Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132342e302f32322d3232203d3e20323637383831.roa
File:                     34352e3137372e3132342e302f32322d3232203d3e20323637383831.roa (raw, json)
Hash identifier:          czDqRj2U7XrIMRVDe9gVCe9L1U2ovnbEXuvvb7HIYtI=
Subject key identifier:   9D:84:D7:BA:06:FD:08:0E:05:CA:08:21:C7:8A:EF:66:4D:F6:F4:D0
Certificate issuer:       /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Certificate serial:       57C2A4164501B108356A288DF1741787647FEEE1
Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132342e302f32322d3232203d3e20323637383831.roa
Signing time:             Tue 04 Feb 2025 18:47:44 +0000
ROA not before:           Tue 04 Feb 2025 18:42:44 +0000
ROA not after:            Tue 03 Feb 2026 18:47:44 +0000
asID:                     267881
IP address blocks:        45.177.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c2:a4:16:45:01:b1:08:35:6a:28:8d:f1:74:17:87:64:7f:ee:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
        Validity
            Not Before: Feb  4 18:42:44 2025 GMT
            Not After : Feb  3 18:47:44 2026 GMT
        Subject: CN=9D84D7BA06FD080E05CA0821C78AEF664DF6F4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:7d:49:90:e1:e9:4e:4c:57:0d:3e:12:1a:
                    ce:89:be:c3:ad:88:a7:65:53:8f:a8:e9:91:cf:8a:
                    7e:b6:83:82:29:71:fe:ff:71:2b:33:6e:79:48:de:
                    cf:47:a6:e4:2a:4d:0e:ec:b3:8c:6a:ed:f9:d2:c8:
                    f9:0c:d9:57:f4:22:d5:92:74:de:16:69:30:c8:50:
                    b6:61:14:d4:d4:65:9a:44:23:68:b7:47:5b:b7:b9:
                    8b:56:32:3a:1b:f4:2e:e0:36:69:b8:8c:0a:7c:e5:
                    e2:be:de:4a:0e:05:b5:9e:19:44:37:5b:c7:fe:ed:
                    ab:6e:9d:a6:3b:24:01:f9:43:6b:3a:bb:7c:ee:d8:
                    ba:c8:b7:34:88:c1:db:75:ab:db:ee:09:f8:d8:ea:
                    1b:7e:0f:73:c7:ca:b1:68:54:31:ad:62:48:f6:35:
                    71:c9:27:ea:97:ad:16:ad:c6:bf:f9:38:b3:82:ba:
                    50:93:06:56:f0:33:77:54:b4:0d:60:98:11:47:02:
                    34:d4:9a:01:e1:ed:c3:a7:a6:27:84:25:c4:64:8d:
                    37:30:91:4d:b0:a6:e9:bb:4a:15:42:9b:14:eb:50:
                    77:4f:6e:13:81:23:9b:9c:d3:78:88:41:62:9b:85:
                    ca:8d:59:f2:da:b3:74:6e:ca:63:74:87:a1:bb:e3:
                    f5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:D7:BA:06:FD:08:0E:05:CA:08:21:C7:8A:EF:66:4D:F6:F4:D0
            X509v3 Authority Key Identifier:
                keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132342e302f32322d3232203d3e20323637383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:3a:63:5f:51:6a:86:53:9d:be:82:b7:34:f3:ee:71:fa:19:
         3d:9f:71:b1:98:c6:c6:6f:16:5a:02:36:73:87:21:32:4d:8b:
         d6:62:d2:cc:f6:64:ee:1e:0a:9e:9d:7e:c3:21:d3:42:e8:e7:
         e9:67:30:29:3e:c4:7b:19:f6:a6:b9:04:d6:cd:27:f8:26:e5:
         52:19:2e:00:21:4d:2e:bc:2f:d0:67:29:0f:c2:f2:cf:bd:16:
         ab:d2:e8:45:69:ad:48:89:83:fa:81:ee:6f:d6:45:d0:8f:09:
         56:51:ed:02:e5:19:5c:fe:fa:4d:14:0a:17:3c:b4:b6:3a:1d:
         51:6a:66:7b:e6:97:63:64:0b:97:f7:5b:45:93:b1:a9:d8:52:
         ae:cb:ed:bf:8f:7a:e7:87:5f:20:6b:0d:53:bd:69:15:e2:47:
         e4:62:a6:fc:b0:80:0d:00:8c:8e:7d:fe:a3:c9:94:97:72:9f:
         05:3a:b6:e1:92:6f:f8:94:b0:af:37:76:bd:65:3a:f7:88:19:
         e8:32:c0:d8:6a:77:fa:39:a1:23:77:ff:65:4b:70:c7:70:de:
         06:90:65:4b:0a:a5:00:bc:ad:24:fe:2b:77:c0:e7:93:c7:2c:
         23:2f:e3:dc:d3:61:13:e2:3b:0f:ff:d5:85:06:12:a5:7d:e0:
         35:f1:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:11:15 2025 by rpki-client