Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/34352e3138382e3133362e302f32322d3234203d3e203532343936.roa
File:                     34352e3138382e3133362e302f32322d3234203d3e203532343936.roa (raw, json)
Hash identifier:          SHIBAB0GeIEYnBKwSRsRvYGkc6tKHOuqcnGmIo0uRSY=
Subject key identifier:   E2:B0:28:46:FC:F8:C5:2B:50:DF:8B:DF:FE:FA:1D:9F:AD:B4:31:1C
Certificate issuer:       /CN=0AC68AE029154F6D77C1C00DCE8081D363F9D2BC
Certificate serial:       7B9B60399177911A907CDD67070865F538590666
Authority key identifier: 0A:C6:8A:E0:29:15:4F:6D:77:C1:C0:0D:CE:80:81:D3:63:F9:D2:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/34352e3138382e3133362e302f32322d3234203d3e203532343936.roa
Signing time:             Tue 04 Feb 2025 17:59:34 +0000
ROA not before:           Tue 04 Feb 2025 17:54:34 +0000
ROA not after:            Tue 03 Feb 2026 17:59:34 +0000
asID:                     52496
IP address blocks:        45.188.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:9b:60:39:91:77:91:1a:90:7c:dd:67:07:08:65:f5:38:59:06:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AC68AE029154F6D77C1C00DCE8081D363F9D2BC
        Validity
            Not Before: Feb  4 17:54:34 2025 GMT
            Not After : Feb  3 17:59:34 2026 GMT
        Subject: CN=E2B02846FCF8C52B50DF8BDFFEFA1D9FADB4311C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:6f:14:fd:2a:c4:bc:25:a3:72:23:31:fe:
                    97:9f:82:ba:10:b8:96:fc:e7:6b:7d:b4:45:f7:fc:
                    87:36:03:10:2f:a8:0a:19:4b:4f:2a:4f:44:a5:f8:
                    fe:d1:56:bc:a0:e0:2d:62:4f:ed:2c:91:b4:e2:6d:
                    16:23:ed:8c:25:ee:d2:a4:af:26:e0:48:57:0e:3f:
                    5b:84:71:d0:5d:1d:0d:6c:60:dc:84:12:e6:83:40:
                    4a:a5:fe:f4:5c:f8:b5:60:99:3d:1c:d0:43:11:52:
                    0d:73:51:c9:66:3c:87:52:41:6b:6f:53:53:0d:68:
                    de:c6:c0:bc:50:91:30:82:69:63:44:4e:35:fc:2d:
                    2d:e1:e2:36:61:3c:2e:f7:c6:dc:18:03:26:87:ed:
                    08:21:7f:7d:d6:f9:d8:e0:22:2b:db:ee:9f:72:48:
                    11:20:40:15:c5:b7:28:41:cc:64:14:e6:d8:78:97:
                    b1:6e:f9:ec:33:18:43:a4:fb:c6:64:c0:89:48:fc:
                    43:f5:df:cd:51:95:4e:88:cd:65:7c:d6:34:2d:11:
                    eb:df:85:bc:15:b1:80:ab:95:de:66:4d:5a:44:87:
                    e1:f8:81:33:fb:d6:9a:7f:4d:c2:be:c1:ac:45:57:
                    5f:00:6f:57:dc:1a:1e:0f:5f:34:6d:cf:ac:1c:a5:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:28:46:FC:F8:C5:2B:50:DF:8B:DF:FE:FA:1D:9F:AD:B4:31:1C
            X509v3 Authority Key Identifier:
                keyid:0A:C6:8A:E0:29:15:4F:6D:77:C1:C0:0D:CE:80:81:D3:63:F9:D2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0AC68AE029154F6D77C1C00DCE8081D363F9D2BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84696DE99AA1241EEF7F197DAF7F7FFE3EA22960A6D1E2F532504D3BA860F721/0/34352e3138382e3133362e302f32322d3234203d3e203532343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:bb:77:ea:c4:67:4a:c9:35:b4:4c:d8:3a:e1:fb:ef:1f:
         3c:67:e3:1e:95:a9:16:62:4b:d4:36:f5:64:c3:e0:0e:b4:ef:
         1d:a3:15:8d:d9:33:4a:68:12:ac:47:91:c1:4c:cb:54:97:20:
         43:25:ae:9f:2f:0f:bd:e4:4e:24:45:9c:01:cd:63:5c:7b:84:
         ad:a1:be:a5:a1:4e:bb:f7:4c:5a:bc:7e:d9:75:5a:3e:31:de:
         34:2e:16:e3:24:d8:00:b5:3a:3b:c7:7f:11:3f:45:3c:2f:60:
         0d:a0:32:06:f5:a0:df:5e:db:a3:ce:11:ae:9d:d7:db:7d:17:
         f7:15:aa:81:24:75:3a:44:99:ce:c1:ef:0f:e9:4a:c7:41:6c:
         59:75:c1:95:23:8c:53:70:ce:82:db:85:46:77:58:bb:d0:04:
         b4:d6:ea:fd:a6:68:d3:f7:0f:58:4a:80:0d:9b:df:cc:e3:3a:
         5f:91:41:3a:b3:00:c9:2d:ad:9d:bd:bd:b1:a2:50:b8:7a:d6:
         77:92:4e:e2:7e:90:0a:fb:e7:ee:e5:47:74:ca:ac:12:40:24:
         bf:e3:3b:99:32:47:05:e5:88:66:3c:eb:fe:2c:41:fe:98:dd:
         b0:57:29:34:c7:cb:ff:73:e0:04:31:02:c9:48:8d:fe:cb:8f:
         ad:bc:14:ab
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUe5tgOZF3kRqQfN1nBwhl9ThZBmYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFDNjhBRTAyOTE1NEY2RDc3QzFDMDBEQ0U4MDgxRDM2
M0Y5RDJCQzAeFw0yNTAyMDQxNzU0MzRaFw0yNjAyMDMxNzU5MzRaMDMxMTAvBgNV
BAMTKEUyQjAyODQ2RkNGOEM1MkI1MERGOEJERkZFRkExRDlGQURCNDMxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9W8U/SrEvCWjciMx/pefgroQ
uJb852t9tEX3/Ic2AxAvqAoZS08qT0Sl+P7RVryg4C1iT+0skbTibRYj7Ywl7tKk
rybgSFcOP1uEcdBdHQ1sYNyEEuaDQEql/vRc+LVgmT0c0EMRUg1zUclmPIdSQWtv
U1MNaN7GwLxQkTCCaWNETjX8LS3h4jZhPC73xtwYAyaH7Qghf33W+djgIivb7p9y
SBEgQBXFtyhBzGQU5th4l7Fu+ewzGEOk+8ZkwIlI/EP1381RlU6IzWV81jQtEevf
hbwVsYCrld5mTVpEh+H4gTP71pp/TcK+waxFV18Ab1fcGh4PXzRtz6wcpajNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU4rAoRvz4xStQ34vf/vodn620MRwwHwYDVR0j
BBgwFoAUCsaK4CkVT213wcANzoCB02P50rwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDY5NkRFOTlBQTEyNDFFRUY3RjE5N0RBRjdGN0ZGRTNF
QTIyOTYwQTZEMUUyRjUzMjUwNEQzQkE4NjBGNzIxLzAvMEFDNjhBRTAyOTE1NEY2
RDc3QzFDMDBEQ0U4MDgxRDM2M0Y5RDJCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQUM2OEFFMDI5MTU0RjZENzdD
MUMwMERDRTgwODFEMzYzRjlEMkJDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQ2OTZERTk5QUExMjQxRUVGN0YxOTdEQUY3RjdGRkUzRUEyMjk2MEE2
RDFFMkY1MzI1MDREM0JBODYwRjcyMS8wLzM0MzUyZTMxMzgzODJlMzEzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi28iDAN
BgkqhkiG9w0BAQsFAAOCAQEAK/G7d+rEZ0rJNbRM2Drh++8fPGfjHpWpFmJL1Db1
ZMPgDrTvHaMVjdkzSmgSrEeRwUzLVJcgQyWuny8PveROJEWcAc1jXHuEraG+paFO
u/dMWrx+2XVaPjHeNC4W4yTYALU6O8d/ET9FPC9gDaAyBvWg317bo84Rrp3X230X
9xWqgSR1OkSZzsHvD+lKx0FsWXXBlSOMU3DOgtuFRndYu9AEtNbq/aZo0/cPWEqA
DZvfzOM6X5FBOrMAyS2tnb29saJQuHrWd5JO4n6QCvvn7uVHdMqsEkAkv+M7mTJH
BeWIZjzr/ixB/pjdsFcpNMfL/3PgBDECyUiN/suPrbwUqw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:18 2025 by rpki-client