Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa
File:                     34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa (raw, json)
Hash identifier:          k4LCVtshvdz4/hakGQVobCuFC34mkR+TldC2iqKCuG8=
Subject key identifier:   B4:C5:CA:CA:AA:94:9D:73:31:C9:A2:E2:85:E9:5D:74:AE:CE:7C:07
Certificate issuer:       /CN=FCD0BC7A73B5457DC06566536ED52A642564A6F1
Certificate serial:       74F8D949C97F05612F4B34F28BCAAC22EF15FAED
Authority key identifier: FC:D0:BC:7A:73:B5:45:7D:C0:65:66:53:6E:D5:2A:64:25:64:A6:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa
Signing time:             Tue 04 Feb 2025 18:21:31 +0000
ROA not before:           Tue 04 Feb 2025 18:16:31 +0000
ROA not after:            Tue 03 Feb 2026 18:21:31 +0000
asID:                     267724
IP address blocks:        45.166.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f8:d9:49:c9:7f:05:61:2f:4b:34:f2:8b:ca:ac:22:ef:15:fa:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD0BC7A73B5457DC06566536ED52A642564A6F1
        Validity
            Not Before: Feb  4 18:16:31 2025 GMT
            Not After : Feb  3 18:21:31 2026 GMT
        Subject: CN=B4C5CACAAA949D7331C9A2E285E95D74AECE7C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:6b:58:62:6e:e2:93:f3:0e:4a:50:e9:1c:
                    d8:94:ca:c4:ed:04:d3:94:9c:70:a4:74:da:e2:1c:
                    c1:3e:16:e4:b0:56:43:d0:ca:f5:93:09:71:53:11:
                    a9:b7:8b:72:c0:c2:0a:80:d6:d7:b8:b0:b8:6c:ac:
                    81:1c:89:27:50:dd:b8:40:01:99:1b:ef:00:6f:d6:
                    cf:fe:5f:0c:c2:20:1d:22:b2:5f:63:e6:e1:b2:59:
                    69:51:18:f3:2c:7a:cb:ea:33:7a:ac:ca:ba:82:f2:
                    51:09:38:6e:b4:62:1c:5e:8c:b8:d5:25:83:3b:aa:
                    45:06:d0:a3:2d:50:a8:35:1d:72:9a:ea:a1:e9:c1:
                    31:da:72:04:04:0a:8d:0d:98:84:b6:9f:8e:5b:27:
                    03:a4:d1:0d:91:93:c0:85:91:af:50:6f:0c:06:f5:
                    b4:d2:11:d4:dd:28:90:a4:d6:89:e7:b5:58:8a:e8:
                    11:c6:0d:60:61:0f:f9:08:e7:6c:d7:38:b1:52:75:
                    88:98:ba:85:ce:2a:21:a3:a7:be:21:fd:bd:26:c6:
                    17:e0:9f:94:96:2e:20:3c:d5:50:59:f4:9a:4c:97:
                    f7:9e:63:ca:be:13:8f:a4:d2:c9:20:45:87:9f:74:
                    d7:a6:ea:f2:56:9b:3e:47:f8:80:c2:e0:f3:4b:a9:
                    32:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C5:CA:CA:AA:94:9D:73:31:C9:A2:E2:85:E9:5D:74:AE:CE:7C:07
            X509v3 Authority Key Identifier:
                keyid:FC:D0:BC:7A:73:B5:45:7D:C0:65:66:53:6E:D5:2A:64:25:64:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCD0BC7A73B5457DC06566536ED52A642564A6F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2151456ECDFC8A26052FCE51735B942C27E605457BA8BC7C0246661CEEA49339/0/34352e3136362e3134342e302f32322d3234203d3e20323637373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:b2:de:1f:ff:ee:47:f9:15:d8:30:d4:96:b6:f1:40:3d:4e:
         fa:e8:e4:82:49:1a:35:c7:12:5a:cf:b0:71:39:0e:3b:27:1e:
         ad:c2:3c:fe:7c:39:95:75:1b:5c:ba:59:87:b8:54:90:a8:a8:
         6a:3b:e9:01:ac:f7:7b:9c:0e:3f:eb:67:c5:a4:f3:31:4d:77:
         2c:6e:7e:c4:25:b5:84:83:fc:f8:df:d1:ff:a0:48:4d:c6:fa:
         a6:6d:59:80:43:87:d9:23:88:bf:0e:cb:b1:21:14:5b:b2:87:
         f5:04:8d:d0:b0:46:4d:52:50:66:bb:63:5f:99:2c:02:dd:d3:
         e4:df:a8:2e:ce:40:9f:2d:b7:fa:8d:fc:59:3e:58:1c:db:1e:
         1c:ef:30:19:db:62:ae:15:98:6e:31:b5:4a:3c:79:13:40:fb:
         be:01:9c:ab:eb:7a:d7:4b:35:06:88:cb:ac:23:4f:16:ae:ff:
         ad:48:64:b9:65:31:a4:c7:b1:b8:36:c1:fb:39:14:f2:bb:18:
         e9:44:a2:91:8d:d8:76:8c:39:cf:d1:17:58:41:6c:51:8c:73:
         6b:11:71:63:98:ab:21:98:ba:d3:9e:90:b4:41:50:c0:28:cd:
         ca:69:a7:62:35:4d:34:f6:04:d8:c0:06:d7:35:f3:ab:23:3e:
         04:90:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:34 2025 by rpki-client