identifier: 25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34372e302f32342d3234203d3e20323636393032.roa
Signing time:             Tue 04 Feb 2025 18:46:24 +0000
ROA not before:           Tue 04 Feb 2025 18:41:24 +0000
ROA not after:            Tue 03 Feb 2026 18:46:24 +0000
asID:                     266902
IP address blocks:        45.161.47.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:54:0d:5f:17:91:ad:26:e4:d8:5a:9d:d3:7f:54:b9:35:c0:2a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25F28EF0D0F93A528B35E07F04DCCD7C5C26406A
        Validity
            Not Before: Feb  4 18:41:24 2025 GMT
            Not After : Feb  3 18:46:24 2026 GMT
        Subject: CN=B2E76F31A98B8C3778D58601F81F9AF31377F5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:60:5e:9f:4a:5f:98:db:76:db:e4:6f:b3:
                    06:01:cd:bb:3a:90:20:01:72:c3:67:47:b6:af:a7:
                    6f:ab:5c:0e:1d:cb:af:6c:0d:4e:da:df:3d:db:6d:
                    2f:42:d9:6a:a7:e6:26:c8:1d:af:7c:d5:2f:21:d2:
                    69:44:19:bd:c9:29:9d:50:58:f7:99:9d:e6:4e:2a:
                    f9:c3:26:9b:d8:e1:e7:c9:04:b3:36:6f:48:57:91:
                    be:2f:03:5d:43:7b:9b:75:b3:50:ef:92:5d:08:98:
                    e7:de:f6:39:86:c7:7f:fd:dd:39:3a:c7:12:37:99:
                    91:58:0e:16:aa:a6:ff:53:18:06:19:ab:8f:ef:b9:
                    94:76:ce:ac:7f:41:a6:29:0c:46:e3:54:4d:46:4d:
                    59:9a:0c:34:46:2a:01:a5:25:64:bd:7c:05:d9:90:
                    10:75:b7:f0:c4:55:69:71:0d:29:32:4d:3e:33:92:
                    63:c3:28:81:26:5e:07:91:9b:c9:05:d0:11:11:0f:
                    08:bc:a4:76:59:85:d7:17:88:05:8e:fb:1d:75:ab:
                    7f:d7:09:93:e8:53:67:2a:e2:f1:10:40:d3:e3:bc:
                    24:4a:ff:e4:87:7e:2b:b3:e9:fe:e1:4d:7f:7b:cc:
                    3a:56:fe:bb:92:49:eb:89:57:49:19:6b:fb:42:29:
                    72:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E7:6F:31:A9:8B:8C:37:78:D5:86:01:F8:1F:9A:F3:13:77:F5:AE
            X509v3 Authority Key Identifier:
                keyid:25:F2:8E:F0:D0:F9:3A:52:8B:35:E0:7F:04:DC:CD:7C:5C:26:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25F28EF0D0F93A528B35E07F04DCCD7C5C26406A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17D97860CDD19F9076CFC79E0E2B503E423ADC428A944E28AE42021B437C0527/0/34352e3136312e34372e302f32342d3234203d3e20323636393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8a:0b:56:25:58:ce:75:ca:bb:72:c6:71:c3:2f:cf:76:8c:
         2b:10:37:b2:1b:3e:70:f8:34:fa:55:8f:65:e4:ce:fe:71:1e:
         16:33:19:41:bd:f8:81:be:ec:4c:aa:d7:24:68:1c:f4:96:3d:
         8e:91:11:72:3c:ae:ac:77:e8:7e:ba:29:45:81:be:fa:a0:ed:
         8c:58:d5:d8:c3:4e:c1:45:3a:26:ad:cd:29:eb:3f:a0:2c:07:
         86:9c:ac:8a:85:4d:44:13:2a:5d:59:bb:ed:6a:46:61:dc:63:
         87:c4:ef:bb:cb:4d:bf:0b:89:53:8b:26:d6:66:c0:00:4b:a5:
         d7:2f:b0:f3:b8:2d:af:77:9c:8d:93:78:e3:ca:f0:b8:88:56:
         d6:94:e0:ce:1c:98:93:d6:76:ad:a2:bf:af:58:d6:63:c0:d0:
         56:32:2a:26:72:4f:02:b6:61:f0:38:32:41:13:cc:2c:9b:5d:
         18:f5:d9:71:0c:77:e8:20:87:d1:5e:20:0b:a7:f4:29:a2:04:
         c1:6a:81:9a:62:f7:a1:76:b0:77:e6:86:01:39:71:58:a5:62:
         89:6e:9e:9f:0c:c8:12:f5:98:7d:5b:1c:ad:c2:f2:89:2b:62:
         47:42:f0:66:a8:36:50:17:55:82:fd:64:f0:99:a2:5c:a2:72:
         35:34:f3:7e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTFQNXxeRrSbk2Fqd039UuTXAKvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVGMjhFRjBEMEY5M0E1MjhCMzVFMDdGMDREQ0NEN0M1
QzI2NDA2QTAeFw0yNTAyMDQxODQxMjRaFw0yNjAyMDMxODQ2MjRaMDMxMTAvBgNV
BAMTKEIyRTc2RjMxQTk4QjhDMzc3OEQ1ODYwMUY4MUY5QUYzMTM3N0Y1QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyiGBen0pfmNt22+RvswYBzbs6
kCABcsNnR7avp2+rXA4dy69sDU7a3z3bbS9C2Wqn5ibIHa981S8h0mlEGb3JKZ1Q
WPeZneZOKvnDJpvY4efJBLM2b0hXkb4vA11De5t1s1Dvkl0ImOfe9jmGx3/93Tk6
xxI3mZFYDhaqpv9TGAYZq4/vuZR2zqx/QaYpDEbjVE1GTVmaDDRGKgGlJWS9fAXZ
kBB1t/DEVWlxDSkyTT4zkmPDKIEmXgeRm8kF0BERDwi8pHZZhdcXiAWO+x11q3/X
CZPoU2cq4vEQQNPjvCRK/+SHfiuz6f7hTX97zDpW/ruSSeuJV0kZa/tCKXIRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUsudvMamLjDd41YYB+B+a8xN39a4wHwYDVR0j
BBgwFoAUJfKO8ND5OlKLNeB/BNzNfFwmQGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0Q5Nzg2MENERDE5RjkwNzZDRkM3OUUwRTJCNTAzRTQy
M0FEQzQyOEE5NDRFMjhBRTQyMDIxQjQzN0MwNTI3LzAvMjVGMjhFRjBEMEY5M0E1
MjhCMzVFMDdGMDREQ0NEN0M1QzI2NDA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUYyOEVGMEQwRjkzQTUyOEIz
NUUwN0YwNERDQ0Q3QzVDMjY0MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdEOTc4NjBDREQxOUY5MDc2Q0ZDNzlFMEUyQjUwM0U0MjNBREM0MjhB
OTQ0RTI4QUU0MjAyMUI0MzdDMDUyNy8wLzM0MzUyZTMxMzYzMTJlMzQzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2hLzAN
BgkqhkiG9w0BAQsFAAOCAQEAs4oLViVYznXKu3LGccMvz3aMKxA3shs+cPg0+lWP
ZeTO/nEeFjMZQb34gb7sTKrXJGgc9JY9jpERcjyurHfofropRYG++qDtjFjV2MNO
wUU6Jq3NKes/oCwHhpysioVNRBMqXVm77WpGYdxjh8Tvu8tNvwuJU4sm1mbAAEul
1y+w87gtr3ecjZN448rwuIhW1pTgzhyYk9Z2raK/r1jWY8DQVjIqJnJPArZh8Dgy
QRPMLJtdGPXZcQx36CCH0V4gC6f0KaIEwWqBmmL3oXawd+aGATlxWKViiW6enwzI
EvWYfVscrcLyiStiR0LwZqg2UBdVgv1k8JmiXKJyNTTzfg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:46 2025 by rpki-client