Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/34352e3137392e37322e302f32322d3234203d3e20323637393132.roa
File:                     34352e3137392e37322e302f32322d3234203d3e20323637393132.roa (raw, json)
Hash identifier:          MEJlGTd/q1+b+R0dB7G3dKRIVjDD7IewtnwYhUmwGAk=
Subject key identifier:   74:EB:E0:E2:84:16:BA:72:B4:92:B1:29:5A:36:59:05:B1:2C:3F:7B
Certificate issuer:       /CN=CEB2B51AACA01EE582E365F19561EF79882825A8
Certificate serial:       62A1FA84FAB00C23AEBA4FE4652FD9B24355B488
Authority key identifier: CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/34352e3137392e37322e302f32322d3234203d3e20323637393132.roa
Signing time:             Tue 04 Feb 2025 18:09:10 +0000
ROA not before:           Tue 04 Feb 2025 18:04:10 +0000
ROA not after:            Tue 03 Feb 2026 18:09:10 +0000
asID:                     267912
IP address blocks:        45.179.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:fa:84:fa:b0:0c:23:ae:ba:4f:e4:65:2f:d9:b2:43:55:b4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEB2B51AACA01EE582E365F19561EF79882825A8
        Validity
            Not Before: Feb  4 18:04:10 2025 GMT
            Not After : Feb  3 18:09:10 2026 GMT
        Subject: CN=74EBE0E28416BA72B492B1295A365905B12C3F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:87:b4:71:14:fa:58:4e:83:de:03:16:4b:
                    6f:4e:02:c0:60:00:a5:78:d4:e5:99:87:d5:03:e0:
                    32:04:df:a1:59:a8:7a:21:f6:05:ec:cd:c9:59:02:
                    f4:f9:a5:53:46:0b:b0:b8:a3:14:2d:3a:52:a5:5a:
                    7f:35:38:bb:73:f0:9c:b6:e1:2e:75:50:0a:aa:02:
                    5c:6b:ff:f7:8b:68:f5:2c:b8:32:18:6f:88:cc:57:
                    84:52:23:e3:25:ee:57:d1:1f:32:7d:c1:a8:ef:05:
                    1d:31:d1:f3:47:93:58:56:27:33:dd:7d:30:ff:72:
                    00:0f:5b:cf:4f:64:5b:bf:5f:74:53:85:b1:e3:72:
                    17:25:e4:57:b8:db:00:d8:b0:3f:ee:3a:cb:ee:a7:
                    aa:50:77:67:d5:63:d0:d8:d7:4d:10:f0:c7:7b:1d:
                    5b:a7:59:46:66:b7:25:ff:56:f0:86:32:74:9d:6e:
                    3a:22:42:f6:02:2f:a3:32:5a:dc:94:85:ce:61:07:
                    9b:81:e5:e2:c5:fa:82:9d:86:12:39:8a:3d:dd:bb:
                    3a:e6:fa:31:2d:ba:33:b8:e8:ea:82:b7:98:bf:3a:
                    3b:75:d6:ff:66:a3:b7:06:0b:4d:aa:f7:b9:1d:bc:
                    80:58:e3:4b:82:77:f0:8f:3e:9e:f0:62:c9:2f:2f:
                    1d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EB:E0:E2:84:16:BA:72:B4:92:B1:29:5A:36:59:05:B1:2C:3F:7B
            X509v3 Authority Key Identifier:
                keyid:CE:B2:B5:1A:AC:A0:1E:E5:82:E3:65:F1:95:61:EF:79:88:28:25:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEB2B51AACA01EE582E365F19561EF79882825A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6909C5AC7C2B3EA014CD82BF5FD12A0EDB60D9DC924BADEAB517B9259CA8CAE4/0/34352e3137392e37322e302f32322d3234203d3e20323637393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:9a:67:9d:7c:07:1f:b5:c6:9c:68:ef:ca:c7:20:3f:92:
         74:a6:93:aa:64:61:52:97:a5:70:3b:7e:cb:56:1a:9b:e0:53:
         77:13:be:2e:57:57:a9:82:2f:ad:58:a3:70:64:ce:b3:2b:91:
         0f:d6:f8:81:c1:c4:c3:59:2e:a4:49:00:ed:77:cb:ec:fd:95:
         eb:c0:7b:85:50:54:9a:4e:3d:db:2a:eb:50:69:2d:82:93:33:
         06:c4:8a:42:13:45:f5:e5:4f:93:b6:67:bf:f1:e7:ff:12:e5:
         f1:6e:63:9e:34:a4:68:9e:88:9a:fe:15:5f:85:df:ec:6e:23:
         03:0a:bf:1e:e5:4e:10:78:70:30:2e:41:74:36:e0:ab:7a:c2:
         8e:18:66:77:f3:47:7a:4f:01:fc:a8:19:1d:b8:e1:72:dd:1c:
         9c:6b:88:9c:a4:1c:0f:60:cc:83:06:35:55:15:f4:65:1c:9a:
         6a:3a:06:96:85:83:7c:29:ed:43:bf:05:e0:e4:6f:f7:dd:23:
         b5:78:60:ae:98:4f:19:62:80:f3:99:31:39:a8:6a:4f:df:38:
         1a:bb:12:51:6c:f1:0d:3e:52:1d:f2:47:1e:fc:54:de:35:de:
         51:5d:28:c4:1a:a6:6b:3a:3c:ea:2c:2a:13:6e:8c:bc:02:6c:
         4a:f3:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:59:06 2025 by rpki-client