Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137372e302f32342d3234203d3e20323637373330.roa
File:                     34352e3136362e3137372e302f32342d3234203d3e20323637373330.roa (raw, json)
Hash identifier:          xQ9isc0nK1JfL1PnF7pKEI/Q1zjOmKSWyA/0ujQT1Y0=
Subject key identifier:   46:33:8D:3B:9C:C0:B4:D6:41:45:2C:08:CF:B1:31:4A:BC:3F:A6:4F
Certificate issuer:       /CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
Certificate serial:       4D2156B778E506577E5979F22FE1606C33A91CB8
Authority key identifier: 2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137372e302f32342d3234203d3e20323637373330.roa
Signing time:             Tue 04 Feb 2025 18:10:05 +0000
ROA not before:           Tue 04 Feb 2025 18:05:05 +0000
ROA not after:            Tue 03 Feb 2026 18:10:05 +0000
asID:                     267730
IP address blocks:        45.166.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:56:b7:78:e5:06:57:7e:59:79:f2:2f:e1:60:6c:33:a9:1c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7718438FB232639075F3BB0E7DE54CD20AA91D
        Validity
            Not Before: Feb  4 18:05:05 2025 GMT
            Not After : Feb  3 18:10:05 2026 GMT
        Subject: CN=46338D3B9CC0B4D641452C08CFB1314ABC3FA64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:70:f3:a8:f7:76:e2:2b:33:a2:8d:8a:ba:
                    5c:dd:f0:2d:84:f3:9f:be:b3:27:d7:c2:63:f4:54:
                    33:6e:9f:0e:6a:cc:f5:03:70:17:0c:28:15:42:33:
                    d5:1c:39:94:c0:53:71:c4:e4:e7:95:01:1d:52:08:
                    3c:12:b3:2c:96:7a:4c:fa:93:cf:a0:c6:d6:c9:b8:
                    98:e6:a0:47:e3:bb:54:4e:ec:69:89:31:5f:17:e9:
                    05:f7:8f:7f:73:a5:01:6b:31:d1:6a:ba:75:b5:d3:
                    6c:6b:ab:d7:e9:96:2e:da:53:6e:dc:56:53:4d:96:
                    9c:39:e0:fb:d9:f0:b9:56:bf:cc:11:df:ae:9c:18:
                    13:50:d2:4c:45:b4:26:71:18:b2:c0:0c:ed:cf:18:
                    d1:a4:c2:31:79:a2:5b:30:ec:4b:47:b0:ae:b5:f8:
                    3a:06:15:d9:31:5b:c5:c0:03:3e:78:4e:09:06:f6:
                    e8:04:b9:cc:98:3d:37:ce:66:88:80:dd:9b:aa:d0:
                    56:eb:9d:d0:81:d5:bc:a4:2f:6e:7f:45:ef:0d:8c:
                    29:19:50:ca:9d:f8:b9:46:91:82:8d:6a:dc:71:95:
                    bf:4d:bb:e6:fb:9a:0a:20:3d:76:5c:41:84:73:9a:
                    3a:e7:f7:b3:9f:12:3b:4c:c1:df:97:a1:fb:7e:89:
                    54:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:33:8D:3B:9C:C0:B4:D6:41:45:2C:08:CF:B1:31:4A:BC:3F:A6:4F
            X509v3 Authority Key Identifier:
                keyid:2D:77:18:43:8F:B2:32:63:90:75:F3:BB:0E:7D:E5:4C:D2:0A:A9:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7718438FB232639075F3BB0E7DE54CD20AA91D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27398380AECE8AE806AB7EE97252E19FB82F33478AF33C804F4818C98AF62DAB/0/34352e3136362e3137372e302f32342d3234203d3e20323637373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:1c:ee:a0:5b:61:4c:fd:6c:2c:8c:c1:23:80:cd:6d:fa:ad:
         cd:f8:a7:5c:6c:0a:56:86:9a:aa:9f:91:53:d2:06:78:db:14:
         8d:9d:9d:0e:53:5f:4f:72:54:ee:5e:bd:84:85:16:21:50:8f:
         5e:4f:b1:e8:04:dd:3e:16:e1:dd:94:d1:af:61:f9:4b:86:98:
         bc:f6:24:7a:db:ec:de:f2:d5:09:74:f2:15:f7:17:bd:d5:62:
         2c:34:ba:88:e6:fd:64:e5:14:d5:3d:0d:42:6c:da:8a:ca:bf:
         e2:46:cb:20:b3:05:d7:7d:b0:41:bd:87:1b:b5:c5:75:f0:6a:
         21:89:c4:97:fb:45:5e:52:41:2b:10:03:e0:af:b9:22:09:85:
         e8:7a:23:b2:57:f5:52:59:92:13:4d:56:e4:7f:7a:31:6c:75:
         99:2d:98:32:54:c3:a7:f0:9a:4f:a3:1f:b8:03:20:2a:c5:d1:
         e9:e7:68:1b:d0:79:a5:a7:c1:72:9a:85:24:0e:87:55:20:2d:
         26:52:18:e8:2e:d0:f4:ab:57:6b:e9:6e:ef:4e:5b:e8:72:47:
         3e:23:88:ce:9c:f3:8c:53:ed:05:dd:0c:d7:8b:c4:05:e3:b2:
         d1:5c:b6:c6:46:7a:97:35:26:fa:f2:7f:e4:99:4f:e6:cc:1e:
         c5:d7:0d:9c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTSFWt3jlBld+WXnyL+FgbDOpHLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3NzE4NDM4RkIyMzI2MzkwNzVGM0JCMEU3REU1NENE
MjBBQTkxRDAeFw0yNTAyMDQxODA1MDVaFw0yNjAyMDMxODEwMDVaMDMxMTAvBgNV
BAMTKDQ2MzM4RDNCOUNDMEI0RDY0MTQ1MkMwOENGQjEzMTRBQkMzRkE2NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+nDzqPd24iszoo2Kulzd8C2E
85++syfXwmP0VDNunw5qzPUDcBcMKBVCM9UcOZTAU3HE5OeVAR1SCDwSsyyWekz6
k8+gxtbJuJjmoEfju1RO7GmJMV8X6QX3j39zpQFrMdFqunW102xrq9fpli7aU27c
VlNNlpw54PvZ8LlWv8wR366cGBNQ0kxFtCZxGLLADO3PGNGkwjF5olsw7EtHsK61
+DoGFdkxW8XAAz54TgkG9ugEucyYPTfOZoiA3Zuq0FbrndCB1bykL25/Re8NjCkZ
UMqd+LlGkYKNatxxlb9Nu+b7mgogPXZcQYRzmjrn97OfEjtMwd+Xoft+iVQVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQURjONO5zAtNZBRSwIz7ExSrw/pk8wHwYDVR0j
BBgwFoAULXcYQ4+yMmOQdfO7Dn3lTNIKqR0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNzM5ODM4MEFFQ0U4QUU4MDZBQjdFRTk3MjUyRTE5RkI4
MkYzMzQ3OEFGMzNDODA0RjQ4MThDOThBRjYyREFCLzAvMkQ3NzE4NDM4RkIyMzI2
MzkwNzVGM0JCMEU3REU1NENEMjBBQTkxRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRDc3MTg0MzhGQjIzMjYzOTA3
NUYzQkIwRTdERTU0Q0QyMEFBOTFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjczOTgzODBBRUNFOEFFODA2QUI3RUU5NzI1MkUxOUZCODJGMzM0NzhB
RjMzQzgwNEY0ODE4Qzk4QUY2MkRBQi8wLzM0MzUyZTMxMzYzNjJlMzEzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaax
MA0GCSqGSIb3DQEBCwUAA4IBAQCBHO6gW2FM/WwsjMEjgM1t+q3N+KdcbApWhpqq
n5FT0gZ42xSNnZ0OU19PclTuXr2EhRYhUI9eT7HoBN0+FuHdlNGvYflLhpi89iR6
2+ze8tUJdPIV9xe91WIsNLqI5v1k5RTVPQ1CbNqKyr/iRssgswXXfbBBvYcbtcV1
8GohicSX+0VeUkErEAPgr7kiCYXoeiOyV/VSWZITTVbkf3oxbHWZLZgyVMOn8JpP
ox+4AyAqxdHp52gb0Hmlp8FymoUkDodVIC0mUhjoLtD0q1dr6W7vTlvockc+I4jO
nPOMU+0F3QzXi8QF47LRXLbGRnqXNSb68n/kmU/mzB7F1w2c
-----END CERTIFICATE-----
Generated at Fri Apr 11 19:11:23 2025 by rpki-client