Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32342d3234203d3e20323639383138.roa
File:                     34352e3138342e3135342e302f32342d3234203d3e20323639383138.roa (raw, json)
Hash identifier:          5aQqV7l2NIe1vlLVLRMD8vGX9M710cUoMDWe3YfOE8E=
Subject key identifier:   5D:E7:32:70:8A:FE:50:77:1C:6D:43:5C:6E:2F:18:3D:94:16:23:DE
Certificate issuer:       /CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
Certificate serial:       2E690DAD62CD33BDA6299C89A1E124DC10F34FAF
Authority key identifier: 73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32342d3234203d3e20323639383138.roa
Signing time:             Tue 04 Feb 2025 18:23:14 +0000
ROA not before:           Tue 04 Feb 2025 18:18:14 +0000
ROA not after:            Tue 03 Feb 2026 18:23:14 +0000
asID:                     269818
IP address blocks:        45.184.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:69:0d:ad:62:cd:33:bd:a6:29:9c:89:a1:e1:24:dc:10:f3:4f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7388AE25CB67430754ACD1DB6E94F8DAAC362F9C
        Validity
            Not Before: Feb  4 18:18:14 2025 GMT
            Not After : Feb  3 18:23:14 2026 GMT
        Subject: CN=5DE732708AFE50771C6D435C6E2F183D941623DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:57:13:ab:30:86:b2:17:41:4f:2c:8f:26:
                    dd:8c:fe:bc:d1:67:d3:da:2e:15:f8:1a:28:59:8c:
                    7e:ff:50:9a:78:44:87:0f:ad:c8:9c:2a:7a:00:b0:
                    e5:3b:a6:ec:8e:73:f8:29:b7:0a:b5:61:da:86:74:
                    4f:30:17:c4:ac:1a:1d:8e:cb:64:d1:2e:a8:e0:4a:
                    11:37:24:7c:2a:9b:de:79:99:24:6b:78:fe:a1:7a:
                    2a:d6:e5:3e:35:86:5e:06:9b:29:c9:60:0e:f3:42:
                    22:8e:8a:4b:44:9c:bc:da:72:85:ac:f8:ff:51:8e:
                    aa:f7:29:ec:1a:a4:d4:89:61:7c:41:87:8a:89:78:
                    36:95:1a:ec:5e:83:03:4f:8f:50:a4:54:64:f4:3e:
                    d4:b2:a9:14:5a:1e:7a:38:f4:9f:94:21:f2:f8:18:
                    5d:5d:c1:5c:f4:74:0a:20:4c:4d:e0:aa:34:db:28:
                    35:21:75:fa:cc:50:e3:52:9d:10:eb:38:cc:0f:28:
                    35:e8:9a:49:74:ff:38:b1:95:f5:0e:ff:34:e6:b8:
                    cd:e0:6a:9d:31:80:96:79:40:52:17:3a:c4:c6:25:
                    fe:26:91:7f:1c:a2:ef:f8:55:61:48:4c:ea:bf:3d:
                    1f:98:2d:61:f0:9c:5f:f2:72:8a:0c:1b:df:f3:31:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:32:70:8A:FE:50:77:1C:6D:43:5C:6E:2F:18:3D:94:16:23:DE
            X509v3 Authority Key Identifier:
                keyid:73:88:AE:25:CB:67:43:07:54:AC:D1:DB:6E:94:F8:DA:AC:36:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7388AE25CB67430754ACD1DB6E94F8DAAC362F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E3E6BD7C12B1D988A64FA53B5CD0921EDA9F8713EAA6CDF9363B4A91F04265A/0/34352e3138342e3135342e302f32342d3234203d3e20323639383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:eb:be:62:f7:94:e2:bc:01:50:61:7b:99:22:d1:10:ee:
         4f:73:fb:88:19:23:92:f7:0d:45:93:0f:50:5d:79:f4:98:95:
         df:b3:02:09:5d:96:08:41:9a:ca:d0:df:07:55:7e:3a:1c:51:
         d9:91:fd:48:07:55:37:b0:01:81:24:dd:83:04:66:65:8b:6a:
         24:42:cd:a5:80:11:db:36:01:e5:cf:6d:3f:b9:6f:fd:11:e3:
         3e:db:33:0f:1c:85:bf:6c:91:0b:af:9a:de:ec:fc:67:80:4b:
         b4:59:72:be:8f:cb:31:6e:32:35:df:f2:8d:76:2e:93:d4:06:
         66:9f:7a:87:a7:ad:4d:35:82:30:7e:a1:bb:e5:76:b9:db:12:
         e5:bd:f3:c1:69:cd:27:3d:bf:70:e7:33:32:7b:74:60:3e:e9:
         40:41:71:67:f0:22:86:76:e4:d4:84:e7:c7:81:8b:a0:1d:f8:
         35:50:bd:aa:37:c3:29:fb:56:cb:64:46:b0:13:25:1c:0d:19:
         7c:72:81:b1:45:10:e8:ac:71:9b:71:6d:f0:e0:19:c8:ff:ef:
         d0:be:2e:f4:95:10:06:47:56:94:8b:a0:61:d5:e7:c3:bc:9e:
         ea:cc:8b:85:36:92:5b:d5:19:ab:95:8e:3f:87:8d:af:f8:80:
         fa:17:a8:4a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULmkNrWLNM72mKZyJoeEk3BDzT68wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM4OEFFMjVDQjY3NDMwNzU0QUNEMURCNkU5NEY4REFB
QzM2MkY5QzAeFw0yNTAyMDQxODE4MTRaFw0yNjAyMDMxODIzMTRaMDMxMTAvBgNV
BAMTKDVERTczMjcwOEFGRTUwNzcxQzZENDM1QzZFMkYxODNEOTQxNjIzREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JFcTqzCGshdBTyyPJt2M/rzR
Z9PaLhX4GihZjH7/UJp4RIcPrcicKnoAsOU7puyOc/gptwq1YdqGdE8wF8SsGh2O
y2TRLqjgShE3JHwqm955mSRreP6heirW5T41hl4GmynJYA7zQiKOiktEnLzacoWs
+P9Rjqr3KewapNSJYXxBh4qJeDaVGuxegwNPj1CkVGT0PtSyqRRaHno49J+UIfL4
GF1dwVz0dAogTE3gqjTbKDUhdfrMUONSnRDrOMwPKDXomkl0/zixlfUO/zTmuM3g
ap0xgJZ5QFIXOsTGJf4mkX8cou/4VWFITOq/PR+YLWHwnF/ycooMG9/zMREvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXecycIr+UHccbUNcbi8YPZQWI94wHwYDVR0j
BBgwFoAUc4iuJctnQwdUrNHbbpT42qw2L5wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRTNFNkJEN0MxMkIxRDk4OEE2NEZBNTNCNUNEMDkyMUVE
QTlGODcxM0VBQTZDREY5MzYzQjRBOTFGMDQyNjVBLzAvNzM4OEFFMjVDQjY3NDMw
NzU0QUNEMURCNkU5NEY4REFBQzM2MkY5Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Mzg4QUUyNUNCNjc0MzA3NTRB
Q0QxREI2RTk0RjhEQUFDMzYyRjlDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUUzRTZCRDdDMTJCMUQ5ODhBNjRGQTUzQjVDRDA5MjFFREE5Rjg3MTNF
QUE2Q0RGOTM2M0I0QTkxRjA0MjY1QS8wLzM0MzUyZTMxMzgzNDJlMzEzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbia
MA0GCSqGSIb3DQEBCwUAA4IBAQAwHOu+YveU4rwBUGF7mSLREO5Pc/uIGSOS9w1F
kw9QXXn0mJXfswIJXZYIQZrK0N8HVX46HFHZkf1IB1U3sAGBJN2DBGZli2okQs2l
gBHbNgHlz20/uW/9EeM+2zMPHIW/bJELr5re7PxngEu0WXK+j8sxbjI13/KNdi6T
1AZmn3qHp61NNYIwfqG75Xa52xLlvfPBac0nPb9w5zMye3RgPulAQXFn8CKGduTU
hOfHgYugHfg1UL2qN8Mp+1bLZEawEyUcDRl8coGxRRDorHGbcW3w4BnI/+/Qvi70
lRAGR1aUi6Bh1efDvJ7qzIuFNpJb1RmrlY4/h42v+ID6F6hK
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:53 2025 by rpki-client