Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/34352e3233372e3137362e302f32322d3234203d3e203237393833.roa
File:                     34352e3233372e3137362e302f32322d3234203d3e203237393833.roa (raw, json)
Hash identifier:          7JCMyQ3sUPvQm/b21UbXa5ak5w/0a2JZC1u0tqMeEFA=
Subject key identifier:   73:76:A0:69:68:84:9E:C1:5D:BD:64:6E:3F:6D:1D:58:EE:51:CA:06
Certificate issuer:       /CN=8515BA177D973C9F02F4F65B1263F5127DF7AA64
Certificate serial:       4462331E60F6F87312959851FC31060BEE68E0F7
Authority key identifier: 85:15:BA:17:7D:97:3C:9F:02:F4:F6:5B:12:63:F5:12:7D:F7:AA:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8515BA177D973C9F02F4F65B1263F5127DF7AA64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/34352e3233372e3137362e302f32322d3234203d3e203237393833.roa
Signing time:             Tue 04 Feb 2025 18:08:33 +0000
ROA not before:           Tue 04 Feb 2025 18:03:33 +0000
ROA not after:            Tue 03 Feb 2026 18:08:33 +0000
asID:                     27983
IP address blocks:        45.237.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:62:33:1e:60:f6:f8:73:12:95:98:51:fc:31:06:0b:ee:68:e0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8515BA177D973C9F02F4F65B1263F5127DF7AA64
        Validity
            Not Before: Feb  4 18:03:33 2025 GMT
            Not After : Feb  3 18:08:33 2026 GMT
        Subject: CN=7376A06968849EC15DBD646E3F6D1D58EE51CA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:49:4d:18:97:53:19:9f:ec:34:74:4d:f9:
                    14:5c:f0:98:8c:0c:fa:75:f4:05:9b:6f:30:12:85:
                    c6:fc:56:84:35:4e:36:fd:3b:cc:d8:47:b6:92:f1:
                    0f:6c:83:df:65:0e:14:e1:23:e9:9c:55:2f:da:51:
                    3e:73:bb:76:1f:1c:b0:5b:b8:b1:ba:95:4c:f2:a0:
                    bc:ca:28:32:79:ed:53:cf:82:e4:26:50:86:93:99:
                    f7:35:ff:80:8e:27:28:36:b7:90:dc:60:07:62:d7:
                    40:00:01:22:88:87:d1:e6:c4:ee:de:9f:23:67:82:
                    52:e8:99:4f:04:fd:81:80:23:86:bd:a7:69:83:2a:
                    b4:32:10:09:b8:7f:6f:91:ba:61:f3:77:3b:b1:82:
                    5b:a5:d9:b1:53:57:6e:cb:7a:c1:4e:94:1f:87:21:
                    38:d3:b8:01:81:55:dc:57:75:e9:c4:05:4d:8d:1d:
                    d0:7c:de:80:25:df:68:35:35:19:ce:a1:ca:c8:fd:
                    bc:63:92:79:8e:53:5d:14:56:44:38:10:97:8b:7e:
                    27:ea:63:89:f9:59:e0:5c:e6:d3:fa:89:7b:c0:60:
                    ec:49:5c:04:6f:ac:34:cd:bb:47:58:e2:8f:26:d1:
                    fa:5a:c7:a8:2b:43:35:df:65:44:f8:3c:e8:b9:3a:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:76:A0:69:68:84:9E:C1:5D:BD:64:6E:3F:6D:1D:58:EE:51:CA:06
            X509v3 Authority Key Identifier:
                keyid:85:15:BA:17:7D:97:3C:9F:02:F4:F6:5B:12:63:F5:12:7D:F7:AA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/8515BA177D973C9F02F4F65B1263F5127DF7AA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8515BA177D973C9F02F4F65B1263F5127DF7AA64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3EAE9A5F699793CFBACA9E2BBDA8BA2733346FC66D487F8C683F72D81440D9E2/0/34352e3233372e3137362e302f32322d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ba:25:f9:fc:24:3f:46:e0:03:3e:4c:c4:83:e8:90:e0:71:
         d4:78:18:fa:c6:38:53:fb:e5:c0:83:61:17:1b:b8:34:94:dd:
         af:56:9a:97:b8:5d:ed:4c:21:b7:23:90:d3:af:91:89:25:df:
         cc:65:43:0b:50:fd:34:9f:f8:fa:58:52:5b:d4:f4:42:84:10:
         e3:5d:26:47:ef:e1:f4:38:59:6b:9e:58:ab:0b:06:49:10:87:
         32:3a:20:e4:96:56:c7:f8:ba:08:df:e0:ce:67:59:cb:8c:57:
         b5:6c:2a:57:bf:1a:a0:9f:cc:ab:17:65:6a:35:29:06:c4:51:
         37:83:a9:99:ff:fb:ef:cb:5d:2a:d4:12:1f:19:87:c3:2c:e8:
         bb:b2:3c:be:10:d0:06:f5:0b:eb:16:87:5b:35:e7:3d:37:77:
         e7:9f:a0:e3:6c:75:5d:5e:ee:72:a7:45:36:40:71:36:1f:d8:
         23:60:29:d2:b4:e1:d1:62:27:45:a5:a9:21:02:5f:6d:c0:ad:
         9b:b3:60:29:f9:55:08:33:a7:57:dd:50:9c:db:f3:c2:a3:47:
         03:50:cf:2d:b7:bc:c5:f1:0e:f9:19:03:3e:e7:a5:97:f3:d5:
         28:62:b7:18:59:0d:2e:c6:18:b3:86:83:70:44:e9:6c:87:39:
         03:ec:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:45 2025 by rpki-client