Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/34352e3136332e3132302e302f32322d3234203d3e20323635353534.roa
File:                     34352e3136332e3132302e302f32322d3234203d3e20323635353534.roa (raw, json)
Hash identifier:          6bjPjib+e/gCq/0dAVy4ZZwxrbn0SQRMA0j15h2ltvE=
Subject key identifier:   47:D8:98:AB:A4:B6:85:FB:F4:C8:57:C4:48:BF:AE:2A:3D:E8:5E:14
Certificate issuer:       /CN=08011E07118C784A5542A719E35A9E4F8A67CD38
Certificate serial:       57F5A8CFBBA14F56A21CFFA1BBA4C420511814A3
Authority key identifier: 08:01:1E:07:11:8C:78:4A:55:42:A7:19:E3:5A:9E:4F:8A:67:CD:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08011E07118C784A5542A719E35A9E4F8A67CD38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/34352e3136332e3132302e302f32322d3234203d3e20323635353534.roa
Signing time:             Tue 04 Feb 2025 18:20:39 +0000
ROA not before:           Tue 04 Feb 2025 18:15:39 +0000
ROA not after:            Tue 03 Feb 2026 18:20:39 +0000
asID:                     265554
IP address blocks:        45.163.120.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f5:a8:cf:bb:a1:4f:56:a2:1c:ff:a1:bb:a4:c4:20:51:18:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08011E07118C784A5542A719E35A9E4F8A67CD38
        Validity
            Not Before: Feb  4 18:15:39 2025 GMT
            Not After : Feb  3 18:20:39 2026 GMT
        Subject: CN=47D898ABA4B685FBF4C857C448BFAE2A3DE85E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:ef:dd:4c:3e:f2:1c:d1:37:3b:82:1c:aa:
                    4b:f0:06:54:05:a9:f3:28:38:2a:ba:f7:aa:3d:45:
                    aa:4e:58:18:68:12:35:bc:70:b5:97:57:d6:06:a1:
                    03:38:d8:12:6d:06:e7:3c:a6:3a:19:d6:7e:d8:30:
                    13:58:19:88:f6:4a:55:dc:35:84:95:91:08:2e:4b:
                    64:da:2c:fe:37:19:55:78:aa:95:29:95:4b:23:ab:
                    d2:4e:e8:21:ce:1b:11:7f:1b:13:05:29:2a:50:81:
                    08:38:dd:9f:33:f4:f4:57:42:a2:f2:07:86:70:a0:
                    36:49:f1:88:2f:71:2d:19:46:71:ae:57:86:7f:c4:
                    b6:58:0d:ee:11:2e:8d:80:77:4f:72:fb:ad:17:78:
                    90:e2:24:43:a7:07:11:af:00:df:f7:2f:51:d3:bf:
                    7a:5a:47:c9:ce:0a:78:0c:f4:29:12:83:29:f8:87:
                    ff:18:95:2c:01:73:cc:18:5e:cd:0e:c7:6b:1b:d3:
                    87:e0:52:e1:3f:6d:65:0a:93:1c:50:9a:10:6e:42:
                    b9:39:6d:1c:77:63:23:4c:9b:6b:e9:db:19:22:ba:
                    ea:88:00:31:58:3e:6a:f6:42:49:80:55:a6:71:e3:
                    14:2e:52:e5:b1:b7:70:0a:0d:fc:11:36:96:7d:66:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:98:AB:A4:B6:85:FB:F4:C8:57:C4:48:BF:AE:2A:3D:E8:5E:14
            X509v3 Authority Key Identifier:
                keyid:08:01:1E:07:11:8C:78:4A:55:42:A7:19:E3:5A:9E:4F:8A:67:CD:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/08011E07118C784A5542A719E35A9E4F8A67CD38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08011E07118C784A5542A719E35A9E4F8A67CD38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/78E2368B71E172A1E7282945BC322DFE2F0E30A33C322BC69CCA48A5D1978D79/0/34352e3136332e3132302e302f32322d3234203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:81:47:88:b9:f2:de:e3:6c:75:f2:23:dd:d5:ff:ff:38:
         03:d9:cc:36:5e:7f:2c:e9:8d:18:17:6c:e4:89:44:22:f4:17:
         39:f8:69:dc:f9:80:5d:8b:55:a1:1d:ee:e7:a9:af:44:e4:49:
         07:f4:a1:00:06:a9:e9:3a:b0:95:1a:36:c6:c4:b8:da:b9:cb:
         38:ed:e1:32:4a:1b:5d:59:07:91:48:20:a3:df:19:0f:cb:b1:
         36:b0:e3:f4:15:cf:a9:c7:da:3d:db:49:83:3c:46:c6:fb:7b:
         b5:53:17:53:f4:89:56:d3:06:bd:de:fa:3a:06:21:f5:6d:a5:
         aa:01:19:44:3d:fb:f7:65:8b:37:8e:db:b6:2f:87:09:63:ca:
         b3:bf:ea:bf:0d:91:67:ad:67:4b:68:d9:00:17:b4:27:0e:c0:
         45:e2:78:c9:af:f0:13:37:bf:30:ae:35:e0:67:40:2f:81:d2:
         7a:1e:0c:26:68:ff:6e:f3:ec:e8:ea:a6:4c:2e:a0:c7:78:a4:
         99:85:05:de:6b:d2:f0:ba:4a:be:a5:05:6e:d1:7e:21:63:6c:
         52:8b:95:f5:d7:62:63:58:4b:49:7e:25:d5:f0:cf:d1:43:92:
         a6:00:ff:ae:2c:19:af:bc:5a:f3:c0:f4:3d:bd:07:9a:29:f1:
         6e:6b:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:24 2025 by rpki-client