Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132372e302f32342d3234203d3e20323637383831.roa
File:                     34352e3137372e3132372e302f32342d3234203d3e20323637383831.roa (raw, json)
Hash identifier:          CzO56vxTQLLU1BhCgtsma+eMj5D0bD0rpsAYkcEjCfw=
Subject key identifier:   56:CE:55:B5:C5:D7:C5:7A:B3:AA:E2:71:C1:8F:4A:53:7C:3D:D9:A0
Certificate issuer:       /CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
Certificate serial:       1AFEB4319A4B62DDECD1DF8E0D463E0FDB15A7E2
Authority key identifier: DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132372e302f32342d3234203d3e20323637383831.roa
Signing time:             Tue 04 Feb 2025 18:47:43 +0000
ROA not before:           Tue 04 Feb 2025 18:42:43 +0000
ROA not after:            Tue 03 Feb 2026 18:47:43 +0000
asID:                     267881
IP address blocks:        45.177.127.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fe:b4:31:9a:4b:62:dd:ec:d1:df:8e:0d:46:3e:0f:db:15:a7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB145FAFC708C3BD136195C3A2A4059024EE404A
        Validity
            Not Before: Feb  4 18:42:43 2025 GMT
            Not After : Feb  3 18:47:43 2026 GMT
        Subject: CN=56CE55B5C5D7C57AB3AAE271C18F4A537C3DD9A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:e4:1b:b1:9c:80:45:97:4f:23:db:52:f4:
                    5e:f8:45:41:69:78:c8:49:20:8e:e0:30:cf:c0:bc:
                    6b:4d:cb:a7:ff:b8:e5:30:63:47:29:ce:f7:ad:59:
                    c5:08:01:55:9d:0d:c9:64:00:9e:ba:47:48:ca:3e:
                    9d:23:a7:73:97:54:35:bf:28:87:6a:d8:c0:07:28:
                    33:db:89:88:48:bb:7c:c7:b4:61:6d:95:eb:9e:36:
                    1f:6f:41:61:cd:99:93:10:29:09:93:46:1f:66:6b:
                    aa:86:99:19:80:b3:6e:aa:af:c7:d3:90:95:24:65:
                    b4:a6:6d:1d:1c:a1:d2:1a:5d:ea:0a:25:ad:7c:8c:
                    e8:67:1d:6b:79:f5:6f:12:1d:f7:05:c4:df:83:16:
                    74:c5:70:53:07:09:d7:38:6b:4c:42:1f:b5:ff:8a:
                    14:b3:fc:a9:8d:18:b7:8c:dd:52:fa:05:3f:00:ee:
                    fa:d8:7c:c7:83:67:23:59:ed:11:18:2a:13:a2:2b:
                    66:cd:a2:3f:85:d8:30:23:6d:0a:66:0a:ef:9a:a5:
                    63:75:90:6c:e0:21:17:7e:74:4a:ad:a3:8e:b9:5a:
                    5d:9b:57:71:6e:a7:10:07:66:c7:8d:db:da:2a:eb:
                    f7:b7:16:77:6e:8f:8d:a0:f3:1f:b6:72:fc:39:b2:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:55:B5:C5:D7:C5:7A:B3:AA:E2:71:C1:8F:4A:53:7C:3D:D9:A0
            X509v3 Authority Key Identifier:
                keyid:DB:14:5F:AF:C7:08:C3:BD:13:61:95:C3:A2:A4:05:90:24:EE:40:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB145FAFC708C3BD136195C3A2A4059024EE404A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71DABF3580E6AA5EC9BED9A9986EB700AC2800DD83BBAC871308C6A1862DD88C/0/34352e3137372e3132372e302f32342d3234203d3e20323637383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:21:a7:52:d1:fd:8c:68:6a:b9:c3:17:77:51:b4:86:32:82:
         34:29:35:b0:25:a0:d1:d2:fe:6b:50:0d:64:54:d3:b0:b9:c5:
         1e:21:f6:69:fe:fd:4d:f7:fc:0b:21:bd:39:4e:b3:63:6c:eb:
         fa:a9:fb:0a:d0:a0:d3:b2:f2:ef:b2:d4:58:a8:84:53:af:0b:
         0b:b8:02:17:e1:d9:1c:27:e2:e3:df:ae:88:fc:ba:5c:55:ce:
         db:3b:69:d4:8e:e8:14:3f:b1:f6:39:67:ad:40:8c:25:6e:0e:
         1b:ad:26:7d:e7:8c:59:a0:4b:82:e9:1a:e9:73:cd:52:0e:88:
         7f:95:0b:25:03:17:fc:c6:f1:e5:a8:99:d0:50:28:33:24:67:
         ae:2a:e6:2e:9e:fe:01:68:56:8b:80:37:6f:e5:12:d6:69:8a:
         47:ba:7c:96:b2:11:47:78:51:bd:e5:17:2f:bf:4a:3b:d1:8d:
         e4:16:9b:e3:c5:cc:6d:3a:f4:b3:7d:4c:7f:67:95:26:9a:96:
         6f:42:38:c5:91:5a:ca:ca:b3:40:6e:56:aa:23:bd:15:7a:92:
         0a:58:00:a0:45:ce:9f:55:1c:c1:d4:4d:b6:c2:43:6a:95:6d:
         18:7a:e2:74:ce:eb:cb:97:d8:31:d1:66:7f:fd:ad:d0:82:52:
         52:78:1f:06
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGv60MZpLYt3s0d+ODUY+D9sVp+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIxNDVGQUZDNzA4QzNCRDEzNjE5NUMzQTJBNDA1OTAy
NEVFNDA0QTAeFw0yNTAyMDQxODQyNDNaFw0yNjAyMDMxODQ3NDNaMDMxMTAvBgNV
BAMTKDU2Q0U1NUI1QzVEN0M1N0FCM0FBRTI3MUMxOEY0QTUzN0MzREQ5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjM+QbsZyARZdPI9tS9F74RUFp
eMhJII7gMM/AvGtNy6f/uOUwY0cpzvetWcUIAVWdDclkAJ66R0jKPp0jp3OXVDW/
KIdq2MAHKDPbiYhIu3zHtGFtleueNh9vQWHNmZMQKQmTRh9ma6qGmRmAs26qr8fT
kJUkZbSmbR0codIaXeoKJa18jOhnHWt59W8SHfcFxN+DFnTFcFMHCdc4a0xCH7X/
ihSz/KmNGLeM3VL6BT8A7vrYfMeDZyNZ7REYKhOiK2bNoj+F2DAjbQpmCu+apWN1
kGzgIRd+dEqto465Wl2bV3FupxAHZseN29oq6/e3Fnduj42g8x+2cvw5snUfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVs5VtcXXxXqzquJxwY9KU3w92aAwHwYDVR0j
BBgwFoAU2xRfr8cIw70TYZXDoqQFkCTuQEowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83MURBQkYzNTgwRTZBQTVFQzlCRUQ5QTk5ODZFQjcwMEFD
MjgwMEREODNCQkFDODcxMzA4QzZBMTg2MkREODhDLzAvREIxNDVGQUZDNzA4QzNC
RDEzNjE5NUMzQTJBNDA1OTAyNEVFNDA0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjE0NUZBRkM3MDhDM0JEMTM2
MTk1QzNBMkE0MDU5MDI0RUU0MDRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzFEQUJGMzU4MEU2QUE1RUM5QkVEOUE5OTg2RUI3MDBBQzI4MDBERDgz
QkJBQzg3MTMwOEM2QTE4NjJERDg4Qy8wLzM0MzUyZTMxMzczNzJlMzEzMjM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbF/
MA0GCSqGSIb3DQEBCwUAA4IBAQCzIadS0f2MaGq5wxd3UbSGMoI0KTWwJaDR0v5r
UA1kVNOwucUeIfZp/v1N9/wLIb05TrNjbOv6qfsK0KDTsvLvstRYqIRTrwsLuAIX
4dkcJ+Lj366I/LpcVc7bO2nUjugUP7H2OWetQIwlbg4brSZ954xZoEuC6Rrpc81S
Doh/lQslAxf8xvHlqJnQUCgzJGeuKuYunv4BaFaLgDdv5RLWaYpHunyWshFHeFG9
5Rcvv0o70Y3kFpvjxcxtOvSzfUx/Z5UmmpZvQjjFkVrKyrNAblaqI70VepIKWACg
Rc6fVRzB1E22wkNqlW0YeuJ0zuvLl9gx0WZ//a3QglJSeB8G
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:08 2025 by rpki-client