Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e20323633373831.roa
File:                     3136382e3233342e3130362e302f32342d3234203d3e20323633373831.roa (raw, json)
Hash identifier:          vOglGNgUckRqtC5jwmKKm6Iq8lyo8M/0dX52+Cl1VhU=
Subject key identifier:   3B:C4:03:6D:8E:58:E8:15:70:84:5B:48:09:FF:42:34:B7:84:E5:20
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       2E4D9EAAE0A4B1595BF3F3FFF0F01EC9D9FBE5F5
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e20323633373831.roa
Signing time:             Tue 04 Feb 2025 17:59:46 +0000
ROA not before:           Tue 04 Feb 2025 17:54:46 +0000
ROA not after:            Tue 03 Feb 2026 17:59:46 +0000
asID:                     263781
IP address blocks:        168.234.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4d:9e:aa:e0:a4:b1:59:5b:f3:f3:ff:f0:f0:1e:c9:d9:fb:e5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:46 2025 GMT
            Not After : Feb  3 17:59:46 2026 GMT
        Subject: CN=3BC4036D8E58E81570845B4809FF4234B784E520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:7a:c4:14:a5:4a:66:13:96:d0:0d:17:01:
                    03:c4:05:fc:62:63:d0:14:b5:2d:39:e6:af:ac:c5:
                    76:1d:7b:6a:3e:70:b1:40:1d:09:2e:82:e7:b1:3b:
                    1a:06:ca:28:c5:a1:ad:10:a4:dc:f0:17:74:d0:32:
                    42:2a:de:f7:89:75:a1:f1:f2:45:ff:51:0b:95:2f:
                    d7:0c:38:37:80:5f:a1:28:30:fa:16:bb:e2:fc:79:
                    55:57:2d:6b:85:d3:3c:cf:38:dc:56:2c:44:bf:79:
                    b1:9a:b0:cd:f1:fe:8d:4c:ad:a6:0e:de:87:9b:33:
                    75:bf:e9:df:da:2a:76:c0:a7:06:8f:27:5a:b9:11:
                    64:15:e9:88:b0:f4:de:a4:9e:87:0e:8d:09:ae:0b:
                    b8:01:e1:fc:29:49:ff:06:e2:70:55:58:2a:51:ec:
                    4e:45:02:41:d2:a7:1e:ff:73:ee:22:f3:8b:86:0e:
                    c8:81:bc:15:35:be:cf:55:40:88:59:3e:6b:fc:19:
                    a3:9f:13:03:ad:52:2d:18:83:54:74:1c:79:45:ce:
                    63:0f:3e:0e:f8:fc:ab:cf:2f:56:0e:43:81:48:63:
                    e5:67:b3:a5:e9:9c:96:cc:b1:ae:f5:9e:c4:df:1e:
                    4c:08:a7:7b:2d:33:25:89:c3:a0:23:79:0f:77:df:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C4:03:6D:8E:58:E8:15:70:84:5B:48:09:FF:42:34:B7:84:E5:20
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3130362e302f32342d3234203d3e20323633373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fc:21:b0:fd:44:c3:1c:62:89:06:1c:8e:52:4b:fe:0e:5f:
         2d:e4:b9:a6:96:d8:9a:ad:c0:b1:86:0e:f2:9f:8d:cf:87:2e:
         a3:7f:06:51:c1:7f:24:41:d6:62:79:ef:30:eb:e3:75:36:79:
         b2:61:60:ff:95:20:02:fe:9c:6e:0d:cd:8e:b6:6c:75:1e:4c:
         a1:5b:48:c2:85:40:28:d4:03:d3:a8:d8:45:dd:34:7c:04:b3:
         ac:ed:51:af:14:a6:50:be:4f:a0:b0:d5:09:e4:42:c6:89:a5:
         7c:31:66:58:87:0a:d3:7d:d6:3e:4a:06:d6:6f:be:b6:ef:e2:
         43:e8:b8:83:ef:ab:4a:07:9f:df:ec:a1:4a:d6:a1:05:b9:98:
         e6:90:e0:07:60:f5:c2:8e:19:ee:21:50:b1:03:93:62:ab:41:
         ea:66:b8:12:86:c8:52:ac:47:31:31:05:78:61:3a:45:7a:5e:
         8d:a7:2a:c5:c7:fc:06:79:fd:20:70:46:fd:b1:9f:f9:20:a4:
         90:0d:ec:ba:a0:29:f3:7e:cd:77:22:14:c6:35:49:40:e7:b3:
         18:af:70:83:ce:e2:6d:44:e4:37:29:25:32:85:76:78:31:9e:
         b8:de:54:58:eb:3c:11:5a:a3:d6:1d:62:7e:79:c5:d9:d0:1d:
         34:90:d6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:21 2025 by rpki-client