Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa
File:                     3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          HDesc8/b4UswuHXx95v9qFllTiQ7dg703PhT0G3Hskc=
Subject key identifier:   78:03:37:C1:6A:9B:6E:60:86:F5:FD:6B:C2:07:44:5C:10:1E:50:A5
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       314F2356FC5D942ED1ADB4688F852D53A050F0C2
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:46 +0000
ROA not before:           Tue 04 Feb 2025 17:54:46 +0000
ROA not after:            Tue 03 Feb 2026 17:59:46 +0000
asID:                     262166
IP address blocks:        168.234.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:23:56:fc:5d:94:2e:d1:ad:b4:68:8f:85:2d:53:a0:50:f0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:46 2025 GMT
            Not After : Feb  3 17:59:46 2026 GMT
        Subject: CN=780337C16A9B6E6086F5FD6BC207445C101E50A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:e3:06:fa:e2:7b:75:ca:5c:aa:14:f7:f1:
                    d9:80:0c:82:6b:a6:9a:fb:d3:be:92:23:12:61:04:
                    b1:36:99:01:93:8b:33:f7:f2:52:a2:5d:c2:0e:09:
                    7b:af:30:fd:fa:12:31:e7:87:ae:0b:2d:0c:53:44:
                    c5:b6:3e:ca:46:a2:ad:db:a5:b1:6a:5b:54:25:b6:
                    92:41:14:55:0b:84:47:88:b8:24:f0:61:e8:8c:f8:
                    ff:c7:35:31:de:4a:ee:d5:3e:44:75:65:bc:b6:f1:
                    a4:eb:43:f7:89:28:7e:a6:4f:17:3f:04:1e:1c:12:
                    8b:9c:00:69:fe:31:76:fd:94:8e:f1:02:b0:bd:05:
                    c8:be:8d:55:00:c6:9f:80:41:a7:f3:5f:80:36:5c:
                    f0:d1:58:7e:1d:09:57:55:dc:09:94:76:3b:0f:c2:
                    76:f4:89:13:f9:80:df:26:fc:3e:d3:c5:d7:bf:00:
                    ea:f0:8a:f4:f4:4b:52:fc:1a:4e:91:eb:01:67:97:
                    41:31:3a:c4:22:8a:69:11:cd:0e:b4:09:ab:f6:21:
                    71:e8:e2:55:18:18:24:47:a1:f2:17:87:a3:a9:47:
                    6a:7b:e3:1c:be:dc:35:3f:82:3e:d3:29:a2:f5:03:
                    79:83:09:29:02:81:f3:9a:ab:6d:83:1a:c6:8a:b9:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:37:C1:6A:9B:6E:60:86:F5:FD:6B:C2:07:44:5C:10:1E:50:A5
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3137312e302f32342d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:76:f8:39:bf:2c:51:b0:76:8f:c6:a2:20:ad:6c:a9:13:8a:
         32:7d:d1:cd:6e:34:3d:f7:69:42:4a:51:ee:a4:a2:42:25:5c:
         39:86:c9:70:51:f3:07:92:c3:b2:8d:79:97:78:16:d9:11:fb:
         5a:03:d0:f6:41:32:de:d7:bc:13:a0:2d:1a:1a:ca:f6:93:fe:
         9a:61:bb:8d:41:fd:08:58:28:d8:5a:c2:21:47:5e:18:33:9f:
         e4:44:43:e0:c4:87:95:ee:0e:59:a9:b3:2a:d3:90:a4:6d:97:
         a1:1d:3e:20:87:31:cb:41:2e:3e:81:97:1d:46:34:ef:5a:37:
         8f:00:94:90:17:87:ad:f8:c0:c4:3f:b9:60:51:cf:34:0f:23:
         72:5e:44:ff:b4:bf:37:e5:d9:1e:a1:08:c0:bc:28:df:8c:cd:
         74:9c:14:1f:b0:0a:b9:4a:0e:bb:b5:a6:82:fb:a4:2f:db:3f:
         83:99:bf:10:b1:ba:13:30:b1:cb:9b:0f:65:af:1a:e9:86:8c:
         cd:3b:70:df:e4:64:49:00:9a:47:3b:cb:46:5c:a5:77:e2:0e:
         04:d5:4d:11:d0:aa:d2:29:af:ec:3f:57:a9:9a:3b:dc:56:6d:
         93:62:44:19:8d:1c:ff:86:96:e1:ab:78:6b:a1:df:03:bc:33:
         d4:9e:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:16 2025 by rpki-client