Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138332e302f32342d3234203d3e20323632313836.roa
File:                     34352e37312e3138332e302f32342d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          pFp3P9talcDo/yfHOaGTqFbHud+NB359e1LSJXuUtIs=
Subject key identifier:   3C:85:42:16:43:D7:FE:1C:ED:47:4F:93:F4:E8:CF:5B:C7:C2:13:E2
Certificate issuer:       /CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
Certificate serial:       120C1558C9232F4EE26F1AEEF8589A319A36D951
Authority key identifier: 53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138332e302f32342d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 18:52:08 +0000
ROA not before:           Tue 04 Feb 2025 18:47:08 +0000
ROA not after:            Tue 03 Feb 2026 18:52:08 +0000
asID:                     262186
IP address blocks:        45.71.183.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0c:15:58:c9:23:2f:4e:e2:6f:1a:ee:f8:58:9a:31:9a:36:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B789249C8E4F6C0983C68CAB7B40E7DF627C35
        Validity
            Not Before: Feb  4 18:47:08 2025 GMT
            Not After : Feb  3 18:52:08 2026 GMT
        Subject: CN=3C85421643D7FE1CED474F93F4E8CF5BC7C213E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:33:27:f5:1c:4e:8d:ba:45:e3:be:2d:77:
                    68:b2:31:ee:af:f8:d7:0e:e5:da:03:c2:bd:40:c9:
                    e8:96:7e:71:d7:6f:39:eb:d9:c5:71:8a:a6:d5:8c:
                    8f:b8:20:6e:76:5c:2f:0b:09:9c:82:4e:e5:27:de:
                    0f:ca:dc:82:cc:6f:31:2c:98:cf:ab:f9:33:39:40:
                    ff:18:8b:e2:a3:ed:42:9c:9b:df:d4:1c:5f:8f:f2:
                    06:f1:0e:fc:0c:59:8a:6e:a6:22:19:d8:8a:6d:0d:
                    e3:1b:57:f3:ba:84:f3:70:94:c1:93:f9:00:d4:fd:
                    17:92:3d:c3:77:f2:40:8c:a6:bb:cc:65:2f:19:8a:
                    80:c4:17:77:9e:0f:61:e9:6b:f5:e6:62:99:db:e3:
                    90:22:9a:d0:20:dc:87:d1:4d:62:47:40:17:16:32:
                    0d:3c:a3:f2:41:c5:b9:60:0a:3e:41:8c:38:fd:10:
                    7b:85:ed:c9:1f:27:c6:0f:66:73:77:11:c8:79:4e:
                    3b:cc:11:2a:cb:75:e8:2f:ba:e5:9a:13:70:ba:52:
                    cd:37:9b:df:d5:8c:be:18:7f:40:57:90:de:9c:c8:
                    55:2c:55:7c:2f:59:d0:4b:d0:e3:89:f4:d2:bc:87:
                    31:db:e1:3a:9b:bb:a7:96:a8:06:49:d3:7a:8c:c1:
                    f9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:85:42:16:43:D7:FE:1C:ED:47:4F:93:F4:E8:CF:5B:C7:C2:13:E2
            X509v3 Authority Key Identifier:
                keyid:53:B7:89:24:9C:8E:4F:6C:09:83:C6:8C:AB:7B:40:E7:DF:62:7C:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53B789249C8E4F6C0983C68CAB7B40E7DF627C35.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C0AEE2C7AC9A39DD8D8F7179EE944251370AC413D1E17137327071564714E20/0/34352e37312e3138332e302f32342d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c4:2a:e6:e9:a6:ff:03:13:7d:2e:f4:47:20:49:f5:5f:b0:
         80:bf:73:05:a8:06:6f:14:c4:ed:e7:42:c9:e7:b3:22:d8:99:
         1b:37:de:36:19:bd:83:8c:a3:b9:2f:0f:55:18:c4:e2:5c:d3:
         ab:74:98:24:56:12:b8:a1:e5:8d:6e:e6:1a:13:4f:d5:c8:b3:
         e3:ad:d9:54:a2:24:79:94:c7:c2:7c:19:0c:ed:28:fa:75:9e:
         03:05:45:3a:61:3e:07:38:c7:c1:72:a4:0c:44:7c:aa:d2:d4:
         2d:c2:a9:65:dd:7f:b7:1e:ac:42:6e:31:90:87:dc:e6:65:88:
         00:f0:b0:8f:67:ff:60:1b:99:e4:68:0a:18:98:74:5a:70:3f:
         81:b3:b7:83:12:ed:1d:b5:4f:3b:1a:db:8a:f7:3e:9e:4a:6c:
         1d:15:ff:0e:d6:b6:d2:39:6b:a3:28:87:74:02:aa:b8:7e:44:
         cf:9d:f9:b5:65:9f:53:2e:18:ae:ec:ec:df:85:5d:07:c9:ce:
         b5:60:e6:69:85:f2:35:04:16:54:15:19:f8:a5:71:48:e3:e2:
         b4:4b:d0:eb:4c:cd:79:11:d7:1e:62:a9:7e:74:61:fd:fb:0d:
         8c:36:e4:23:9c:66:dc:d8:ed:f6:9d:8a:89:c8:dd:cf:bc:7c:
         68:f0:7e:85
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEgwVWMkjL07ibxru+FiaMZo22VEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCNzg5MjQ5QzhFNEY2QzA5ODNDNjhDQUI3QjQwRTdE
RjYyN0MzNTAeFw0yNTAyMDQxODQ3MDhaFw0yNjAyMDMxODUyMDhaMDMxMTAvBgNV
BAMTKDNDODU0MjE2NDNEN0ZFMUNFRDQ3NEY5M0Y0RThDRjVCQzdDMjEzRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15DMn9RxOjbpF474td2iyMe6v
+NcO5doDwr1AyeiWfnHXbznr2cVxiqbVjI+4IG52XC8LCZyCTuUn3g/K3ILMbzEs
mM+r+TM5QP8Yi+Kj7UKcm9/UHF+P8gbxDvwMWYpupiIZ2IptDeMbV/O6hPNwlMGT
+QDU/ReSPcN38kCMprvMZS8ZioDEF3eeD2Hpa/XmYpnb45AimtAg3IfRTWJHQBcW
Mg08o/JBxblgCj5BjDj9EHuF7ckfJ8YPZnN3Ech5TjvMESrLdegvuuWaE3C6Us03
m9/VjL4Yf0BXkN6cyFUsVXwvWdBL0OOJ9NK8hzHb4Tqbu6eWqAZJ03qMwflFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUPIVCFkPX/hztR0+T9OjPW8fCE+IwHwYDVR0j
BBgwFoAUU7eJJJyOT2wJg8aMq3tA599ifDUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQzBBRUUyQzdBQzlBMzlERDhEOEY3MTc5RUU5NDQyNTEz
NzBBQzQxM0QxRTE3MTM3MzI3MDcxNTY0NzE0RTIwLzAvNTNCNzg5MjQ5QzhFNEY2
QzA5ODNDNjhDQUI3QjQwRTdERjYyN0MzNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81M0I3ODkyNDlDOEU0RjZDMDk4
M0M2OENBQjdCNDBFN0RGNjI3QzM1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUMwQUVFMkM3QUM5QTM5REQ4RDhGNzE3OUVFOTQ0MjUxMzcwQUM0MTNE
MUUxNzEzNzMyNzA3MTU2NDcxNEUyMC8wLzM0MzUyZTM3MzEyZTMxMzgzMzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1HtzAN
BgkqhkiG9w0BAQsFAAOCAQEAm8Qq5umm/wMTfS70RyBJ9V+wgL9zBagGbxTE7edC
yeezItiZGzfeNhm9g4yjuS8PVRjE4lzTq3SYJFYSuKHljW7mGhNP1ciz463ZVKIk
eZTHwnwZDO0o+nWeAwVFOmE+BzjHwXKkDER8qtLULcKpZd1/tx6sQm4xkIfc5mWI
APCwj2f/YBuZ5GgKGJh0WnA/gbO3gxLtHbVPOxrbivc+nkpsHRX/Dta20jlroyiH
dAKquH5Ez535tWWfUy4Yruzs34VdB8nOtWDmaYXyNQQWVBUZ+KVxSOPitEvQ60zN
eRHXHmKpfnRh/fsNjDbkI5xm3Njt9p2Kicjdz7x8aPB+hQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:26 2025 by rpki-client