Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32342d3234203d3e20323635383139.roa
File:                     34352e362e382e302f32342d3234203d3e20323635383139.roa (raw, json)
Hash identifier:          K/AKIwxchA2VnW42V5zqjM9DqAFxOanhySZ7wYgmN+0=
Subject key identifier:   E4:DC:09:D3:CC:58:B4:79:91:DC:C1:3B:97:82:1D:64:8C:3F:D4:B0
Certificate issuer:       /CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
Certificate serial:       174A9217D796C858FE98B492A86A60C259C00619
Authority key identifier: 16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32342d3234203d3e20323635383139.roa
Signing time:             Fri 31 Jan 2025 23:55:01 +0000
ROA not before:           Fri 31 Jan 2025 23:50:01 +0000
ROA not after:            Fri 30 Jan 2026 23:55:01 +0000
asID:                     265819
IP address blocks:        45.6.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4a:92:17:d7:96:c8:58:fe:98:b4:92:a8:6a:60:c2:59:c0:06:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16423C98CF2548839D74EFD9FB7304F4DAB4AE75
        Validity
            Not Before: Jan 31 23:50:01 2025 GMT
            Not After : Jan 30 23:55:01 2026 GMT
        Subject: CN=E4DC09D3CC58B47991DCC13B97821D648C3FD4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:61:c8:28:1a:7f:0c:71:75:e0:5b:37:22:
                    0b:71:32:d7:95:ea:5d:57:ce:e9:77:12:1f:d6:b8:
                    f1:d2:36:87:fb:d2:13:8a:c7:d1:87:14:e7:10:f0:
                    74:d4:e3:d6:0c:67:8b:4f:58:6a:6a:bd:00:d5:4c:
                    ee:d0:d7:fb:33:3c:ec:7f:ce:d1:b3:b4:ff:1a:41:
                    06:7b:62:5f:4d:f0:a9:85:27:7e:41:11:46:da:4e:
                    18:d1:aa:df:a7:8d:b1:15:d0:0b:c9:95:b1:04:2a:
                    9e:20:1a:98:5f:72:e1:df:90:04:23:a8:bd:98:58:
                    c3:68:c9:f3:11:14:df:58:e4:1e:e2:20:8a:e6:68:
                    9e:be:bc:6f:02:02:79:f4:e4:d5:8c:28:93:2e:6c:
                    63:8b:f0:1c:cd:ee:c1:aa:54:81:96:39:55:f1:ea:
                    88:3c:0c:15:68:f5:32:6a:4b:0c:5f:c7:23:d2:43:
                    f8:23:f1:e0:03:19:89:7b:a9:19:89:a4:61:76:fb:
                    50:2c:e2:99:ae:0e:51:b6:65:5c:a7:70:d5:2b:06:
                    d6:69:d3:04:13:dc:b5:ae:2f:f4:af:36:89:7b:04:
                    07:e0:e3:97:d5:8e:7f:54:19:ac:6d:8e:2d:03:c4:
                    ff:57:8b:5c:76:f5:fb:69:53:9e:ca:70:1a:bf:3e:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:09:D3:CC:58:B4:79:91:DC:C1:3B:97:82:1D:64:8C:3F:D4:B0
            X509v3 Authority Key Identifier:
                keyid:16:42:3C:98:CF:25:48:83:9D:74:EF:D9:FB:73:04:F4:DA:B4:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16423C98CF2548839D74EFD9FB7304F4DAB4AE75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81A266F8152CBB106F1FEFE167201B2DF81CE38502EB834FF9E421D83E728469/0/34352e362e382e302f32342d3234203d3e20323635383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:23:f6:5c:e5:e1:3b:2b:63:a7:06:b2:cc:ea:c9:1f:cc:
         92:d7:8b:4f:2d:92:97:cf:bf:0b:6c:df:b0:bf:2f:88:ef:da:
         17:b2:eb:fe:91:b1:58:1c:cc:ce:8f:15:5b:d1:ad:5d:c1:f0:
         9d:6b:3e:b5:08:0b:22:fd:ac:82:32:0c:9e:fd:8c:eb:e4:7d:
         02:2c:ad:1c:66:08:73:59:9b:57:d6:00:05:97:0a:1e:22:0a:
         a3:ac:20:0f:be:bb:57:0e:54:9c:0f:f2:f1:bd:13:b8:3d:ec:
         05:93:c1:f3:b1:4d:26:ba:38:b3:20:f9:2d:3e:2e:f1:ba:c7:
         cd:39:b8:61:69:b9:56:95:19:91:9a:ae:65:f4:51:46:0b:78:
         72:df:4a:02:94:a6:2b:d8:f6:a2:47:57:d2:fe:6d:a8:d1:96:
         5b:c2:36:14:86:19:84:96:6f:c1:5e:bf:b0:80:6e:17:74:26:
         bd:08:39:05:fc:45:7a:8e:60:fa:53:c3:a2:aa:8d:1f:d0:bf:
         59:a3:c4:14:d6:03:66:58:6d:f6:5f:45:86:42:b9:7e:bc:6d:
         07:e0:aa:6c:3f:f6:79:11:ae:ee:66:36:5c:22:7e:c6:84:89:
         a3:2e:27:32:4e:37:9c:8a:7e:37:f3:b2:5b:eb:b2:57:19:e3:
         03:c0:f4:91
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUF0qSF9eWyFj+mLSSqGpgwlnABhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY0MjNDOThDRjI1NDg4MzlENzRFRkQ5RkI3MzA0RjRE
QUI0QUU3NTAeFw0yNTAxMzEyMzUwMDFaFw0yNjAxMzAyMzU1MDFaMDMxMTAvBgNV
BAMTKEU0REMwOUQzQ0M1OEI0Nzk5MURDQzEzQjk3ODIxRDY0OEMzRkQ0QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vWHIKBp/DHF14Fs3IgtxMteV
6l1Xzul3Eh/WuPHSNof70hOKx9GHFOcQ8HTU49YMZ4tPWGpqvQDVTO7Q1/szPOx/
ztGztP8aQQZ7Yl9N8KmFJ35BEUbaThjRqt+njbEV0AvJlbEEKp4gGphfcuHfkAQj
qL2YWMNoyfMRFN9Y5B7iIIrmaJ6+vG8CAnn05NWMKJMubGOL8BzN7sGqVIGWOVXx
6og8DBVo9TJqSwxfxyPSQ/gj8eADGYl7qRmJpGF2+1As4pmuDlG2ZVyncNUrBtZp
0wQT3LWuL/SvNol7BAfg45fVjn9UGaxtji0DxP9Xi1x29ftpU57KcBq/PgfZAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQU5NwJ08xYtHmR3ME7l4IdZIw/1LAwHwYDVR0j
BBgwFoAUFkI8mM8lSIOddO/Z+3ME9Nq0rnUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MUEyNjZGODE1MkNCQjEwNkYxRkVGRTE2NzIwMUIyREY4
MUNFMzg1MDJFQjgzNEZGOUU0MjFEODNFNzI4NDY5LzAvMTY0MjNDOThDRjI1NDg4
MzlENzRFRkQ5RkI3MzA0RjREQUI0QUU3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNjQyM0M5OENGMjU0ODgzOUQ3
NEVGRDlGQjczMDRGNERBQjRBRTc1LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODFBMjY2RjgxNTJDQkIxMDZGMUZFRkUxNjcyMDFCMkRGODFDRTM4NTAy
RUI4MzRGRjlFNDIxRDgzRTcyODQ2OS8wLzM0MzUyZTM2MmUzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzYzNTM4MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0GCDANBgkqhkiG
9w0BAQsFAAOCAQEAAa0j9lzl4TsrY6cGsszqyR/MkteLTy2Sl8+/C2zfsL8viO/a
F7Lr/pGxWBzMzo8VW9GtXcHwnWs+tQgLIv2sgjIMnv2M6+R9AiytHGYIc1mbV9YA
BZcKHiIKo6wgD767Vw5UnA/y8b0TuD3sBZPB87FNJro4syD5LT4u8brHzTm4YWm5
VpUZkZquZfRRRgt4ct9KApSmK9j2okdX0v5tqNGWW8I2FIYZhJZvwV6/sIBuF3Qm
vQg5BfxFeo5g+lPDoqqNH9C/WaPEFNYDZlht9l9FhkK5frxtB+CqbD/2eRGu7mY2
XCJ+xoSJoy4nMk43nIp+N/OyW+uyVxnjA8D0kQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:14 2025 by rpki-client