Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/34352e3137372e37342e302f32342d3234203d3e20323637393231.roa
File:                     34352e3137372e37342e302f32342d3234203d3e20323637393231.roa (raw, json)
Hash identifier:          zAXN7rj7sXIZuPaucGOcybrMAb5pTnDd4f5p8W5O2tw=
Subject key identifier:   5E:45:5A:86:97:42:F4:57:37:A1:BE:CC:16:35:31:7A:A1:9A:81:90
Certificate issuer:       /CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94
Certificate serial:       109A4930468F6F535446DAD65F086FE859B5B79F
Authority key identifier: D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/34352e3137372e37342e302f32342d3234203d3e20323637393231.roa
Signing time:             Tue 04 Feb 2025 18:16:38 +0000
ROA not before:           Tue 04 Feb 2025 18:11:38 +0000
ROA not after:            Tue 03 Feb 2026 18:16:38 +0000
asID:                     267921
IP address blocks:        45.177.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9a:49:30:46:8f:6f:53:54:46:da:d6:5f:08:6f:e8:59:b5:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D931FE44222442BBDEDD8D7CA42FDACF1AB78A94
        Validity
            Not Before: Feb  4 18:11:38 2025 GMT
            Not After : Feb  3 18:16:38 2026 GMT
        Subject: CN=5E455A869742F45737A1BECC1635317AA19A8190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:b5:ad:61:0a:dd:c4:bb:8d:ac:2a:8f:e2:
                    28:e6:e9:e3:59:a9:d0:ff:2b:ec:e6:5e:16:ad:4c:
                    98:5b:67:04:14:e0:11:b8:ed:d5:9d:dd:69:7a:42:
                    1d:3f:36:25:18:a1:3e:65:0d:ea:25:f0:74:1c:89:
                    06:06:be:2b:6d:f9:75:1b:4b:9c:0f:3b:f4:b6:03:
                    c3:0d:5c:6f:30:7e:ed:b9:f3:0e:b5:86:58:ad:d5:
                    f4:bc:63:16:cc:55:44:30:03:2b:18:3f:52:a9:e7:
                    be:d9:46:d2:4b:c2:cc:b8:1d:ec:35:27:d9:d9:53:
                    3f:a1:73:22:98:da:c0:f1:35:ae:ef:7e:5e:7b:37:
                    e3:0d:49:84:72:0e:2f:7a:74:50:c8:21:04:7b:b3:
                    d1:11:3c:24:e0:cf:f1:26:77:a6:f7:02:17:2e:9d:
                    f8:10:a2:7d:66:02:5e:dd:2c:13:c9:58:2b:13:da:
                    5b:65:a7:ba:b7:28:a3:4a:da:82:3a:74:c4:76:64:
                    d8:3a:00:70:48:9a:02:e4:57:9f:54:67:72:59:b3:
                    23:23:77:fe:1f:31:1d:14:85:6b:b4:c5:e4:17:b9:
                    66:33:e9:29:18:a2:e3:2d:3c:7d:ed:dc:c5:43:f3:
                    23:23:82:e6:81:ce:31:07:b3:a5:01:6d:fb:bb:a9:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:45:5A:86:97:42:F4:57:37:A1:BE:CC:16:35:31:7A:A1:9A:81:90
            X509v3 Authority Key Identifier:
                keyid:D9:31:FE:44:22:24:42:BB:DE:DD:8D:7C:A4:2F:DA:CF:1A:B7:8A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D931FE44222442BBDEDD8D7CA42FDACF1AB78A94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D2208AC3298F8BF1EEB5E9C4140F34EFE346C5CC63CB678B49FA3F76CD80BA4/0/34352e3137372e37342e302f32342d3234203d3e20323637393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:a5:3b:26:2f:a5:77:4c:5a:bc:ba:0e:fd:90:8f:e2:70:00:
         b3:07:9d:f5:0e:b2:ae:8d:72:24:cb:da:6d:1e:3d:22:d6:ed:
         b1:54:3f:25:41:62:7e:16:5e:ce:fe:76:6f:17:ce:31:06:c6:
         02:43:3f:32:51:45:0f:e2:f0:a1:b6:07:2d:71:81:1d:7e:91:
         87:9b:b5:c1:8b:1b:45:52:f7:4f:1c:52:20:ea:64:92:e8:ec:
         b1:74:c2:32:f8:a9:c2:45:67:d9:cd:42:89:19:7f:3d:70:66:
         35:dd:4c:8e:db:95:5b:ff:8d:74:fa:60:ac:2a:99:78:b1:34:
         01:6e:aa:6f:c7:b1:fa:0b:fe:f1:25:f5:6c:eb:e4:da:f2:3f:
         19:bb:30:db:1f:80:01:3f:fd:f6:9a:c6:06:aa:b3:96:ba:8a:
         1d:00:31:19:7e:aa:e9:bd:4e:b9:ac:f4:9a:03:cf:67:f9:ad:
         f1:85:ea:cc:59:6d:0d:e5:98:c7:30:7f:86:4a:b7:a1:bd:5a:
         7f:1d:dc:2c:e4:5c:53:45:48:a0:4d:0e:9c:1e:de:19:a6:2d:
         3e:4c:ee:09:85:fe:6b:af:c2:32:87:a4:c4:b1:ea:6f:b6:2d:
         f1:eb:21:0f:1d:98:b9:d8:a0:7f:50:be:33:43:ea:e7:d5:45:
         c8:ae:d5:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUEJpJMEaPb1NURtrWXwhv6Fm1t58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDkzMUZFNDQyMjI0NDJCQkRFREQ4RDdDQTQyRkRBQ0Yx
QUI3OEE5NDAeFw0yNTAyMDQxODExMzhaFw0yNjAyMDMxODE2MzhaMDMxMTAvBgNV
BAMTKDVFNDU1QTg2OTc0MkY0NTczN0ExQkVDQzE2MzUzMTdBQTE5QTgxOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY27WtYQrdxLuNrCqP4ijm6eNZ
qdD/K+zmXhatTJhbZwQU4BG47dWd3Wl6Qh0/NiUYoT5lDeol8HQciQYGvitt+XUb
S5wPO/S2A8MNXG8wfu258w61hlit1fS8YxbMVUQwAysYP1Kp577ZRtJLwsy4Hew1
J9nZUz+hcyKY2sDxNa7vfl57N+MNSYRyDi96dFDIIQR7s9ERPCTgz/Emd6b3Ahcu
nfgQon1mAl7dLBPJWCsT2ltlp7q3KKNK2oI6dMR2ZNg6AHBImgLkV59UZ3JZsyMj
d/4fMR0UhWu0xeQXuWYz6SkYouMtPH3t3MVD8yMjguaBzjEHs6UBbfu7qTDpAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXkVahpdC9Fc3ob7MFjUxeqGagZAwHwYDVR0j
BBgwFoAU2TH+RCIkQrve3Y18pC/azxq3ipQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RDIyMDhBQzMyOThGOEJGMUVFQjVFOUM0MTQwRjM0RUZF
MzQ2QzVDQzYzQ0I2NzhCNDlGQTNGNzZDRDgwQkE0LzAvRDkzMUZFNDQyMjI0NDJC
QkRFREQ4RDdDQTQyRkRBQ0YxQUI3OEE5NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EOTMxRkU0NDIyMjQ0MkJCREVE
RDhEN0NBNDJGREFDRjFBQjc4QTk0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUQyMjA4QUMzMjk4RjhCRjFFRUI1RTlDNDE0MEYzNEVGRTM0NkM1Q0M2
M0NCNjc4QjQ5RkEzRjc2Q0Q4MEJBNC8wLzM0MzUyZTMxMzczNzJlMzczNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM5MzIzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2xSjAN
BgkqhkiG9w0BAQsFAAOCAQEALqU7Ji+ld0xavLoO/ZCP4nAAswed9Q6yro1yJMva
bR49ItbtsVQ/JUFifhZezv52bxfOMQbGAkM/MlFFD+LwobYHLXGBHX6Rh5u1wYsb
RVL3TxxSIOpkkujssXTCMvipwkVn2c1CiRl/PXBmNd1MjtuVW/+NdPpgrCqZeLE0
AW6qb8ex+gv+8SX1bOvk2vI/Gbsw2x+AAT/99prGBqqzlrqKHQAxGX6q6b1Ouaz0
mgPPZ/mt8YXqzFltDeWYxzB/hkq3ob1afx3cLORcU0VIoE0OnB7eGaYtPkzuCYX+
a6/CMoekxLHqb7Yt8eshDx2Yudigf1C+M0Pq59VFyK7VoA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:16:55 2025 by rpki-client