Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138322e302f32342d3234203d3e20323632313836.roa
File:                     34352e37312e3138322e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          fwIJ0pFijoU7bvvfJrp3uhFtNShRJE+KvqCuWmfFrAc=
Subject key identifier:   E5:D9:1C:0F:71:96:F1:00:00:87:5F:58:78:B7:E0:B2:90:84:40:21
Certificate issuer:       /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial:       7D1855169CE44BC8D844BC5941BD1FEDB1532FBD
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138322e302f32342d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:52:08 +0000
ROA not before:           Tue 04 Feb 2025 18:47:08 +0000
ROA not after:            Tue 03 Feb 2026 18:52:08 +0000
asID:                     262186
IP address blocks:        45.71.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:18:55:16:9c:e4:4b:c8:d8:44:bc:59:41:bd:1f:ed:b1:53:2f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
        Validity
            Not Before: Feb  4 18:47:08 2025 GMT
            Not After : Feb  3 18:52:08 2026 GMT
        Subject: CN=E5D91C0F7196F10000875F5878B7E0B290844021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:10:c7:85:88:64:0b:86:c3:d9:e9:46:90:
                    fb:f1:fe:d9:19:20:25:86:29:94:f5:f2:9b:0e:7f:
                    04:35:e9:60:f6:33:1c:8f:ff:d4:6e:c5:47:fc:99:
                    6d:1d:1d:34:74:d2:35:af:e7:e9:11:2b:d4:75:4b:
                    ee:41:dc:80:b3:a0:d1:31:3e:2f:66:20:3b:b0:04:
                    e0:fc:28:bb:a7:44:be:41:4b:13:23:a1:99:91:06:
                    96:41:8d:4f:93:3d:c6:91:03:83:c3:5c:65:74:8d:
                    95:9e:29:7e:56:be:30:59:a9:e3:51:54:05:93:f1:
                    17:f0:7f:d4:6a:9e:95:4f:13:46:61:33:7b:fb:90:
                    b6:02:ee:0e:16:d9:5e:b2:b6:1d:fe:28:d3:f3:8b:
                    73:b4:3d:4d:62:30:67:56:76:12:8c:f4:b5:e9:01:
                    22:8c:a2:df:2c:23:2e:63:30:87:58:9e:78:6d:a9:
                    9b:82:83:1b:a8:1c:e9:74:28:8b:9f:d5:2e:75:b8:
                    36:85:26:76:e0:6f:de:91:54:eb:b1:dd:7a:c4:3b:
                    c6:48:31:d3:cc:c5:de:0a:3d:76:cd:f9:8c:b3:ab:
                    a4:9b:22:d9:df:4b:f9:cb:68:d7:21:a0:7d:82:88:
                    12:b3:19:3c:cd:bf:4c:47:20:7c:5c:bc:4b:31:97:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D9:1C:0F:71:96:F1:00:00:87:5F:58:78:B7:E0:B2:90:84:40:21
            X509v3 Authority Key Identifier:
                keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138322e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:78:68:46:92:03:c5:98:4d:61:10:79:0f:ad:d9:90:d4:f8:
         7b:30:09:e0:d5:93:95:2e:30:88:13:9e:ef:64:8e:b7:5e:00:
         12:0b:c8:a6:97:5a:a6:64:5e:02:17:cc:b9:fe:b7:e4:5e:5e:
         28:b6:23:88:76:e4:2d:db:c9:f0:5b:9e:75:2d:12:a6:97:a2:
         6b:e7:4e:a5:bd:5b:0e:65:f0:5a:8f:9c:07:9a:9e:7d:50:a0:
         09:32:80:93:e4:b6:ea:b9:86:77:02:51:9b:5c:3d:63:44:31:
         f0:b0:f2:40:93:dc:42:a4:03:5f:bc:b6:d1:84:62:d9:cd:a8:
         d8:2a:58:9a:1b:be:54:4f:b3:f1:f1:a5:d3:bf:8d:fb:df:7b:
         6f:55:1b:73:7a:bf:19:33:db:bb:66:e8:72:14:ab:29:54:16:
         e0:c2:ef:02:8d:26:5b:ed:a8:09:81:c1:40:1d:74:d2:85:ef:
         ee:60:46:89:a5:30:65:c5:69:50:b6:46:54:e2:7a:1c:00:88:
         b0:7c:50:78:7c:e6:20:c2:bb:bb:23:59:da:77:24:30:ac:83:
         0c:a7:1a:cc:0e:71:90:46:95:ab:7f:f7:66:12:06:f4:39:a8:
         00:23:c2:ca:97:11:25:a1:5e:09:8a:48:73:da:8b:53:2e:ee:
         25:b0:36:fe
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfRhVFpzkS8jYRLxZQb0f7bFTL70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCNzg5MjQ5QzhFNEY2QzA5ODNDNjhDQUI3QjQwRTdE
RjYyN0MzNTAeFw0yNTAyMDQxODQ3MDhaFw0yNjAyMDMxODUyMDhaMDMxMTAvBgNV
BAMTKEU1RDkxQzBGNzE5NkYxMDAwMDg3NUY1ODc4QjdFMEIyOTA4NDQwMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hBDHhYhkC4bD2elGkPvx/tkZ
ICWGKZT18psOfwQ16WD2MxyP/9RuxUf8mW0dHTR00jWv5+kRK9R1S+5B3ICzoNEx
Pi9mIDuwBOD8KLunRL5BSxMjoZmRBpZBjU+TPcaRA4PDXGV0jZWeKX5WvjBZqeNR
VAWT8Rfwf9RqnpVPE0ZhM3v7kLYC7g4W2V6yth3+KNPzi3O0PU1iMGdWdhKM9LXp
ASKMot8sIy5jMIdYnnhtqZuCgxuoHOl0KIuf1S51uDaFJnbgb96RVOux3XrEO8ZI
MdPMxd4KPXbN+Yyzq6SbItnfS/nLaNchoH2CiBKzGTzNv0xHIHxcvEsxl60ZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5dkcD3GW8QAAh19YeLfgspCEQCEwHwYDVR0j
BBgwFoAUU7eJJJyOT2wJg8aMq3tA599ifDUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzBBRUUyQzdBQzlBMzlERDhEOEY3MTc5RUU5NDQyNTEz
NzBBQzQxM0QxRTE3MTM3MzI3MDcxNTY0NzE0RTIwLzAvNTNCNzg5MjQ5QzhFNEY2
QzA5ODNDNjhDQUI3QjQwRTdERjYyN0MzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0I3ODkyNDlDOEU0RjZDMDk4
M0M2OENBQjdCNDBFN0RGNjI3QzM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMwQUVFMkM3QUM5QTM5REQ4RDhGNzE3OUVFOTQ0MjUxMzcwQUM0MTNE
MUUxNzEzNzMyNzA3MTU2NDcxNEUyMC8wLzM0MzUyZTM3MzEyZTMxMzgzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1HtjAN
BgkqhkiG9w0BAQsFAAOCAQEAB3hoRpIDxZhNYRB5D63ZkNT4ezAJ4NWTlS4wiBOe
72SOt14AEgvIppdapmReAhfMuf635F5eKLYjiHbkLdvJ8FuedS0Sppeia+dOpb1b
DmXwWo+cB5qefVCgCTKAk+S26rmGdwJRm1w9Y0Qx8LDyQJPcQqQDX7y20YRi2c2o
2CpYmhu+VE+z8fGl07+N+997b1Ubc3q/GTPbu2bochSrKVQW4MLvAo0mW+2oCYHB
QB100oXv7mBGiaUwZcVpULZGVOJ6HACIsHxQeHzmIMK7uyNZ2nckMKyDDKcazA5x
kEaVq3/3ZhIG9DmoACPCypcRJaFeCYpIc9qLUy7uJbA2/g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:36 2025 by rpki-client