Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/379D4AD5EA617459AA22FC8260B92CC8F9DA7BC2B5EF44C2635ABC7EE83465F7/0/34352e3136392e3235312e302f32342d3234203d3e20323637373732.roa
File:                     34352e3136392e3235312e302f32342d3234203d3e20323637373732.roa (raw, json)
Hash identifier:          cs1rEurQZX3BJ27ZJMYhDdm8OrpgupI7ujyPMISjI/I=
Subject key identifier:   07:ED:58:54:60:C0:45:8C:53:CB:A4:96:F1:26:19:51:83:27:99:64
Certificate issuer:       /CN=C75496958DE0A39577954C886F0BFD6A57C3C52B
Certificate serial:       267D46B47897B895FD12E4821CE2AA32A3AAA691
Authority key identifier: C7:54:96:95:8D:E0:A3:95:77:95:4C:88:6F:0B:FD:6A:57:C3:C5:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75496958DE0A39577954C886F0BFD6A57C3C52B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/379D4AD5EA617459AA22FC8260B92CC8F9DA7BC2B5EF44C2635ABC7EE83465F7/0/34352e3136392e3235312e302f32342d3234203d3e20323637373732.roa
Signing time:             Tue 04 Feb 2025 20:01:37 +0000
ROA not before:           Tue 04 Feb 2025 19:56:37 +0000
ROA not after:            Tue 03 Feb 2026 20:01:37 +0000
asID:                     267772
IP address blocks:        45.169.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7d:46:b4:78:97:b8:95:fd:12:e4:82:1c:e2:aa:32:a3:aa:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75496958DE0A39577954C886F0BFD6A57C3C52B
        Validity
            Not Before: Feb  4 19:56:37 2025 GMT
            Not After : Feb  3 20:01:37 2026 GMT
        Subject: CN=07ED585460C0458C53CBA496F126195183279964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:37:2e:2c:3a:a9:8d:6b:bb:e8:b7:33:4d:
                    f5:09:24:83:4f:ff:60:9d:51:e9:31:51:bb:d2:c3:
                    cc:29:1d:17:e3:0b:84:4a:de:25:a2:a2:19:48:5c:
                    f7:9d:f6:4a:ef:32:48:56:26:2a:c9:a4:b2:60:85:
                    d8:8b:de:f1:ee:40:04:64:76:e1:db:a2:58:3d:b3:
                    23:27:fb:04:de:01:9c:c1:79:82:e9:b4:40:d4:bb:
                    ff:89:79:c8:97:2c:76:99:86:f4:7b:3b:a2:d1:b1:
                    2b:61:c8:1e:45:c4:40:7e:71:33:ef:36:a9:e2:b8:
                    aa:0d:7e:ed:c3:36:85:05:a5:9b:10:f9:30:2b:04:
                    70:7c:b5:a5:76:aa:1a:73:38:75:a7:1a:d2:62:29:
                    99:f8:b7:83:48:a0:b0:cd:5b:b0:55:9c:93:dd:cf:
                    9a:07:a1:42:5b:12:b7:ab:5c:d9:d8:c9:8a:67:e0:
                    42:8d:a6:84:37:60:13:2e:54:30:f8:3c:47:ef:93:
                    7c:f0:4a:67:6d:64:ea:6b:f0:b4:2f:44:6c:87:e4:
                    51:c5:1a:64:ac:da:d5:f5:d9:5b:33:15:a1:6d:d9:
                    5e:ca:ed:63:f3:cf:73:5f:e8:27:7c:5a:01:e8:20:
                    e8:45:28:25:27:b0:07:26:3a:f5:68:d1:45:b4:0d:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:ED:58:54:60:C0:45:8C:53:CB:A4:96:F1:26:19:51:83:27:99:64
            X509v3 Authority Key Identifier:
                keyid:C7:54:96:95:8D:E0:A3:95:77:95:4C:88:6F:0B:FD:6A:57:C3:C5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/379D4AD5EA617459AA22FC8260B92CC8F9DA7BC2B5EF44C2635ABC7EE83465F7/0/C75496958DE0A39577954C886F0BFD6A57C3C52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75496958DE0A39577954C886F0BFD6A57C3C52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/379D4AD5EA617459AA22FC8260B92CC8F9DA7BC2B5EF44C2635ABC7EE83465F7/0/34352e3136392e3235312e302f32342d3234203d3e20323637373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:2d:ca:1f:d8:50:c6:1f:78:8f:e4:0d:b3:d2:f9:32:5d:
         eb:db:e4:6a:a8:ab:3e:5c:1c:64:00:2a:0f:25:b0:db:67:7a:
         cd:ec:09:c4:69:d2:4c:19:e6:f4:a5:1c:df:78:42:98:4a:71:
         f0:93:d9:2e:8f:7f:0e:72:04:3e:a5:8b:9d:cb:93:6e:ac:d6:
         f0:d6:36:79:b1:6e:b7:55:2d:31:a9:b0:85:ea:2c:17:f3:d3:
         e4:dd:9a:00:6f:7e:ab:54:88:81:15:2f:e1:41:a5:c1:08:b3:
         2d:4e:8b:5b:f3:4f:e0:50:56:63:89:cc:96:ba:88:9c:ed:21:
         39:56:17:9b:a3:4a:c3:0f:75:3f:d2:04:c1:5b:fe:fa:6a:cc:
         29:d0:0f:5d:0d:ad:4e:73:e1:f4:a4:55:7b:19:d0:eb:03:59:
         97:09:b9:b9:d9:42:eb:3b:58:c3:7e:d6:97:d7:35:71:07:a0:
         55:8e:ad:f0:75:84:b6:29:fc:02:f4:69:2b:25:03:67:c1:35:
         6a:10:69:4b:fc:d9:25:6e:35:49:0b:d3:ab:e8:33:f8:8e:e1:
         73:98:90:f2:0c:97:03:26:ee:d4:c5:6c:48:6a:ed:f5:2e:26:
         e9:44:d4:0e:ea:b5:7e:7f:e7:d3:6c:79:f7:df:f9:26:32:0c:
         fa:30:ee:24
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUJn1GtHiXuJX9EuSCHOKqMqOqppEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc1NDk2OTU4REUwQTM5NTc3OTU0Qzg4NkYwQkZENkE1
N0MzQzUyQjAeFw0yNTAyMDQxOTU2MzdaFw0yNjAyMDMyMDAxMzdaMDMxMTAvBgNV
BAMTKDA3RUQ1ODU0NjBDMDQ1OEM1M0NCQTQ5NkYxMjYxOTUxODMyNzk5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTtDcuLDqpjWu76LczTfUJJINP
/2CdUekxUbvSw8wpHRfjC4RK3iWiohlIXPed9krvMkhWJirJpLJghdiL3vHuQARk
duHbolg9syMn+wTeAZzBeYLptEDUu/+JeciXLHaZhvR7O6LRsSthyB5FxEB+cTPv
NqniuKoNfu3DNoUFpZsQ+TArBHB8taV2qhpzOHWnGtJiKZn4t4NIoLDNW7BVnJPd
z5oHoUJbErerXNnYyYpn4EKNpoQ3YBMuVDD4PEfvk3zwSmdtZOpr8LQvRGyH5FHF
GmSs2tX12VszFaFt2V7K7WPzz3Nf6Cd8WgHoIOhFKCUnsAcmOvVo0UW0DeTTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUB+1YVGDARYxTy6SW8SYZUYMnmWQwHwYDVR0j
BBgwFoAUx1SWlY3go5V3lUyIbwv9alfDxSswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zNzlENEFENUVBNjE3NDU5QUEyMkZDODI2MEI5MkNDOEY5
REE3QkMyQjVFRjQ0QzI2MzVBQkM3RUU4MzQ2NUY3LzAvQzc1NDk2OTU4REUwQTM5
NTc3OTU0Qzg4NkYwQkZENkE1N0MzQzUyQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzU0OTY5NThERTBBMzk1Nzc5
NTRDODg2RjBCRkQ2QTU3QzNDNTJCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzc5RDRBRDVFQTYxNzQ1OUFBMjJGQzgyNjBCOTJDQzhGOURBN0JDMkI1
RUY0NEMyNjM1QUJDN0VFODM0NjVGNy8wLzM0MzUyZTMxMzYzOTJlMzIzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzczNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALan7
MA0GCSqGSIb3DQEBCwUAA4IBAQAWDy3KH9hQxh94j+QNs9L5Ml3r2+RqqKs+XBxk
ACoPJbDbZ3rN7AnEadJMGeb0pRzfeEKYSnHwk9kuj38OcgQ+pYudy5NurNbw1jZ5
sW63VS0xqbCF6iwX89Pk3ZoAb36rVIiBFS/hQaXBCLMtTotb80/gUFZjicyWuoic
7SE5Vhebo0rDD3U/0gTBW/76aswp0A9dDa1Oc+H0pFV7GdDrA1mXCbm52ULrO1jD
ftaX1zVxB6BVjq3wdYS2KfwC9GkrJQNnwTVqEGlL/NklbjVJC9Or6DP4juFzmJDy
DJcDJu7UxWxIau31LibpRNQO6rV+f+fTbHn33/kmMgz6MO4k
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:54 2025 by rpki-client