Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/34352e3137352e3233322e302f32322d3234203d3e20323635353836.roa
File:                     34352e3137352e3233322e302f32322d3234203d3e20323635353836.roa (raw, json)
Hash identifier:          0vYgFTE2FJrSg9po4BuMpGW2n5HlKmuT3ynnxStdLJw=
Subject key identifier:   71:06:FB:CF:CE:0F:7F:65:A8:0B:E0:C0:04:09:5F:CA:CE:A0:48:B4
Certificate issuer:       /CN=97DFE5114076326D22F751B0AA10943A7346D8AC
Certificate serial:       17B2BF1191D05FDFD9BADE0EC3C120A475E04F55
Authority key identifier: 97:DF:E5:11:40:76:32:6D:22:F7:51:B0:AA:10:94:3A:73:46:D8:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/34352e3137352e3233322e302f32322d3234203d3e20323635353836.roa
Signing time:             Tue 04 Feb 2025 18:31:54 +0000
ROA not before:           Tue 04 Feb 2025 18:26:54 +0000
ROA not after:            Tue 03 Feb 2026 18:31:54 +0000
asID:                     265586
IP address blocks:        45.175.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b2:bf:11:91:d0:5f:df:d9:ba:de:0e:c3:c1:20:a4:75:e0:4f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97DFE5114076326D22F751B0AA10943A7346D8AC
        Validity
            Not Before: Feb  4 18:26:54 2025 GMT
            Not After : Feb  3 18:31:54 2026 GMT
        Subject: CN=7106FBCFCE0F7F65A80BE0C004095FCACEA048B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:9f:24:fa:84:31:1d:5f:c4:20:d9:13:16:
                    75:d6:67:cc:59:26:c8:f7:56:82:f7:fb:9f:29:8d:
                    ca:0d:3a:79:36:c3:4d:7c:68:b3:97:5e:fd:e5:16:
                    cc:6e:3c:74:13:44:64:5a:df:c8:ab:dd:5e:33:54:
                    4a:7e:12:45:22:76:cd:b2:1d:30:7f:d8:77:4e:de:
                    9c:1f:0f:c9:d6:83:f3:27:e1:47:db:5c:87:f2:ec:
                    01:fa:87:0f:f3:de:16:2d:11:c6:24:88:47:95:3f:
                    58:61:9b:ee:f3:78:76:80:2a:eb:4f:aa:d0:45:cc:
                    46:a6:0e:36:b2:43:8e:62:0b:d7:b1:93:1d:03:2b:
                    cb:5f:d8:c1:c8:00:5f:df:36:d2:f9:a8:3f:88:ea:
                    3c:b4:75:a7:ff:c9:a7:82:56:3c:ef:f6:7e:77:86:
                    e8:c1:ce:3c:0b:36:b1:61:a9:42:11:1f:fb:d8:7f:
                    b7:ae:f8:3a:38:8c:27:bc:05:80:51:e4:30:40:cb:
                    8b:c7:b2:7f:4c:d5:2a:30:55:fe:6b:07:f4:e2:9f:
                    9a:d5:47:fd:df:08:ad:35:63:41:b8:82:75:f4:f4:
                    5e:e3:c1:b7:08:63:c0:c0:0f:34:29:17:82:84:5c:
                    a7:4a:4b:5b:15:dd:bc:ad:db:73:25:15:ee:df:dc:
                    43:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:06:FB:CF:CE:0F:7F:65:A8:0B:E0:C0:04:09:5F:CA:CE:A0:48:B4
            X509v3 Authority Key Identifier:
                keyid:97:DF:E5:11:40:76:32:6D:22:F7:51:B0:AA:10:94:3A:73:46:D8:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/97DFE5114076326D22F751B0AA10943A7346D8AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/97DFE5114076326D22F751B0AA10943A7346D8AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/850D9501358F5D5B32DFA06FC6271F6440C0CEAEDBD40339F219D7EE276BA7C3/0/34352e3137352e3233322e302f32322d3234203d3e20323635353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:7a:23:b4:cc:02:1c:51:fb:cf:1d:77:7c:84:9a:da:3b:
         47:2b:64:55:b7:9e:f7:38:9f:71:fa:cf:45:ab:db:aa:5d:84:
         fa:39:e6:fe:2d:55:cc:5c:0d:86:a7:7c:d8:69:d8:03:d9:ca:
         4b:0f:2e:50:a8:aa:0a:3e:7c:60:b8:a6:23:36:f3:c6:95:c4:
         93:28:6b:e3:a3:ad:bc:67:aa:f3:c3:8e:1f:ab:3c:47:85:2d:
         6e:d7:cf:b1:c8:1d:61:f0:d4:13:d8:12:74:42:7b:74:34:be:
         7d:97:4f:28:dc:ef:a6:85:f2:6a:53:fd:d9:85:d9:8a:62:76:
         d5:25:7f:53:7d:ea:e8:42:a9:fb:68:cd:7c:c9:aa:aa:9d:f1:
         98:e3:11:d8:65:a5:45:d3:a0:9c:32:0d:5d:31:4d:2e:ff:ff:
         54:63:af:be:e0:f8:05:f7:ab:50:40:6c:bb:59:ea:82:d0:46:
         ff:84:2f:a0:09:08:df:0f:81:b7:15:b7:02:26:7b:52:54:6e:
         9d:d7:8a:73:24:a3:c2:01:c0:7d:74:09:77:62:d0:69:1d:6f:
         8e:07:0c:a9:b4:8d:f0:79:be:04:25:2b:a7:4e:a8:b2:b4:0a:
         5c:87:22:f5:6a:f1:84:fa:55:94:77:00:d1:bd:c5:95:ba:d8:
         1e:42:69:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:45 2025 by rpki-client