Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa
File:                     34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa (raw, json)
Hash identifier:          t87nqvN0z75I9Q7P+3M3rcpvyPEvDPhvFpKR6/3iXZA=
Subject key identifier:   3E:D6:CF:38:A2:B4:64:F9:E5:40:73:0D:4C:08:B2:93:09:33:7A:15
Certificate issuer:       /CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
Certificate serial:       1404C07E23F948BD61A1CFC0B1C7D06796716993
Authority key identifier: A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa
Signing time:             Fri 06 Dec 2024 19:40:00 +0000
ROA not before:           Fri 06 Dec 2024 19:35:00 +0000
ROA not after:            Fri 05 Dec 2025 19:40:00 +0000
asID:                     273133
IP address blocks:        45.171.166.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:04:c0:7e:23:f9:48:bd:61:a1:cf:c0:b1:c7:d0:67:96:71:69:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E3E992F10C16F74B23F741B96CFA7F84656F28
        Validity
            Not Before: Dec  6 19:35:00 2024 GMT
            Not After : Dec  5 19:40:00 2025 GMT
        Subject: CN=3ED6CF38A2B464F9E540730D4C08B29309337A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fb:c0:90:c1:95:08:bf:90:7d:00:7b:69:9c:
                    69:50:85:54:d8:b0:9a:82:4f:09:74:64:8e:42:d7:
                    a3:41:20:f2:b6:c5:ba:c6:04:1b:d2:c7:28:ad:43:
                    56:74:f7:79:42:e7:17:ad:65:21:79:fe:96:f7:85:
                    18:26:a5:45:e8:79:e7:e7:6b:24:72:b0:2e:5b:8c:
                    52:ad:58:fb:76:ca:9c:42:8c:bf:19:91:eb:46:ee:
                    da:dd:c0:4c:80:20:2f:9c:ec:06:8d:66:e1:85:86:
                    78:88:67:86:ed:a2:dd:d2:b9:4a:b1:4b:52:c1:19:
                    9a:7d:3e:f3:3a:e8:53:e9:be:af:68:43:39:61:f6:
                    d1:d0:c5:74:4a:d2:75:c8:70:57:e5:0b:d6:87:45:
                    b6:e1:62:95:9d:eb:4f:34:e6:ff:d4:ef:8b:00:2d:
                    ec:7c:16:5e:79:ad:f1:f5:b0:a0:23:36:e8:1b:38:
                    c6:50:2b:b2:40:32:89:58:89:be:58:de:9f:af:c6:
                    18:e8:a8:6c:a4:2c:2f:86:12:c3:c3:f8:18:f3:ed:
                    c8:ba:39:fe:24:b1:83:e3:fa:2c:3d:77:95:b2:ce:
                    dd:70:02:5a:a0:fa:60:06:46:6e:1a:39:6e:4f:f3:
                    ef:d3:aa:4c:c4:e4:1d:2f:f8:19:99:ac:1d:04:ff:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D6:CF:38:A2:B4:64:F9:E5:40:73:0D:4C:08:B2:93:09:33:7A:15
            X509v3 Authority Key Identifier:
                keyid:A6:E3:E9:92:F1:0C:16:F7:4B:23:F7:41:B9:6C:FA:7F:84:65:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6E3E992F10C16F74B23F741B96CFA7F84656F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1845A546D5B0CAE3734673D2947477A1B97E58E2EA1914CAE9D954B6AD77F3F4/0/34352e3137312e3136362e302f32342d3234203d3e20323733313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c3:a2:b9:7d:86:b0:82:7d:65:53:91:83:60:41:71:fd:76:
         fa:ed:94:64:ff:a0:77:8f:9e:fa:c6:59:79:ed:2d:7e:c7:0b:
         e4:49:6c:2c:ca:41:87:f9:c4:bc:00:aa:d3:1e:6a:04:e8:54:
         ba:27:a9:c6:71:f9:3d:30:5b:34:03:af:53:3e:67:99:8e:9d:
         f6:1f:24:c4:9f:a6:9f:3c:8d:ff:16:47:63:32:3d:b0:ba:10:
         45:d2:6a:c8:84:47:82:9e:eb:4f:8d:a3:5e:36:9d:1b:22:cc:
         d2:c5:61:24:b5:91:99:4e:f1:f5:31:25:eb:c3:cc:41:87:d2:
         8e:7b:14:78:56:98:51:4b:25:92:13:c9:db:f3:59:a1:ab:de:
         2f:23:20:8c:1b:72:5d:12:a8:6f:a2:56:10:04:f6:15:44:d9:
         da:01:0d:73:69:e0:0f:76:42:2a:32:53:5c:3a:ad:af:8d:4f:
         72:50:ab:18:63:b3:db:fa:a1:2b:c0:b6:96:2a:ff:11:c0:5b:
         21:2c:e1:cb:77:12:9a:7c:d9:f1:ce:9e:72:5e:40:24:1d:0c:
         8e:8b:8e:92:44:97:7c:d3:80:a0:2e:45:2b:7c:ef:87:3c:ba:
         15:78:81:39:b4:df:ec:5d:52:b4:61:b3:b0:34:7a:f4:bc:34:
         4b:d3:df:dc
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFATAfiP5SL1hoc/AscfQZ5ZxaZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTZFM0U5OTJGMTBDMTZGNzRCMjNGNzQxQjk2Q0ZBN0Y4
NDY1NkYyODAeFw0yNDEyMDYxOTM1MDBaFw0yNTEyMDUxOTQwMDBaMDMxMTAvBgNV
BAMTKDNFRDZDRjM4QTJCNDY0RjlFNTQwNzMwRDRDMDhCMjkzMDkzMzdBMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc+8CQwZUIv5B9AHtpnGlQhVTY
sJqCTwl0ZI5C16NBIPK2xbrGBBvSxyitQ1Z093lC5xetZSF5/pb3hRgmpUXoeefn
ayRysC5bjFKtWPt2ypxCjL8ZketG7trdwEyAIC+c7AaNZuGFhniIZ4btot3SuUqx
S1LBGZp9PvM66FPpvq9oQzlh9tHQxXRK0nXIcFflC9aHRbbhYpWd60805v/U74sA
Lex8Fl55rfH1sKAjNugbOMZQK7JAMolYib5Y3p+vxhjoqGykLC+GEsPD+Bjz7ci6
Of4ksYPj+iw9d5Wyzt1wAlqg+mAGRm4aOW5P8+/TqkzE5B0v+BmZrB0E/693AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUPtbPOKK0ZPnlQHMNTAiykwkzehUwHwYDVR0j
BBgwFoAUpuPpkvEMFvdLI/dBuWz6f4RlbygwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xODQ1QTU0NkQ1QjBDQUUzNzM0NjczRDI5NDc0NzdBMUI5
N0U1OEUyRUExOTE0Q0FFOUQ5NTRCNkFENzdGM0Y0LzAvQTZFM0U5OTJGMTBDMTZG
NzRCMjNGNzQxQjk2Q0ZBN0Y4NDY1NkYyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNkUzRTk5MkYxMEMxNkY3NEIy
M0Y3NDFCOTZDRkE3Rjg0NjU2RjI4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTg0NUE1NDZENUIwQ0FFMzczNDY3M0QyOTQ3NDc3QTFCOTdFNThFMkVB
MTkxNENBRTlEOTU0QjZBRDc3RjNGNC8wLzM0MzUyZTMxMzczMTJlMzEzNjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMzMzEzMzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaum
MA0GCSqGSIb3DQEBCwUAA4IBAQCZw6K5fYawgn1lU5GDYEFx/Xb67ZRk/6B3j576
xll57S1+xwvkSWwsykGH+cS8AKrTHmoE6FS6J6nGcfk9MFs0A69TPmeZjp32HyTE
n6afPI3/FkdjMj2wuhBF0mrIhEeCnutPjaNeNp0bIszSxWEktZGZTvH1MSXrw8xB
h9KOexR4VphRSyWSE8nb81mhq94vIyCMG3JdEqhvolYQBPYVRNnaAQ1zaeAPdkIq
MlNcOq2vjU9yUKsYY7Pb+qErwLaWKv8RwFshLOHLdxKafNnxzp5yXkAkHQyOi46S
RJd804CgLkUrfO+HPLoVeIE5tN/sXVK0YbOwNHr0vDRL09/c
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:14 2025 by rpki-client