Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa
File:                     34352e3233302e36302e302f32322d3234203d3e203532353037.roa (raw, json)
Hash identifier:          qxQwaLOdAtaYQoW6gbdtr2gpED+47kBzeCGjer6+nyA=
Subject key identifier:   29:90:C1:2B:69:69:A3:B4:E9:E5:80:66:33:D8:D4:FE:CE:9A:13:47
Certificate issuer:       /CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
Certificate serial:       0B87B4D12DEE1C8E5613C7DD43CE1710D23ED3D9
Authority key identifier: 13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa
Signing time:             Tue 04 Feb 2025 18:10:00 +0000
ROA not before:           Tue 04 Feb 2025 18:05:00 +0000
ROA not after:            Tue 03 Feb 2026 18:10:00 +0000
asID:                     52507
IP address blocks:        45.230.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:87:b4:d1:2d:ee:1c:8e:56:13:c7:dd:43:ce:17:10:d2:3e:d3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D6079932FC80B27C7A5AF3E235C60566754BD5
        Validity
            Not Before: Feb  4 18:05:00 2025 GMT
            Not After : Feb  3 18:10:00 2026 GMT
        Subject: CN=2990C12B6969A3B4E9E5806633D8D4FECE9A1347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:15:c4:f6:75:8c:03:4c:35:84:c8:a8:b9:
                    76:59:02:87:78:7b:d6:63:ab:86:e4:ea:d6:3e:85:
                    b0:b0:52:61:40:22:51:e6:d9:84:88:07:4d:d4:c5:
                    de:03:ec:81:55:50:2d:d3:e9:f6:f4:f2:ff:e9:2a:
                    c4:cb:b1:ef:aa:b4:5b:57:fa:b6:70:ea:03:64:31:
                    b5:8d:9b:54:2a:cb:df:d2:d2:45:ec:68:28:3b:0c:
                    c4:7d:4a:96:c8:4e:11:26:7e:28:4d:bb:50:7a:0e:
                    e5:ba:16:d5:aa:ec:b8:98:b8:e0:65:03:c2:51:b4:
                    e9:69:51:6d:84:8f:33:0d:ad:70:ed:c8:e2:2f:d8:
                    6e:df:21:a6:b9:2d:f4:6a:e0:b0:1e:80:02:ce:82:
                    28:0f:90:83:8d:45:5a:e9:e1:e4:8c:a2:0c:59:ba:
                    09:7b:41:37:17:4f:90:e8:bb:a7:f3:53:10:0b:fb:
                    d5:dc:9c:b6:d0:4b:8e:5e:cc:c6:8c:ec:2f:e0:e8:
                    83:58:61:50:57:3a:49:76:a0:17:5c:98:ab:13:27:
                    1c:1e:d4:dd:50:49:6f:95:bd:fd:3a:08:89:a6:99:
                    87:08:cf:c9:61:dc:3d:08:af:e8:3f:b7:fc:85:fe:
                    ef:7c:e8:e0:d8:da:15:af:e6:1f:c7:0a:58:63:13:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:C1:2B:69:69:A3:B4:E9:E5:80:66:33:D8:D4:FE:CE:9A:13:47
            X509v3 Authority Key Identifier:
                keyid:13:D6:07:99:32:FC:80:B2:7C:7A:5A:F3:E2:35:C6:05:66:75:4B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/13D6079932FC80B27C7A5AF3E235C60566754BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75CDA9E37235681EA450D057C08829093D9EB3015D02C0794E5E246BB3D0A664/0/34352e3233302e36302e302f32322d3234203d3e203532353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:8b:c4:bf:d1:09:f6:08:28:ef:0e:a9:03:bd:a1:11:3c:d8:
         99:d6:d8:cc:9f:c5:06:e9:cb:d3:e8:57:c9:66:e4:8d:97:4d:
         e5:ec:df:3f:62:03:36:c4:dc:0a:bd:8c:4a:c8:d7:13:90:55:
         ce:35:6e:ae:69:68:fc:47:59:3d:9e:e4:6e:06:b4:ca:a3:73:
         69:de:51:fb:33:56:0f:fa:fe:fb:ab:37:26:86:c2:3e:22:f0:
         27:ec:5a:47:4f:d4:23:d4:29:fc:95:1c:cb:25:33:4f:4a:d0:
         47:55:ab:07:26:3d:01:1c:dd:57:11:fa:a5:89:df:97:04:fa:
         55:f1:2e:ed:ff:7c:ef:6f:d1:c9:84:d4:16:d7:30:56:35:4d:
         d3:13:e7:c8:89:4b:8c:72:dc:6c:4f:13:4d:29:b4:1a:46:51:
         cc:03:a9:d7:5a:ad:ec:a4:d3:d8:c0:ed:66:a9:11:de:9d:e8:
         a6:00:d5:e7:89:35:bf:52:94:5c:3e:2e:9a:3c:98:aa:32:30:
         b2:a2:69:75:75:73:f5:45:27:d8:fc:98:d0:7a:3d:6d:5f:2d:
         19:d9:2e:26:34:7d:30:26:27:a0:31:8a:35:39:82:ac:0d:ec:
         8a:87:31:9b:80:7f:8f:4f:5f:f9:a0:db:bf:48:b7:63:11:54:
         2d:42:fd:fb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUC4e00S3uHI5WE8fdQ84XENI+09kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNENjA3OTkzMkZDODBCMjdDN0E1QUYzRTIzNUM2MDU2
Njc1NEJENTAeFw0yNTAyMDQxODA1MDBaFw0yNjAyMDMxODEwMDBaMDMxMTAvBgNV
BAMTKDI5OTBDMTJCNjk2OUEzQjRFOUU1ODA2NjMzRDhENEZFQ0U5QTEzNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErBXE9nWMA0w1hMiouXZZAod4
e9Zjq4bk6tY+hbCwUmFAIlHm2YSIB03Uxd4D7IFVUC3T6fb08v/pKsTLse+qtFtX
+rZw6gNkMbWNm1Qqy9/S0kXsaCg7DMR9SpbIThEmfihNu1B6DuW6FtWq7LiYuOBl
A8JRtOlpUW2EjzMNrXDtyOIv2G7fIaa5LfRq4LAegALOgigPkIONRVrp4eSMogxZ
ugl7QTcXT5Dou6fzUxAL+9XcnLbQS45ezMaM7C/g6INYYVBXOkl2oBdcmKsTJxwe
1N1QSW+Vvf06CImmmYcIz8lh3D0Ir+g/t/yF/u986ODY2hWv5h/HClhjEze/AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKZDBK2lpo7Tp5YBmM9jU/s6aE0cwHwYDVR0j
BBgwFoAUE9YHmTL8gLJ8elrz4jXGBWZ1S9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NUNEQTlFMzcyMzU2ODFFQTQ1MEQwNTdDMDg4MjkwOTNE
OUVCMzAxNUQwMkMwNzk0RTVFMjQ2QkIzRDBBNjY0LzAvMTNENjA3OTkzMkZDODBC
MjdDN0E1QUYzRTIzNUM2MDU2Njc1NEJENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xM0Q2MDc5OTMyRkM4MEIyN0M3
QTVBRjNFMjM1QzYwNTY2NzU0QkQ1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzVDREE5RTM3MjM1NjgxRUE0NTBEMDU3QzA4ODI5MDkzRDlFQjMwMTVE
MDJDMDc5NEU1RTI0NkJCM0QwQTY2NC8wLzM0MzUyZTMyMzMzMDJlMzYzMDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzNTMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt5jwwDQYJ
KoZIhvcNAQELBQADggEBAFOLxL/RCfYIKO8OqQO9oRE82JnW2MyfxQbpy9PoV8lm
5I2XTeXs3z9iAzbE3Aq9jErI1xOQVc41bq5paPxHWT2e5G4GtMqjc2neUfszVg/6
/vurNyaGwj4i8CfsWkdP1CPUKfyVHMslM09K0EdVqwcmPQEc3VcR+qWJ35cE+lXx
Lu3/fO9v0cmE1BbXMFY1TdMT58iJS4xy3GxPE00ptBpGUcwDqddareyk09jA7Wap
Ed6d6KYA1eeJNb9SlFw+Lpo8mKoyMLKiaXV1c/VFJ9j8mNB6PW1fLRnZLiY0fTAm
J6AxijU5gqwN7IqHMZuAf49PX/mg279It2MRVC1C/fs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:21 2025 by rpki-client