Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e34392e302f32342d3234203d3e203531323032.roa
File:                     34352e3137302e34392e302f32342d3234203d3e203531323032.roa (raw, json)
Hash identifier:          R9JjjtPv2ozrNEcA0HY1OSmsgKiJtk59ss7gLseiotM=
Subject key identifier:   CA:A3:1D:AC:9A:3A:EF:F4:2F:64:B4:25:F0:BA:29:DF:29:E2:1A:D6
Certificate issuer:       /CN=94FFF0F74069852BA7E1B9F60B3777259D539637
Certificate serial:       471DB4E1DD0FF792BA2FF075EEBC2A92E561EBB6
Authority key identifier: 94:FF:F0:F7:40:69:85:2B:A7:E1:B9:F6:0B:37:77:25:9D:53:96:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94FFF0F74069852BA7E1B9F60B3777259D539637.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e34392e302f32342d3234203d3e203531323032.roa
Signing time:             Sat 13 Jul 2024 16:20:00 +0000
ROA not before:           Sat 13 Jul 2024 16:15:00 +0000
ROA not after:            Sat 12 Jul 2025 16:20:00 +0000
asID:                     51202
IP address blocks:        45.170.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:1d:b4:e1:dd:0f:f7:92:ba:2f:f0:75:ee:bc:2a:92:e5:61:eb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FFF0F74069852BA7E1B9F60B3777259D539637
        Validity
            Not Before: Jul 13 16:15:00 2024 GMT
            Not After : Jul 12 16:20:00 2025 GMT
        Subject: CN=CAA31DAC9A3AEFF42F64B425F0BA29DF29E21AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:f2:c0:cc:fe:fa:ab:f9:ee:a3:ff:7e:68:
                    01:c2:c5:f3:1e:4f:ec:8b:aa:48:c8:75:38:3f:2f:
                    fb:88:0a:39:73:3c:63:2f:d5:f3:21:26:f9:ef:83:
                    83:a7:d8:df:57:2f:26:85:fa:88:59:98:23:79:8c:
                    f6:45:f3:60:b9:2b:e8:84:e1:98:cf:36:10:dd:1b:
                    b7:d5:2b:2a:a5:fc:a6:89:71:ef:46:32:23:bb:a9:
                    4e:2f:74:11:ad:7b:e3:af:71:bb:f1:5c:03:ff:db:
                    55:d1:16:33:08:9a:b1:d7:59:9c:9f:79:21:bb:4e:
                    1e:b1:a0:76:6d:c6:ec:ee:81:eb:18:6b:bb:98:56:
                    ef:dd:b8:fc:5c:f7:b4:bb:56:00:4e:0a:81:67:d7:
                    4b:c7:73:bd:7a:14:b7:d1:d9:b0:b5:b8:72:a8:5a:
                    b2:0a:9d:55:51:6a:d2:e3:c8:9a:57:8d:5d:1c:38:
                    f1:3b:e7:a1:b7:81:66:f4:89:ce:f2:e4:47:10:89:
                    04:6f:e5:9b:71:9a:b8:ac:14:ae:d3:8e:1a:28:23:
                    09:d4:3c:8c:15:f6:b7:51:dd:54:1a:f7:ba:41:22:
                    d0:73:89:e7:4d:79:60:cd:e6:ea:0e:a9:32:82:f9:
                    2d:dd:58:4e:e7:c5:64:fb:eb:ec:be:bc:c7:34:a2:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:1D:AC:9A:3A:EF:F4:2F:64:B4:25:F0:BA:29:DF:29:E2:1A:D6
            X509v3 Authority Key Identifier:
                keyid:94:FF:F0:F7:40:69:85:2B:A7:E1:B9:F6:0B:37:77:25:9D:53:96:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/94FFF0F74069852BA7E1B9F60B3777259D539637.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94FFF0F74069852BA7E1B9F60B3777259D539637.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BB91DF4D3A1B4F40F8D6ADE94FEAFCAB943DD914AB823C11175020CA4B64E23/0/34352e3137302e34392e302f32342d3234203d3e203531323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:f0:c0:f6:5d:32:0f:05:33:76:2f:8c:17:24:52:08:60:
         b5:65:fd:b7:03:a0:80:db:ff:6a:af:e4:e1:24:46:01:30:4b:
         3d:37:30:1b:e8:38:86:bd:cd:b6:5c:5f:9d:d2:2b:41:d7:34:
         7c:28:9a:1c:90:c6:9f:61:ff:d6:4f:fb:78:aa:33:0c:48:b4:
         dc:e7:ca:07:0f:e3:95:2f:c6:d3:62:46:17:c2:82:69:60:ff:
         2e:41:4c:52:00:0c:5c:cd:5c:71:89:d0:d2:6a:3e:df:45:83:
         b6:b4:b0:48:e5:f9:e3:fb:ff:54:f6:cc:bf:d6:ff:5f:13:11:
         59:d8:ba:81:11:01:f7:f5:8b:bd:6e:06:10:b6:06:e0:62:bd:
         9a:af:79:de:f9:fa:ab:17:d3:58:ba:ca:57:61:72:30:07:20:
         6e:4a:32:be:b1:b2:81:ae:8d:24:b1:b5:5d:91:73:e6:4e:8e:
         ce:aa:23:ec:7b:d1:60:10:82:c1:b9:62:68:2e:dc:4a:61:55:
         cb:8e:84:df:1a:07:45:5a:24:53:33:09:e1:b0:59:54:e6:b3:
         da:1e:1a:6c:4d:ab:96:ef:5f:9e:09:7a:81:60:63:3d:32:e5:
         1f:d0:e3:34:de:2c:9f:93:cc:6e:cf:b8:dc:5d:1c:d7:0e:16:
         82:23:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 24 19:37:41 2024 by rpki-client on console-ams.rpki-client.org