Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132382e302f32342d3234203d3e203532343638.roa
File:                     34352e3138352e3132382e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          1+OK2r/SIDBWCipMY3nQJPqIjvy8lIRcYHemrHp0ES8=
Subject key identifier:   EC:1A:31:30:23:F3:54:D7:55:74:FC:AD:72:FE:01:C7:05:F7:D5:4E
Certificate issuer:       /CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
Certificate serial:       746C052A3427248CDF5EB47288831E87DC2D17D2
Authority key identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132382e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:10:39 +0000
ROA not before:           Tue 04 Feb 2025 18:05:39 +0000
ROA not after:            Tue 03 Feb 2026 18:10:39 +0000
asID:                     52468
IP address blocks:        45.185.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:6c:05:2a:34:27:24:8c:df:5e:b4:72:88:83:1e:87:dc:2d:17:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
        Validity
            Not Before: Feb  4 18:05:39 2025 GMT
            Not After : Feb  3 18:10:39 2026 GMT
        Subject: CN=EC1A313023F354D75574FCAD72FE01C705F7D54E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:5a:11:af:ec:49:30:4f:2f:a6:68:23:0e:
                    ea:24:cd:5a:c0:7b:f9:f5:15:82:34:c9:c6:28:20:
                    81:bd:fe:1a:bd:a2:aa:f8:ec:35:a2:7f:74:d4:4a:
                    82:64:73:0b:c9:a4:41:60:28:fd:ae:96:f8:8f:1a:
                    dd:e4:a0:f9:8f:3d:77:67:ff:72:07:48:a9:ae:10:
                    ad:01:4c:6b:e2:b5:47:74:36:3e:e9:3e:11:dd:1a:
                    36:15:66:4c:00:88:01:7a:77:95:6c:bb:24:b7:f1:
                    12:1a:35:11:06:59:fb:dc:b5:c8:dc:a1:2c:1d:3d:
                    56:f0:59:fe:30:61:6d:42:50:b1:20:4f:7a:e9:60:
                    44:77:61:12:23:e9:62:d6:a8:32:3d:92:53:54:04:
                    5b:02:21:5f:29:57:42:4a:5e:e6:1f:a1:eb:c1:2d:
                    07:7a:2f:97:da:80:5e:18:15:1a:76:7d:4e:66:6c:
                    9c:a1:c0:64:d1:e1:ed:55:0f:08:86:d6:18:9c:63:
                    06:f8:1e:82:b6:03:ca:07:28:5e:03:a9:83:ad:de:
                    57:45:b4:01:79:8d:00:cb:51:b5:ea:e1:b2:ea:1c:
                    3b:73:5b:49:c1:e4:e8:07:94:c5:c4:4f:07:02:2d:
                    83:cc:b5:75:8d:a9:77:45:ae:5e:db:4a:a4:cc:75:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1A:31:30:23:F3:54:D7:55:74:FC:AD:72:FE:01:C7:05:F7:D5:4E
            X509v3 Authority Key Identifier:
                keyid:E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132382e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:b7:35:3f:a8:63:09:ac:93:cf:3a:41:f6:e2:8a:e5:0d:10:
         e6:56:c7:76:1a:e7:5d:24:50:c7:26:c0:44:66:8b:b5:3d:34:
         28:87:0c:35:12:16:1c:1b:1d:9e:15:7c:3f:a5:36:09:53:c2:
         28:79:e1:fd:64:d4:5f:e9:1b:72:f2:6e:13:8a:ec:29:97:98:
         e8:ac:35:ff:a4:ce:70:dd:15:c1:61:bd:ed:f4:98:d4:5a:e7:
         05:39:63:b6:97:55:d2:a3:7a:a4:8d:18:5b:82:a5:a3:3f:f9:
         60:a2:e4:22:cb:ef:3a:f3:61:90:f2:d1:44:1d:43:85:4b:e4:
         88:1c:59:de:7b:36:05:e6:77:59:4d:58:0a:b6:05:ce:c0:c8:
         78:21:a1:cf:17:36:2f:39:51:b5:33:56:78:5e:95:76:f5:82:
         44:e3:1d:4e:66:c8:b2:08:e1:b2:a2:f4:db:1d:cc:d4:1f:db:
         00:31:3b:31:30:22:ae:11:20:bc:7a:2a:cb:80:75:54:5d:62:
         ba:e6:a7:77:15:ba:8e:bb:39:cb:8c:95:42:23:43:11:cf:b3:
         e1:59:90:6e:ea:16:f2:c0:1f:8a:d3:d7:f7:7f:60:ca:14:9a:
         a0:31:f4:bf:d7:b5:3f:10:6a:a2:8d:3c:f6:fb:08:b9:0c:0e:
         84:d0:b2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:46 2025 by rpki-client