Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132392e302f32342d3234203d3e203532343638.roa
File:                     34352e3138352e3132392e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          gAttYWGHeScdxvfcfpV0LUz5QgzOrMToVuoeDySqnVg=
Subject key identifier:   BF:7E:8E:0D:51:EA:B2:01:E9:5E:C6:46:96:24:D1:06:55:B2:CF:2D
Certificate issuer:       /CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
Certificate serial:       67EB4C699335F28BD89715E8BE347FB13676818F
Authority key identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132392e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:10:39 +0000
ROA not before:           Tue 04 Feb 2025 18:05:39 +0000
ROA not after:            Tue 03 Feb 2026 18:10:39 +0000
asID:                     52468
IP address blocks:        45.185.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:eb:4c:69:93:35:f2:8b:d8:97:15:e8:be:34:7f:b1:36:76:81:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
        Validity
            Not Before: Feb  4 18:05:39 2025 GMT
            Not After : Feb  3 18:10:39 2026 GMT
        Subject: CN=BF7E8E0D51EAB201E95EC6469624D10655B2CF2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:f0:85:b7:4c:7e:22:bd:5e:c0:95:72:ca:
                    43:4e:39:32:90:77:7f:28:7f:29:22:d6:2f:4e:0a:
                    ea:c0:8a:b7:81:be:31:a6:32:a2:c6:42:7c:93:a1:
                    70:2f:d0:fe:b8:17:d6:1d:c0:a8:9a:28:39:1c:be:
                    14:27:de:9c:57:06:ee:f9:a3:2f:13:78:ca:6f:47:
                    83:84:7c:bd:65:c0:e1:c4:cf:8e:f2:72:7a:bc:0d:
                    be:6e:38:0c:62:91:a4:d4:45:52:71:5a:7c:35:da:
                    85:20:0c:5d:50:d3:4d:79:84:72:df:a4:88:ac:67:
                    d1:3e:9c:f5:cd:a5:b9:87:fe:63:b0:c7:46:9b:f0:
                    c8:6f:72:01:a1:1b:69:29:49:bd:b9:00:e9:ed:a7:
                    56:ee:a7:b2:dc:ec:53:a0:a5:e2:4f:30:b0:c9:af:
                    00:44:f2:f7:cf:84:55:30:66:1f:f5:a6:75:53:22:
                    da:1b:ed:88:49:a2:2c:4f:fc:d5:9a:6b:c3:db:e6:
                    80:d8:5a:51:c5:02:9a:11:d3:bb:c9:4c:0f:bc:e9:
                    1e:e6:ea:a2:b6:dd:fe:90:be:24:50:1d:30:e7:db:
                    8d:75:e3:a5:72:a3:ce:a2:c2:d6:81:0d:2f:ac:29:
                    4d:cc:62:62:46:6f:24:b7:bb:55:3f:c7:7c:46:f5:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7E:8E:0D:51:EA:B2:01:E9:5E:C6:46:96:24:D1:06:55:B2:CF:2D
            X509v3 Authority Key Identifier:
                keyid:E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3132392e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3b:67:6e:ff:f4:4b:20:ef:6c:d0:f3:9c:51:36:f6:ac:8b:
         d2:6a:c9:b6:aa:61:d9:be:86:d8:00:47:a5:26:5e:05:01:23:
         78:16:69:df:12:8b:82:9f:f1:e1:6b:80:1a:00:a6:ae:a7:6c:
         58:12:79:cb:36:0e:3a:41:fc:af:a8:1b:5e:20:1e:ac:a8:92:
         1d:f2:ac:dc:06:86:1e:85:f4:ce:47:13:38:18:c2:bb:f2:be:
         97:ee:f1:6e:dc:aa:bf:e9:4a:49:fb:2e:33:05:86:cb:6f:9b:
         a6:38:4f:44:8e:c3:7c:43:c9:f1:ec:dc:78:c1:86:30:54:9f:
         68:39:44:94:21:1a:58:d6:8d:4a:dc:79:04:31:97:e5:63:7f:
         4d:d0:16:7c:dc:d0:0f:fd:2d:b8:ef:e9:ae:c8:2e:5c:b0:c3:
         c3:b1:4f:4e:bb:86:df:80:82:a6:a5:e0:cf:2f:2b:af:65:af:
         9c:28:2f:40:85:a2:93:58:72:6f:3c:3c:bb:fa:0e:7b:20:40:
         d7:bf:93:4c:46:5d:87:53:39:bc:6a:e2:1a:91:30:cb:1a:76:
         82:ba:b4:d7:63:44:9d:4d:1a:f7:26:af:fc:4b:83:e9:66:7a:
         ed:fa:a5:e7:42:bd:6a:70:c9:ba:1a:c7:97:b0:bf:04:3c:d8:
         11:ef:c9:0d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZ+tMaZM18ovYlxXovjR/sTZ2gY8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QUQxQ0VDODkwMDVDRTM5NEQ1M0YwREZFOEY2M0U2
NTE4MDQ3NTAeFw0yNTAyMDQxODA1MzlaFw0yNjAyMDMxODEwMzlaMDMxMTAvBgNV
BAMTKEJGN0U4RTBENTFFQUIyMDFFOTVFQzY0Njk2MjREMTA2NTVCMkNGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUhfCFt0x+Ir1ewJVyykNOOTKQ
d38ofyki1i9OCurAireBvjGmMqLGQnyToXAv0P64F9YdwKiaKDkcvhQn3pxXBu75
oy8TeMpvR4OEfL1lwOHEz47ycnq8Db5uOAxikaTURVJxWnw12oUgDF1Q0015hHLf
pIisZ9E+nPXNpbmH/mOwx0ab8MhvcgGhG2kpSb25AOntp1bup7Lc7FOgpeJPMLDJ
rwBE8vfPhFUwZh/1pnVTItob7YhJoixP/NWaa8Pb5oDYWlHFApoR07vJTA+86R7m
6qK23f6QviRQHTDn241146Vyo86iwtaBDS+sKU3MYmJGbyS3u1U/x3xG9Y/3AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUv36ODVHqsgHpXsZGliTRBlWyzy0wHwYDVR0j
BBgwFoAU54rRzsiQBc45TVPw3+j2PmUYBHUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjlFQkU5NjRCRUMzQzI4QUNERDA3MTI0MUFGNkE1NTJD
Rjc2RTA1NzI5REUxQUVENTg3RjAwRTNCRjEwMkY3LzAvRTc4QUQxQ0VDODkwMDVD
RTM5NEQ1M0YwREZFOEY2M0U2NTE4MDQ3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzhBRDFDRUM4OTAwNUNFMzk0
RDUzRjBERkU4RjYzRTY1MTgwNDc1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI5RUJFOTY0QkVDM0MyOEFDREQwNzEyNDFBRjZBNTUyQ0Y3NkUwNTcy
OURFMUFFRDU4N0YwMEUzQkYxMDJGNy8wLzM0MzUyZTMxMzgzNTJlMzEzMjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC25gTAN
BgkqhkiG9w0BAQsFAAOCAQEAZjtnbv/0SyDvbNDznFE29qyL0mrJtqph2b6G2ABH
pSZeBQEjeBZp3xKLgp/x4WuAGgCmrqdsWBJ5yzYOOkH8r6gbXiAerKiSHfKs3AaG
HoX0zkcTOBjCu/K+l+7xbtyqv+lKSfsuMwWGy2+bpjhPRI7DfEPJ8ezceMGGMFSf
aDlElCEaWNaNStx5BDGX5WN/TdAWfNzQD/0tuO/prsguXLDDw7FPTruG34CCpqXg
zy8rr2WvnCgvQIWik1hybzw8u/oOeyBA17+TTEZdh1M5vGriGpEwyxp2grq012NE
nU0a9yav/EuD6WZ67fql50K9anDJuhrHl7C/BDzYEe/JDQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:33:41 2025 by rpki-client