Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa
File:                     3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa (raw, json)
Hash identifier:          I5amtDmCU0EhZIMvNdWSR9pE47EQyCo9AxZPqFpRrcM=
Subject key identifier:   B0:55:8A:4B:6E:FC:18:D4:96:72:9A:CF:E9:63:3A:2F:64:19:0F:1A
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       0EB4D465A62C41534C452BCF80F4569933F61C77
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa
Signing time:             Tue 04 Feb 2025 17:59:50 +0000
ROA not before:           Tue 04 Feb 2025 17:54:50 +0000
ROA not after:            Tue 03 Feb 2026 17:59:50 +0000
asID:                     273041
IP address blocks:        168.234.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b4:d4:65:a6:2c:41:53:4c:45:2b:cf:80:f4:56:99:33:f6:1c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:50 2025 GMT
            Not After : Feb  3 17:59:50 2026 GMT
        Subject: CN=B0558A4B6EFC18D496729ACFE9633A2F64190F1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:ee:1f:19:07:81:d9:80:eb:82:44:19:99:
                    17:cf:b2:6a:a0:f6:61:ec:73:da:6b:54:f7:c8:e3:
                    11:06:3a:32:00:d4:ab:d0:7c:4a:ae:f6:3e:00:70:
                    f2:f0:df:2e:a2:86:41:77:e3:8e:c2:64:ea:7b:26:
                    d8:3c:bd:c8:96:eb:2d:5b:4d:f6:3c:46:26:21:b2:
                    bf:be:2f:97:1d:3a:bf:6a:bb:ec:cc:51:72:9e:2d:
                    c6:89:06:60:80:10:52:44:c6:f1:b3:94:cd:22:28:
                    b7:6c:51:fb:e1:68:50:93:43:1d:06:45:50:6a:5e:
                    10:28:e5:2a:ac:38:13:b0:5f:a0:47:82:e1:a7:9f:
                    e0:e3:68:5f:c9:85:d4:a9:c6:df:51:89:2a:84:4d:
                    e8:2a:c1:29:0d:37:2e:8c:88:44:cc:09:ca:11:d1:
                    7d:ba:0d:06:22:df:9a:40:55:0d:47:43:f3:c8:a7:
                    b0:9d:a8:db:f1:d5:14:42:3d:b1:bb:52:64:4c:40:
                    90:ac:b4:ee:5c:17:56:f3:a7:9e:09:1b:2b:3c:a5:
                    da:a8:03:45:39:e6:3a:ab:ef:3a:f0:63:b4:c8:86:
                    c6:ec:5d:4b:7c:1a:76:36:5c:54:12:91:eb:62:0d:
                    3a:32:11:1c:cb:f7:32:af:e5:bd:06:95:b4:0b:5a:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:55:8A:4B:6E:FC:18:D4:96:72:9A:CF:E9:63:3A:2F:64:19:0F:1A
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e37382e302f32342d3234203d3e20323733303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:54:a0:db:42:2c:1f:1a:51:c3:2e:53:69:f1:f8:c1:37:9f:
         71:07:9c:b0:2d:bc:24:a5:de:be:a9:2f:ff:54:42:f3:4a:ff:
         3f:92:db:e4:74:30:e3:93:78:91:a9:e0:46:ed:62:82:4b:93:
         58:37:df:ae:72:55:75:78:3b:30:38:81:68:cb:05:bd:a5:97:
         66:3b:50:2d:56:ec:b4:79:ea:54:f3:30:d1:ed:26:ef:8e:c6:
         a7:7b:75:63:0a:39:44:02:23:9f:ba:fa:c8:13:e8:eb:f2:ff:
         ab:da:1a:79:66:00:2a:26:72:4e:07:c3:8a:cb:c2:7e:ee:44:
         a8:a9:c0:f7:9e:9d:bf:1c:f5:92:92:dc:17:1c:85:99:6d:e4:
         0b:d2:5c:cd:d5:07:1b:60:1b:3d:6c:e8:3c:d6:5b:ce:7e:66:
         ed:9a:08:af:5a:dd:8b:0c:44:8e:41:af:53:27:44:0f:1f:dc:
         15:c9:24:79:ae:95:85:45:86:8a:d6:cc:63:40:f6:fb:b7:8f:
         d7:be:01:48:03:23:2d:d0:d8:92:57:d3:97:18:33:7c:12:c8:
         74:3f:f0:fe:7a:f1:58:67:f4:cb:c8:7c:cc:dc:ef:c4:1d:1d:
         70:68:58:49:d1:6e:3f:9e:a6:4a:24:0c:eb:ac:00:04:55:26:
         09:11:90:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:18 2025 by rpki-client