Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e20323637373939.roa
File:                     34352e3137332e34342e302f32342d3234203d3e20323637373939.roa (raw, json)
Hash identifier:          hXgwhWcR79ZA6r/ocVVoZS0cIdoJ8Kt3N/pyhEzUAVE=
Subject key identifier:   1C:2F:24:83:8B:95:45:B0:95:A8:3D:61:B6:98:DE:E6:1D:F3:C6:C0
Certificate issuer:       /CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
Certificate serial:       7F730F64BB3500CAE837C5FB1C51C3228BF08B74
Authority key identifier: 7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e20323637373939.roa
Signing time:             Tue 04 Feb 2025 18:54:07 +0000
ROA not before:           Tue 04 Feb 2025 18:49:07 +0000
ROA not after:            Tue 03 Feb 2026 18:54:07 +0000
asID:                     267799
IP address blocks:        45.173.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:73:0f:64:bb:35:00:ca:e8:37:c5:fb:1c:51:c3:22:8b:f0:8b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C03E0A5C9816B574B54A163EC5F6E686D499DF2
        Validity
            Not Before: Feb  4 18:49:07 2025 GMT
            Not After : Feb  3 18:54:07 2026 GMT
        Subject: CN=1C2F24838B9545B095A83D61B698DEE61DF3C6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:09:09:3c:f7:84:d4:bd:7b:e7:13:82:fc:dd:
                    f0:b7:7a:bb:0e:9e:9a:8f:9b:48:30:4c:ea:75:95:
                    76:e4:c6:fa:5d:e2:9a:0e:66:14:ed:af:a3:cb:f6:
                    ab:de:97:2f:76:0b:76:5b:ff:d3:19:76:0e:32:74:
                    75:cb:f8:c1:fb:16:d4:27:c7:9a:7c:2a:d3:55:f8:
                    d5:e8:06:d9:f4:fd:f3:b7:3a:cd:c4:1b:22:e0:e7:
                    70:36:bf:2f:3c:dd:ca:2c:55:ed:16:61:6c:03:5a:
                    d0:9a:73:11:5d:81:36:ab:0e:bd:1c:89:75:23:16:
                    46:47:6b:31:16:2f:39:e1:94:17:df:e7:a8:d0:dc:
                    7a:18:9a:33:53:69:5f:10:6f:61:1e:0d:21:d3:31:
                    0d:f4:4a:3b:6b:79:7f:43:7a:1e:da:e5:5e:56:52:
                    22:37:e4:cb:e2:ba:b6:a4:4e:96:ca:dd:72:20:a5:
                    16:f2:60:d3:0c:0f:5b:5b:e0:07:84:dd:54:d2:af:
                    8b:04:59:83:4e:71:67:44:6e:48:28:0a:79:8f:1f:
                    77:aa:8e:58:bc:e5:8c:ce:94:ea:35:bf:5b:83:03:
                    7d:c2:1a:2d:9f:c2:a5:5b:52:5c:a6:1a:3e:9d:be:
                    b1:f8:18:8a:82:a8:e5:3f:53:88:6b:1e:e2:f1:80:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2F:24:83:8B:95:45:B0:95:A8:3D:61:B6:98:DE:E6:1D:F3:C6:C0
            X509v3 Authority Key Identifier:
                keyid:7C:03:E0:A5:C9:81:6B:57:4B:54:A1:63:EC:5F:6E:68:6D:49:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C03E0A5C9816B574B54A163EC5F6E686D499DF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E2DB3758A19E3B8E1C876BF71FB32DC8502434CB84B581342AF174B7783D5DF/0/34352e3137332e34342e302f32342d3234203d3e20323637373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:cb:c8:e9:87:46:93:ec:4d:2d:27:38:df:12:a7:35:47:a7:
         20:f2:70:39:41:e9:96:8d:47:a0:cb:19:d3:d6:9f:51:f3:c0:
         37:78:6c:78:92:9f:e6:d8:f3:d5:f9:e3:54:94:0c:5d:38:69:
         1b:cf:a0:89:da:12:b7:cb:8b:38:49:6e:13:27:eb:5c:94:86:
         b4:42:33:a2:24:86:94:1c:ab:2b:ed:35:e3:c4:26:a8:4d:0a:
         fc:1e:62:47:b1:68:21:10:dd:c2:63:60:96:21:a2:06:e8:41:
         43:2a:7d:0b:ea:c5:6f:4b:aa:86:bb:43:ec:d3:b6:6f:c2:c0:
         50:d7:bf:5c:50:54:a0:cd:b2:88:b9:66:73:c5:e1:c3:85:2d:
         d2:77:7a:00:9d:42:6f:b2:8f:a4:35:48:9a:50:2e:0d:a8:62:
         df:00:9e:dd:e0:49:ab:c7:b5:ff:03:6f:a6:77:ae:65:66:6e:
         70:48:3e:0f:81:9a:ce:68:c9:de:f8:67:a6:f2:6c:03:b9:f8:
         b9:84:6d:01:0a:2b:d3:a4:11:b7:df:d0:45:06:15:b1:ef:57:
         da:f2:c6:c2:f7:da:99:67:73:69:4e:28:55:79:53:b3:e2:eb:
         00:83:c4:82:09:97:a8:6f:83:36:c7:d9:c8:2f:fe:a2:0b:0f:
         28:75:a7:5b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUf3MPZLs1AMroN8X7HFHDIovwi3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0MwM0UwQTVDOTgxNkI1NzRCNTRBMTYzRUM1RjZFNjg2
RDQ5OURGMjAeFw0yNTAyMDQxODQ5MDdaFw0yNjAyMDMxODU0MDdaMDMxMTAvBgNV
BAMTKDFDMkYyNDgzOEI5NTQ1QjA5NUE4M0Q2MUI2OThERUU2MURGM0M2QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/CQk894TUvXvnE4L83fC3ersO
npqPm0gwTOp1lXbkxvpd4poOZhTtr6PL9qvely92C3Zb/9MZdg4ydHXL+MH7FtQn
x5p8KtNV+NXoBtn0/fO3Os3EGyLg53A2vy883cosVe0WYWwDWtCacxFdgTarDr0c
iXUjFkZHazEWLznhlBff56jQ3HoYmjNTaV8Qb2EeDSHTMQ30SjtreX9Deh7a5V5W
UiI35MviurakTpbK3XIgpRbyYNMMD1tb4AeE3VTSr4sEWYNOcWdEbkgoCnmPH3eq
jli85YzOlOo1v1uDA33CGi2fwqVbUlymGj6dvrH4GIqCqOU/U4hrHuLxgKefAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUHC8kg4uVRbCVqD1htpje5h3zxsAwHwYDVR0j
BBgwFoAUfAPgpcmBa1dLVKFj7F9uaG1JnfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RTJEQjM3NThBMTlFM0I4RTFDODc2QkY3MUZCMzJEQzg1
MDI0MzRDQjg0QjU4MTM0MkFGMTc0Qjc3ODNENURGLzAvN0MwM0UwQTVDOTgxNkI1
NzRCNTRBMTYzRUM1RjZFNjg2RDQ5OURGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QzAzRTBBNUM5ODE2QjU3NEI1
NEExNjNFQzVGNkU2ODZENDk5REYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEUyREIzNzU4QTE5RTNCOEUxQzg3NkJGNzFGQjMyREM4NTAyNDM0Q0I4
NEI1ODEzNDJBRjE3NEI3NzgzRDVERi8wLzM0MzUyZTMxMzczMzJlMzQzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM3MzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2tLDAN
BgkqhkiG9w0BAQsFAAOCAQEAI8vI6YdGk+xNLSc43xKnNUenIPJwOUHplo1HoMsZ
09afUfPAN3hseJKf5tjz1fnjVJQMXThpG8+gidoSt8uLOEluEyfrXJSGtEIzoiSG
lByrK+0148QmqE0K/B5iR7FoIRDdwmNgliGiBuhBQyp9C+rFb0uqhrtD7NO2b8LA
UNe/XFBUoM2yiLlmc8Xhw4Ut0nd6AJ1Cb7KPpDVImlAuDahi3wCe3eBJq8e1/wNv
pneuZWZucEg+D4GazmjJ3vhnpvJsA7n4uYRtAQor06QRt9/QRQYVse9X2vLGwvfa
mWdzaU4oVXlTs+LrAIPEggmXqG+DNsfZyC/+ogsPKHWnWw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:55 2025 by rpki-client