Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134392e302f32342d3234203d3e20323636373039.roa
File:                     34352e3232392e3134392e302f32342d3234203d3e20323636373039.roa (raw, json)
Hash identifier:          yWfkfY9CJ8wUFEy7qawFum+3qZ8m6THDXaY1xBoHvQQ=
Subject key identifier:   A2:F6:52:D1:01:06:E4:62:FA:00:D0:11:BE:B2:5C:A6:7B:36:87:45
Certificate issuer:       /CN=779F88CEF196B5EBF62DE93CD9CB49C78F317C2A
Certificate serial:       167FFEEF9F9CFCA42C7320724A9ABEF337E68819
Authority key identifier: 77:9F:88:CE:F1:96:B5:EB:F6:2D:E9:3C:D9:CB:49:C7:8F:31:7C:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134392e302f32342d3234203d3e20323636373039.roa
Signing time:             Tue 04 Feb 2025 18:17:07 +0000
ROA not before:           Tue 04 Feb 2025 18:12:07 +0000
ROA not after:            Tue 03 Feb 2026 18:17:07 +0000
asID:                     266709
IP address blocks:        45.229.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7f:fe:ef:9f:9c:fc:a4:2c:73:20:72:4a:9a:be:f3:37:e6:88:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779F88CEF196B5EBF62DE93CD9CB49C78F317C2A
        Validity
            Not Before: Feb  4 18:12:07 2025 GMT
            Not After : Feb  3 18:17:07 2026 GMT
        Subject: CN=A2F652D10106E462FA00D011BEB25CA67B368745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:9e:3f:89:4c:d2:89:f1:7b:c9:81:6d:83:
                    b4:4b:5b:a6:1e:b5:09:99:8a:e6:72:aa:40:97:fb:
                    4d:87:93:01:ea:b8:1d:7f:36:d6:0b:ac:98:07:b4:
                    e6:76:76:9f:36:c1:d0:80:e8:05:3e:98:f3:d4:d3:
                    a8:86:b9:73:b6:4b:b6:74:51:29:14:76:6e:a3:19:
                    bf:44:e7:3c:b9:3b:5a:12:1d:20:e8:81:21:e7:c0:
                    b9:8d:55:cd:87:98:f4:2c:71:6c:41:42:ba:b2:73:
                    a6:bd:02:22:de:97:ba:87:4d:06:e6:9e:13:e1:79:
                    01:f2:1a:c8:22:81:a7:09:04:24:5e:01:d1:a2:ff:
                    90:84:3a:bd:a5:1b:c8:da:cc:15:ec:2d:d2:cb:1c:
                    7e:48:29:9f:9e:e6:1a:d1:a0:a2:85:62:35:5f:a3:
                    70:5f:b4:c0:98:03:90:ee:85:6f:fe:b4:06:a3:f4:
                    71:a5:13:58:cc:b0:c7:ca:f5:05:20:e0:81:37:c8:
                    1d:4b:c8:86:82:1a:d6:63:52:cc:22:6f:af:3e:dc:
                    d3:ba:98:fb:0a:44:65:7d:b8:74:66:1f:7a:c5:95:
                    61:a3:fa:6a:8f:68:53:c3:26:07:84:39:95:ef:c0:
                    7c:3a:48:31:a4:c2:68:2e:fc:cf:64:47:f8:ab:42:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F6:52:D1:01:06:E4:62:FA:00:D0:11:BE:B2:5C:A6:7B:36:87:45
            X509v3 Authority Key Identifier:
                keyid:77:9F:88:CE:F1:96:B5:EB:F6:2D:E9:3C:D9:CB:49:C7:8F:31:7C:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/779F88CEF196B5EBF62DE93CD9CB49C78F317C2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70A1CEA842F9ED29DD27DD97EFAB2973D5BB279303E37390D508F0F778E89CB4/0/34352e3232392e3134392e302f32342d3234203d3e20323636373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:63:8b:a1:24:0d:fb:e3:8c:cb:a9:14:67:3e:76:f6:e3:
         37:54:c2:e0:72:c7:a4:f3:bc:c4:9f:70:32:41:f6:55:c3:37:
         9e:5d:ad:7d:7e:36:4a:6c:9e:4c:1e:81:e4:48:13:c5:04:08:
         da:ff:34:49:75:a6:c7:f1:e9:2e:0b:2e:b1:f6:de:a5:fd:3a:
         31:4e:6d:c5:ff:06:d3:96:a5:71:95:1e:64:41:96:80:82:84:
         79:3e:66:ba:54:fa:1b:97:e5:a8:f6:f0:4a:70:1b:3c:f4:fc:
         13:8f:9e:2e:98:0d:4d:2f:7a:a8:7b:fd:35:ff:a5:0b:27:fe:
         58:75:a9:d8:5c:ac:76:23:6c:e7:58:a4:5d:b9:bf:3e:05:97:
         3c:de:0c:21:e1:88:b0:22:60:56:27:24:3b:de:b8:6a:1a:4e:
         98:ca:e7:c3:25:a3:2c:80:3a:e3:bc:26:9c:01:b3:5a:f2:0f:
         47:73:b3:35:ce:82:fc:10:0c:10:03:5c:65:79:84:e6:40:2f:
         14:58:65:1d:fc:31:4f:d4:69:09:bf:8f:d1:16:2e:af:a2:4a:
         7d:9d:55:7a:39:ab:c4:49:39:3a:01:91:94:9e:bf:8b:53:de:
         91:9b:6b:a8:b2:d7:ec:0c:2b:0c:34:eb:d3:4b:12:50:77:59:
         a7:d1:b1:d2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUFn/+75+c/KQscyBySpq+8zfmiBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc5Rjg4Q0VGMTk2QjVFQkY2MkRFOTNDRDlDQjQ5Qzc4
RjMxN0MyQTAeFw0yNTAyMDQxODEyMDdaFw0yNjAyMDMxODE3MDdaMDMxMTAvBgNV
BAMTKEEyRjY1MkQxMDEwNkU0NjJGQTAwRDAxMUJFQjI1Q0E2N0IzNjg3NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuIZ4/iUzSifF7yYFtg7RLW6Ye
tQmZiuZyqkCX+02HkwHquB1/NtYLrJgHtOZ2dp82wdCA6AU+mPPU06iGuXO2S7Z0
USkUdm6jGb9E5zy5O1oSHSDogSHnwLmNVc2HmPQscWxBQrqyc6a9AiLel7qHTQbm
nhPheQHyGsgigacJBCReAdGi/5CEOr2lG8jazBXsLdLLHH5IKZ+e5hrRoKKFYjVf
o3BftMCYA5DuhW/+tAaj9HGlE1jMsMfK9QUg4IE3yB1LyIaCGtZjUswib68+3NO6
mPsKRGV9uHRmH3rFlWGj+mqPaFPDJgeEOZXvwHw6SDGkwmgu/M9kR/irQpuXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUovZS0QEG5GL6ANARvrJcpns2h0UwHwYDVR0j
BBgwFoAUd5+IzvGWtev2Lek82ctJx48xfCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MEExQ0VBODQyRjlFRDI5REQyN0REOTdFRkFCMjk3M0Q1
QkIyNzkzMDNFMzczOTBENTA4RjBGNzc4RTg5Q0I0LzAvNzc5Rjg4Q0VGMTk2QjVF
QkY2MkRFOTNDRDlDQjQ5Qzc4RjMxN0MyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83NzlGODhDRUYxOTZCNUVCRjYy
REU5M0NEOUNCNDlDNzhGMzE3QzJBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzBBMUNFQTg0MkY5RUQyOUREMjdERDk3RUZBQjI5NzNENUJCMjc5MzAz
RTM3MzkwRDUwOEYwRjc3OEU4OUNCNC8wLzM0MzUyZTMyMzIzOTJlMzEzNDM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2MzczMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALeWV
MA0GCSqGSIb3DQEBCwUAA4IBAQAdjWOLoSQN++OMy6kUZz529uM3VMLgcsek87zE
n3AyQfZVwzeeXa19fjZKbJ5MHoHkSBPFBAja/zRJdabH8ekuCy6x9t6l/ToxTm3F
/wbTlqVxlR5kQZaAgoR5Pma6VPobl+Wo9vBKcBs89PwTj54umA1NL3qoe/01/6UL
J/5YdanYXKx2I2znWKRdub8+BZc83gwh4YiwImBWJyQ73rhqGk6YyufDJaMsgDrj
vCacAbNa8g9Hc7M1zoL8EAwQA1xleYTmQC8UWGUd/DFP1GkJv4/RFi6vokp9nVV6
OavESTk6AZGUnr+LU96Rm2uostfsDCsMNOvTSxJQd1mn0bHS
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:46:08 2025 by rpki-client