Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323637373137.roa
File:                     34352e3136352e3136382e302f32322d3234203d3e20323637373137.roa (raw, json)
Hash identifier:          LY/G1wps0xt7ywHbuCJAurUiV45Jq8Zhb1caaUo3drk=
Subject key identifier:   1C:D9:24:9C:62:53:BD:48:F5:5F:E1:AE:4F:50:FA:A6:7A:30:96:8C
Certificate issuer:       /CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
Certificate serial:       2F67658F6E95274ABB9576AA312C2A5060A6A2C1
Authority key identifier: AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323637373137.roa
Signing time:             Tue 04 Feb 2025 18:06:01 +0000
ROA not before:           Tue 04 Feb 2025 18:01:01 +0000
ROA not after:            Tue 03 Feb 2026 18:06:01 +0000
asID:                     267717
IP address blocks:        45.165.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:67:65:8f:6e:95:27:4a:bb:95:76:aa:31:2c:2a:50:60:a6:a2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AABC402EE2FAF415F9D03091D83BA93DC6107FEC
        Validity
            Not Before: Feb  4 18:01:01 2025 GMT
            Not After : Feb  3 18:06:01 2026 GMT
        Subject: CN=1CD9249C6253BD48F55FE1AE4F50FAA67A30968C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:8e:d7:96:ff:2b:79:86:42:9e:66:7c:73:
                    b7:26:6d:9b:b2:f1:f6:56:f8:da:68:67:a7:34:9f:
                    46:d6:b8:fb:4f:67:d9:f8:b3:d3:79:4e:f7:df:6a:
                    89:3c:06:9c:97:f5:d8:5e:f3:1b:00:62:c7:47:d6:
                    7e:81:91:e0:54:d1:c1:0a:dd:1a:d2:42:ca:c2:bf:
                    a6:de:27:67:ed:20:ae:d6:48:41:01:98:d9:b4:36:
                    70:d7:5f:21:8e:88:ca:3b:b5:c1:56:bc:c9:56:69:
                    90:39:ab:2f:c7:1e:c4:e1:d5:88:70:dd:4d:6a:b8:
                    b9:0d:2a:b4:7a:73:e4:bb:5a:4b:c5:81:e8:8c:b6:
                    14:7f:e8:d0:40:a3:77:57:35:b0:2a:f4:96:42:90:
                    26:f7:27:5f:30:93:f4:b6:4c:46:5d:be:25:3c:f4:
                    eb:32:5d:fe:f7:9d:fe:96:60:07:89:3b:64:92:e4:
                    fb:b5:77:a1:bf:b2:83:71:96:3d:fe:b4:c3:20:e1:
                    91:f6:57:c1:9d:18:6b:8b:a3:39:b1:30:17:a3:d6:
                    24:b1:e5:4b:4f:3f:48:44:82:72:7d:b0:e6:8a:30:
                    c7:95:ee:3d:dc:a7:ec:3d:80:08:c9:a0:b7:5c:4a:
                    71:6e:5d:8e:e9:13:be:70:e4:2e:81:57:22:e9:54:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:24:9C:62:53:BD:48:F5:5F:E1:AE:4F:50:FA:A6:7A:30:96:8C
            X509v3 Authority Key Identifier:
                keyid:AA:BC:40:2E:E2:FA:F4:15:F9:D0:30:91:D8:3B:A9:3D:C6:10:7F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AABC402EE2FAF415F9D03091D83BA93DC6107FEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8933AAE7C78B8D6994D514980DB0374AF2816E130E59E356E13A0A78714856AA/0/34352e3136352e3136382e302f32322d3234203d3e20323637373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:23:7d:03:0b:85:6d:88:f3:c8:30:76:5a:59:27:77:78:
         0d:79:cd:bb:1f:c6:c8:ce:1c:8e:cc:0b:68:ed:ea:ff:0f:70:
         05:b8:a0:65:7f:b5:d6:ca:1b:42:ea:eb:57:24:0e:3a:89:af:
         1c:cc:35:10:8c:b0:59:63:d2:85:c4:9d:c9:f7:61:28:9f:fe:
         56:6d:f8:10:ad:d2:d7:1b:7b:7b:96:ed:80:f5:6c:65:f3:58:
         0b:50:8d:77:7e:41:4c:79:6d:35:39:5c:43:fb:67:f3:87:b7:
         37:82:d2:a7:58:99:0f:0a:30:7f:3b:98:9c:c7:0e:ad:b6:f0:
         c0:5f:5f:9c:d7:7b:c0:7d:80:de:dc:43:93:a5:99:26:e2:32:
         cb:eb:21:e4:26:98:ee:89:b0:3f:b7:17:29:97:51:4a:bd:e8:
         88:01:ea:68:b4:32:b2:ca:38:1a:25:c6:bb:75:0e:fe:7c:01:
         f6:db:50:f7:04:48:45:05:25:2c:de:62:f9:ea:f1:6d:18:b4:
         3a:99:85:06:9f:5f:b8:1a:b8:12:79:f0:1d:3a:4a:64:e6:19:
         24:17:16:2e:a1:62:c1:db:50:6c:66:0d:af:00:0b:2e:6b:b3:
         e4:3b:1a:66:fa:9e:db:ff:d1:d9:f1:69:fb:6c:0b:9b:cc:7e:
         8c:0e:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:50 2025 by rpki-client