Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/34352e3137302e3232342e302f32322d3234203d3e20323637373937.roa
File:                     34352e3137302e3232342e302f32322d3234203d3e20323637373937.roa (raw, json)
Hash identifier:          0/Ttu4OR+HB4tLCZzHIZx2MOm84WnGNCstt/epvQYjc=
Subject key identifier:   AA:1E:C2:F3:47:69:6F:DD:42:4A:BA:1B:61:AF:92:80:2E:A8:DB:9A
Certificate issuer:       /CN=E11C9AAE95EDFC53E36D6684141102643EAC48E8
Certificate serial:       6D11EF1A757F12B6A4A299ED03D2110F6D4A81BC
Authority key identifier: E1:1C:9A:AE:95:ED:FC:53:E3:6D:66:84:14:11:02:64:3E:AC:48:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/34352e3137302e3232342e302f32322d3234203d3e20323637373937.roa
Signing time:             Tue 04 Feb 2025 20:02:37 +0000
ROA not before:           Tue 04 Feb 2025 19:57:37 +0000
ROA not after:            Tue 03 Feb 2026 20:02:37 +0000
asID:                     267797
IP address blocks:        45.170.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:11:ef:1a:75:7f:12:b6:a4:a2:99:ed:03:d2:11:0f:6d:4a:81:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11C9AAE95EDFC53E36D6684141102643EAC48E8
        Validity
            Not Before: Feb  4 19:57:37 2025 GMT
            Not After : Feb  3 20:02:37 2026 GMT
        Subject: CN=AA1EC2F347696FDD424ABA1B61AF92802EA8DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:68:11:f2:22:a0:af:bd:3d:93:cc:bc:44:
                    a5:ff:14:a2:50:ab:76:b5:8a:b0:bb:e2:21:02:91:
                    01:cd:01:f1:a4:dd:be:4e:b0:35:51:4e:14:84:f0:
                    98:91:9d:65:c4:c0:5d:e4:fd:c9:98:9b:c9:dc:b8:
                    c2:15:21:2f:0b:e6:25:5f:ab:ac:5b:7c:ca:32:d9:
                    73:32:52:25:1c:02:bd:2c:ed:ab:e9:3a:fc:94:63:
                    ff:4d:7f:7c:7c:16:d6:01:7d:38:68:bb:da:0d:2e:
                    32:45:82:a1:45:2b:96:6b:9c:05:e7:99:b9:da:ef:
                    2d:39:58:99:71:ac:71:02:41:69:47:27:55:52:85:
                    f0:96:5b:af:5d:99:b3:d1:0f:d1:f9:ff:14:27:f4:
                    a8:b9:df:ea:f8:be:f1:87:55:6c:9a:2c:10:4c:44:
                    a8:92:2e:c6:1f:fb:66:71:f5:0f:2e:65:71:ed:9b:
                    a6:d2:6a:20:bc:a7:d1:7d:f1:78:df:43:9f:23:1e:
                    d0:9a:28:57:7c:b8:30:1f:9e:9a:ed:ec:42:96:ea:
                    36:86:b5:82:42:2f:46:6e:6a:f0:ea:65:96:ce:9c:
                    ed:31:ad:58:a5:57:48:07:db:45:1d:56:f5:cb:52:
                    b7:eb:d9:50:76:2b:71:5b:97:b6:a3:f3:47:25:0d:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:1E:C2:F3:47:69:6F:DD:42:4A:BA:1B:61:AF:92:80:2E:A8:DB:9A
            X509v3 Authority Key Identifier:
                keyid:E1:1C:9A:AE:95:ED:FC:53:E3:6D:66:84:14:11:02:64:3E:AC:48:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E11C9AAE95EDFC53E36D6684141102643EAC48E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/568734A90ED95B6AA712241ADE9D6E8FB28CAD6AA75CCDD9F4325C252A4457D6/0/34352e3137302e3232342e302f32322d3234203d3e20323637373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:a2:c9:39:24:5a:61:66:0d:d8:10:50:b5:c6:c8:d8:0a:3e:
         8c:aa:78:75:fc:c8:98:53:af:49:51:0f:65:3e:c6:9f:51:9e:
         4f:b3:fb:c0:9e:e4:96:75:71:77:f8:ab:45:92:b2:d9:3b:34:
         94:26:27:1e:44:5f:e9:11:96:12:e9:64:e7:ee:84:c5:ff:c2:
         b5:10:6c:99:cc:19:20:b5:d1:25:ac:c6:f3:70:f7:52:10:85:
         61:c2:c0:f7:28:ed:03:50:07:8e:6c:da:5b:57:84:3b:3c:c3:
         a0:0d:65:94:81:ea:a8:29:e6:83:89:88:21:b1:f7:90:e4:2e:
         73:62:59:2c:98:a5:ae:78:06:ba:51:af:ce:3f:c1:ee:d3:02:
         8e:bb:63:45:d6:bf:23:0e:5e:aa:01:4b:84:d3:7c:e7:16:7a:
         43:74:85:8d:18:29:81:11:c3:fa:a0:1b:b1:1f:2e:19:a6:8c:
         02:ee:e8:b7:16:97:33:37:5e:ab:6f:fc:f3:41:cf:97:f0:ab:
         12:bd:1b:e1:65:9e:b3:e3:41:1c:28:cc:f3:9d:e7:88:40:9c:
         d1:c7:30:5a:be:bb:2d:ae:91:d4:67:4e:4c:55:00:e2:10:5b:
         f8:fb:a2:93:e8:75:f8:d0:e9:2b:65:47:6e:2c:46:2b:c5:59:
         ea:3f:1d:0d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbRHvGnV/ErakopntA9IRD21KgbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTExQzlBQUU5NUVERkM1M0UzNkQ2Njg0MTQxMTAyNjQz
RUFDNDhFODAeFw0yNTAyMDQxOTU3MzdaFw0yNjAyMDMyMDAyMzdaMDMxMTAvBgNV
BAMTKEFBMUVDMkYzNDc2OTZGREQ0MjRBQkExQjYxQUY5MjgwMkVBOERCOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpGgR8iKgr709k8y8RKX/FKJQ
q3a1irC74iECkQHNAfGk3b5OsDVRThSE8JiRnWXEwF3k/cmYm8ncuMIVIS8L5iVf
q6xbfMoy2XMyUiUcAr0s7avpOvyUY/9Nf3x8FtYBfThou9oNLjJFgqFFK5ZrnAXn
mbna7y05WJlxrHECQWlHJ1VShfCWW69dmbPRD9H5/xQn9Ki53+r4vvGHVWyaLBBM
RKiSLsYf+2Zx9Q8uZXHtm6bSaiC8p9F98XjfQ58jHtCaKFd8uDAfnprt7EKW6jaG
tYJCL0ZuavDqZZbOnO0xrVilV0gH20UdVvXLUrfr2VB2K3Fbl7aj80clDeR7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUqh7C80dpb91CSrobYa+SgC6o25owHwYDVR0j
BBgwFoAU4RyarpXt/FPjbWaEFBECZD6sSOgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81Njg3MzRBOTBFRDk1QjZBQTcxMjI0MUFERTlENkU4RkIy
OENBRDZBQTc1Q0NERDlGNDMyNUMyNTJBNDQ1N0Q2LzAvRTExQzlBQUU5NUVERkM1
M0UzNkQ2Njg0MTQxMTAyNjQzRUFDNDhFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMTFDOUFBRTk1RURGQzUzRTM2
RDY2ODQxNDExMDI2NDNFQUM0OEU4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY4NzM0QTkwRUQ5NUI2QUE3MTIyNDFBREU5RDZFOEZCMjhDQUQ2QUE3
NUNDREQ5RjQzMjVDMjUyQTQ0NTdENi8wLzM0MzUyZTMxMzczMDJlMzIzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzczOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLarg
MA0GCSqGSIb3DQEBCwUAA4IBAQBhosk5JFphZg3YEFC1xsjYCj6Mqnh1/MiYU69J
UQ9lPsafUZ5Ps/vAnuSWdXF3+KtFkrLZOzSUJiceRF/pEZYS6WTn7oTF/8K1EGyZ
zBkgtdElrMbzcPdSEIVhwsD3KO0DUAeObNpbV4Q7PMOgDWWUgeqoKeaDiYghsfeQ
5C5zYlksmKWueAa6Ua/OP8Hu0wKOu2NF1r8jDl6qAUuE03znFnpDdIWNGCmBEcP6
oBuxHy4ZpowC7ui3FpczN16rb/zzQc+X8KsSvRvhZZ6z40EcKMzzneeIQJzRxzBa
vrstrpHUZ05MVQDiEFv4+6KT6HX40OkrZUduLEYrxVnqPx0N
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:46 2025 by rpki-client