Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3133302e302f32342d3234203d3e203532343638.roa
File:                     34352e3138352e3133302e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          anrgsGYSj374mXhCcAv7ZA/dwWh2wSqGBVjWj4MtkGE=
Subject key identifier:   0D:3B:82:D5:4B:8D:83:68:DB:97:AA:71:C3:0B:3E:4E:B5:A8:1A:B3
Certificate issuer:       /CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
Certificate serial:       02301BA8448F8D696E0713E4B65EBD9866B9FA2A
Authority key identifier: E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3133302e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:10:39 +0000
ROA not before:           Tue 04 Feb 2025 18:05:39 +0000
ROA not after:            Tue 03 Feb 2026 18:10:39 +0000
asID:                     52468
IP address blocks:        45.185.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:30:1b:a8:44:8f:8d:69:6e:07:13:e4:b6:5e:bd:98:66:b9:fa:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78AD1CEC89005CE394D53F0DFE8F63E65180475
        Validity
            Not Before: Feb  4 18:05:39 2025 GMT
            Not After : Feb  3 18:10:39 2026 GMT
        Subject: CN=0D3B82D54B8D8368DB97AA71C30B3E4EB5A81AB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:e9:7a:64:09:af:2c:c0:93:dc:78:d8:7f:
                    82:a9:2b:73:12:a2:d3:1d:46:d8:01:00:9e:00:c4:
                    3b:22:2f:7a:ff:03:a2:c6:eb:1a:12:00:06:bc:fb:
                    14:70:04:56:91:7b:ea:e5:cd:c7:b6:38:74:38:c6:
                    ff:22:bb:8b:52:9b:bd:db:fc:62:30:e0:b7:ad:95:
                    e1:ff:0b:d7:b9:a6:0a:72:29:3b:9c:aa:e9:a6:8f:
                    14:61:ec:a3:9f:f1:65:4c:c0:73:97:8c:65:60:32:
                    e9:72:bf:21:7d:25:cb:80:52:88:45:a7:a3:1d:6e:
                    e7:70:1c:fa:17:b5:93:7f:9d:f4:4a:c5:d9:77:e4:
                    94:c6:04:cf:36:c8:c0:19:1d:ee:3d:a9:bf:81:1a:
                    a1:0d:bd:86:41:b3:0c:65:07:b6:7a:8e:f7:6d:8b:
                    a7:9e:ec:f9:14:73:5c:ce:bc:d6:76:87:df:5a:b5:
                    8e:aa:a0:37:b5:ad:a5:81:1d:3c:f5:d4:10:ac:5f:
                    42:a5:3d:0a:82:43:17:52:f5:7a:8c:e7:61:b3:3a:
                    75:6d:b4:53:ee:39:6b:99:ec:a1:bb:ab:ac:eb:98:
                    3d:6a:92:75:bf:c8:0a:78:22:25:93:3f:6b:ff:0b:
                    0c:5e:f5:c9:21:0a:9e:e3:4b:b9:96:f5:0c:91:8b:
                    7a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3B:82:D5:4B:8D:83:68:DB:97:AA:71:C3:0B:3E:4E:B5:A8:1A:B3
            X509v3 Authority Key Identifier:
                keyid:E7:8A:D1:CE:C8:90:05:CE:39:4D:53:F0:DF:E8:F6:3E:65:18:04:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E78AD1CEC89005CE394D53F0DFE8F63E65180475.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/829EBE964BEC3C28ACDD071241AF6A552CF76E05729DE1AED587F00E3BF102F7/0/34352e3138352e3133302e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:98:9d:6f:8c:ee:45:6a:01:44:3f:20:b5:c1:5b:de:70:
         04:75:1d:86:4d:66:d4:34:b9:f6:93:f4:cd:1a:83:83:8e:0e:
         24:f8:d8:c6:3e:92:2d:75:5c:b0:f1:6b:b2:2d:15:79:76:a4:
         7e:34:25:cc:51:bc:b1:0e:c9:fb:9a:ca:c4:24:f1:66:28:b4:
         db:f4:27:0f:6b:2a:ff:2c:8f:5b:a5:50:4e:58:57:64:af:c0:
         0c:67:e3:3a:48:0b:6f:78:6c:db:19:70:27:5e:ef:11:5f:68:
         4d:93:ff:ba:15:31:50:00:62:41:e5:38:fd:84:32:7b:db:b4:
         5d:f2:cb:8e:82:0f:db:c0:8a:b9:2d:5b:90:3e:94:81:33:7f:
         54:8a:59:dc:c4:e0:3d:4f:d9:9a:ac:0c:b1:1f:3f:21:99:54:
         c6:7f:17:fe:4a:ba:88:67:6d:57:59:75:5b:a5:21:e2:b5:60:
         a5:d2:6f:f6:57:34:a3:42:19:87:e9:aa:a6:bf:38:01:43:12:
         7b:22:89:3c:b0:d7:84:f0:f3:85:45:34:a9:23:be:55:3b:cd:
         20:61:54:c6:f9:25:18:eb:6b:2f:d9:95:4b:be:7d:68:80:30:
         c3:e7:03:47:99:2e:e4:92:60:2a:6a:36:e3:09:14:19:fa:54:
         b1:d1:43:2c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUAjAbqESPjWluBxPktl69mGa5+iowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTc4QUQxQ0VDODkwMDVDRTM5NEQ1M0YwREZFOEY2M0U2
NTE4MDQ3NTAeFw0yNTAyMDQxODA1MzlaFw0yNjAyMDMxODEwMzlaMDMxMTAvBgNV
BAMTKDBEM0I4MkQ1NEI4RDgzNjhEQjk3QUE3MUMzMEIzRTRFQjVBODFBQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgTul6ZAmvLMCT3HjYf4KpK3MS
otMdRtgBAJ4AxDsiL3r/A6LG6xoSAAa8+xRwBFaRe+rlzce2OHQ4xv8iu4tSm73b
/GIw4LetleH/C9e5pgpyKTucqummjxRh7KOf8WVMwHOXjGVgMulyvyF9JcuAUohF
p6MdbudwHPoXtZN/nfRKxdl35JTGBM82yMAZHe49qb+BGqENvYZBswxlB7Z6jvdt
i6ee7PkUc1zOvNZ2h99atY6qoDe1raWBHTz11BCsX0KlPQqCQxdS9XqM52GzOnVt
tFPuOWuZ7KG7q6zrmD1qknW/yAp4IiWTP2v/Cwxe9ckhCp7jS7mW9QyRi3obAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUDTuC1UuNg2jbl6pxwws+TrWoGrMwHwYDVR0j
BBgwFoAU54rRzsiQBc45TVPw3+j2PmUYBHUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MjlFQkU5NjRCRUMzQzI4QUNERDA3MTI0MUFGNkE1NTJD
Rjc2RTA1NzI5REUxQUVENTg3RjAwRTNCRjEwMkY3LzAvRTc4QUQxQ0VDODkwMDVD
RTM5NEQ1M0YwREZFOEY2M0U2NTE4MDQ3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNzhBRDFDRUM4OTAwNUNFMzk0
RDUzRjBERkU4RjYzRTY1MTgwNDc1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODI5RUJFOTY0QkVDM0MyOEFDREQwNzEyNDFBRjZBNTUyQ0Y3NkUwNTcy
OURFMUFFRDU4N0YwMEUzQkYxMDJGNy8wLzM0MzUyZTMxMzgzNTJlMzEzMzMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC25gjAN
BgkqhkiG9w0BAQsFAAOCAQEAF/yYnW+M7kVqAUQ/ILXBW95wBHUdhk1m1DS59pP0
zRqDg44OJPjYxj6SLXVcsPFrsi0VeXakfjQlzFG8sQ7J+5rKxCTxZii02/QnD2sq
/yyPW6VQTlhXZK/ADGfjOkgLb3hs2xlwJ17vEV9oTZP/uhUxUABiQeU4/YQye9u0
XfLLjoIP28CKuS1bkD6UgTN/VIpZ3MTgPU/ZmqwMsR8/IZlUxn8X/kq6iGdtV1l1
W6Uh4rVgpdJv9lc0o0IZh+mqpr84AUMSeyKJPLDXhPDzhUU0qSO+VTvNIGFUxvkl
GOtrL9mVS759aIAww+cDR5ku5JJgKmo24wkUGfpUsdFDLA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:00 2025 by rpki-client