Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32332d3233203d3e20323636363535.roa
File:                     34352e3232352e3133322e302f32332d3233203d3e20323636363535.roa (raw, json)
Hash identifier:          2Btgex9BtXYYUTydh5XtTdiwyqH/hRLTpVXcz6xG3yE=
Subject key identifier:   81:90:F9:46:9A:CF:5D:C5:7C:63:42:1A:1C:57:7F:2C:2F:9E:1B:70
Certificate issuer:       /CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
Certificate serial:       1069EC78F9114A3388C6A7883FA9189A011B5ACB
Authority key identifier: 97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32332d3233203d3e20323636363535.roa
Signing time:             Tue 04 Feb 2025 18:24:16 +0000
ROA not before:           Tue 04 Feb 2025 18:19:16 +0000
ROA not after:            Tue 03 Feb 2026 18:24:16 +0000
asID:                     266655
IP address blocks:        45.225.132.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:69:ec:78:f9:11:4a:33:88:c6:a7:88:3f:a9:18:9a:01:1b:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB
        Validity
            Not Before: Feb  4 18:19:16 2025 GMT
            Not After : Feb  3 18:24:16 2026 GMT
        Subject: CN=8190F9469ACF5DC57C63421A1C577F2C2F9E1B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:d7:d0:08:bb:53:c0:b6:97:9a:47:22:9c:
                    4a:a9:1a:de:6c:63:c6:f0:db:ad:83:65:3f:f7:f1:
                    fd:1e:ce:14:8f:d2:58:75:9e:af:48:4e:0c:61:49:
                    3e:a8:76:b2:2d:8f:a6:30:ac:31:2e:d9:a8:9c:4a:
                    7d:b8:7c:87:6a:ec:0a:5b:52:a2:6a:63:7d:c9:d6:
                    3f:50:de:d3:1d:22:42:ac:74:1c:64:40:f9:fe:05:
                    69:0b:d9:34:ab:70:ea:09:63:2d:12:16:d1:68:44:
                    bc:34:a6:88:ca:b1:f5:46:54:27:be:80:e1:66:25:
                    10:d5:0c:d4:1f:a2:d5:d3:b8:70:ad:45:ff:21:fc:
                    ef:46:2b:54:a9:b0:b2:3f:f9:f8:54:7a:91:af:29:
                    08:d3:bf:d8:e0:d9:20:93:a2:87:0d:12:20:82:a1:
                    23:ae:63:85:07:03:6e:e7:6f:23:5c:24:b4:25:91:
                    3d:0b:9d:4a:fa:b4:af:ed:30:6a:2f:9e:5c:f6:7f:
                    15:f1:41:e2:c9:09:e8:7e:93:72:c8:26:3b:45:02:
                    16:24:a1:03:e0:ba:46:e2:e6:fa:bd:3f:7e:8b:3f:
                    0b:42:c2:f1:d4:31:dc:b0:2b:d6:2d:10:1f:b9:92:
                    2c:cf:b9:55:2d:ba:f8:18:73:50:49:41:95:00:d4:
                    05:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:90:F9:46:9A:CF:5D:C5:7C:63:42:1A:1C:57:7F:2C:2F:9E:1B:70
            X509v3 Authority Key Identifier:
                keyid:97:D1:E8:1C:AF:D7:CF:1F:5F:EE:08:28:5E:A1:17:7A:46:AB:17:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97D1E81CAFD7CF1F5FEE08285EA1177A46AB17CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58987EAFB0C2B7C4CEE1389DF7A75BA8E5134C60DBB53093024E2471BDA66276/0/34352e3232352e3133322e302f32332d3233203d3e20323636363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:ef:5e:4e:fe:fc:c5:72:8f:c5:7c:9f:b4:83:4d:31:cc:30:
         8d:5b:e5:a6:4b:e3:9e:92:4d:cf:6e:ac:14:b8:0c:e4:4a:ab:
         0a:b9:b9:d4:75:c3:5c:a8:21:ae:4f:fa:49:5d:e1:1b:9c:82:
         3a:52:72:62:cc:df:8f:f4:7d:16:6f:29:70:f7:8e:f4:34:26:
         79:e1:9b:18:41:ae:a1:76:e4:d6:d7:5d:f7:5a:df:58:88:b1:
         14:4e:79:ae:ef:11:88:53:27:da:58:bc:9a:44:f4:f1:ae:ae:
         78:d2:14:ec:e4:83:8d:f0:96:68:5c:d9:fb:65:4f:4f:18:82:
         d9:31:9c:17:45:67:e4:fc:fc:00:69:fd:35:47:bd:a6:b2:c7:
         20:83:fd:9b:3d:b5:7a:f9:57:ee:e6:cc:b4:84:f4:5a:64:d8:
         66:84:8c:30:d4:c7:a3:d4:50:5d:ae:33:b7:10:e2:d2:69:37:
         3b:92:d1:bb:8e:24:35:6b:bb:2b:e0:50:82:25:fb:49:ac:27:
         13:c5:ed:55:f8:f6:b8:aa:a5:cb:82:04:0b:e7:a1:9e:e6:53:
         cb:a9:c6:cd:49:3f:10:0c:fa:78:db:bb:b7:72:98:9d:91:ba:
         45:2e:3e:ee:a6:12:f7:e3:c1:d6:ba:08:e6:8d:ca:c3:30:0b:
         2a:f4:de:73
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEGnsePkRSjOIxqeIP6kYmgEbWsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdEMUU4MUNBRkQ3Q0YxRjVGRUUwODI4NUVBMTE3N0E0
NkFCMTdDQjAeFw0yNTAyMDQxODE5MTZaFw0yNjAyMDMxODI0MTZaMDMxMTAvBgNV
BAMTKDgxOTBGOTQ2OUFDRjVEQzU3QzYzNDIxQTFDNTc3RjJDMkY5RTFCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7+tfQCLtTwLaXmkcinEqpGt5s
Y8bw262DZT/38f0ezhSP0lh1nq9ITgxhST6odrItj6YwrDEu2aicSn24fIdq7Apb
UqJqY33J1j9Q3tMdIkKsdBxkQPn+BWkL2TSrcOoJYy0SFtFoRLw0pojKsfVGVCe+
gOFmJRDVDNQfotXTuHCtRf8h/O9GK1SpsLI/+fhUepGvKQjTv9jg2SCToocNEiCC
oSOuY4UHA27nbyNcJLQlkT0LnUr6tK/tMGovnlz2fxXxQeLJCeh+k3LIJjtFAhYk
oQPgukbi5vq9P36LPwtCwvHUMdywK9YtEB+5kizPuVUtuvgYc1BJQZUA1AVLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUgZD5RprPXcV8Y0IaHFd/LC+eG3AwHwYDVR0j
BBgwFoAUl9HoHK/Xzx9f7ggoXqEXekarF8swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODk4N0VBRkIwQzJCN0M0Q0VFMTM4OURGN0E3NUJBOEU1
MTM0QzYwREJCNTMwOTMwMjRFMjQ3MUJEQTY2Mjc2LzAvOTdEMUU4MUNBRkQ3Q0Yx
RjVGRUUwODI4NUVBMTE3N0E0NkFCMTdDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85N0QxRTgxQ0FGRDdDRjFGNUZF
RTA4Mjg1RUExMTc3QTQ2QUIxN0NCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg5ODdFQUZCMEMyQjdDNENFRTEzODlERjdBNzVCQThFNTEzNEM2MERC
QjUzMDkzMDI0RTI0NzFCREE2NjI3Ni8wLzM0MzUyZTMyMzIzNTJlMzEzMzMyMmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM2MzYzNTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLeGE
MA0GCSqGSIb3DQEBCwUAA4IBAQBW715O/vzFco/FfJ+0g00xzDCNW+WmS+Oekk3P
bqwUuAzkSqsKubnUdcNcqCGuT/pJXeEbnII6UnJizN+P9H0Wbylw9470NCZ54ZsY
Qa6hduTW1133Wt9YiLEUTnmu7xGIUyfaWLyaRPTxrq540hTs5ION8JZoXNn7ZU9P
GILZMZwXRWfk/PwAaf01R72msscgg/2bPbV6+Vfu5sy0hPRaZNhmhIww1Mej1FBd
rjO3EOLSaTc7ktG7jiQ1a7sr4FCCJftJrCcTxe1V+Pa4qqXLggQL56Ge5lPLqcbN
ST8QDPp427u3cpidkbpFLj7uphL348HWugjmjcrDMAsq9N5z
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:20:46 2025 by rpki-client