Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32342d3234203d3e20323730313836.roa
File:                     34352e3137372e3137362e302f32342d3234203d3e20323730313836.roa (raw, json)
Hash identifier:          S9YzCIYtGBHRNmvtxh2LRrw9XT5+riADBLQBUKRJnxQ=
Subject key identifier:   9D:37:22:A5:72:03:3F:91:DD:0F:34:03:27:9A:E3:50:8B:C9:9D:96
Certificate issuer:       /CN=1253F5565479B7C7B04A2795544458932EC06F6C
Certificate serial:       052D00DCE11F8FD969718F555C0623218989D659
Authority key identifier: 12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32342d3234203d3e20323730313836.roa
Signing time:             Tue 04 Feb 2025 18:22:27 +0000
ROA not before:           Tue 04 Feb 2025 18:17:27 +0000
ROA not after:            Tue 03 Feb 2026 18:22:27 +0000
asID:                     270186
IP address blocks:        45.177.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:00:dc:e1:1f:8f:d9:69:71:8f:55:5c:06:23:21:89:89:d6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1253F5565479B7C7B04A2795544458932EC06F6C
        Validity
            Not Before: Feb  4 18:17:27 2025 GMT
            Not After : Feb  3 18:22:27 2026 GMT
        Subject: CN=9D3722A572033F91DD0F3403279AE3508BC99D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:19:f8:95:74:8d:13:cd:b6:97:84:c9:c5:d4:
                    e5:f8:d8:c4:d2:14:fe:48:e9:87:b3:8d:de:2f:cf:
                    5a:de:d6:c5:81:b8:3f:8f:67:9c:2c:6b:5c:29:d3:
                    0a:03:c9:5d:aa:69:38:bd:37:9a:e2:52:84:f5:5f:
                    60:ae:6b:2a:50:46:5d:e2:47:22:b0:2a:da:24:65:
                    85:86:bb:bf:6f:6e:02:e1:f7:2e:f9:2b:f9:2e:37:
                    c2:31:59:d7:a7:9b:95:59:70:03:6d:3a:d3:fd:71:
                    c4:c0:0b:20:e1:2c:4e:a1:70:ae:fc:8f:a2:2e:33:
                    5c:74:43:d4:2b:3b:49:2a:0d:6d:d2:28:22:2a:f6:
                    00:de:ad:5a:d3:e3:42:e7:58:7d:3d:2a:3e:9b:19:
                    dd:24:f9:c5:f0:9e:e0:ee:f0:0a:ae:fb:36:54:17:
                    4e:cc:70:ec:00:7f:da:0e:5c:f8:46:6e:2e:2f:8a:
                    fb:ef:1b:07:02:e5:3f:a4:f0:9f:9b:8c:60:97:a5:
                    3b:6f:60:fd:ba:08:49:14:c4:d9:a1:fe:50:0a:5f:
                    aa:68:aa:26:ee:9b:f4:93:f4:8f:eb:65:d1:b3:b8:
                    ae:ea:12:8e:3b:9d:6b:dd:17:14:30:5a:df:39:54:
                    b5:66:61:4a:ac:b6:eb:6b:ad:ff:29:b4:c8:42:28:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:37:22:A5:72:03:3F:91:DD:0F:34:03:27:9A:E3:50:8B:C9:9D:96
            X509v3 Authority Key Identifier:
                keyid:12:53:F5:56:54:79:B7:C7:B0:4A:27:95:54:44:58:93:2E:C0:6F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/1253F5565479B7C7B04A2795544458932EC06F6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1253F5565479B7C7B04A2795544458932EC06F6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89C192AA6BCB5F59F4A370111897E0D2F0C15AD5F9BC217C6255354AE73C1944/0/34352e3137372e3137362e302f32342d3234203d3e20323730313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:ba:33:e5:51:3d:ec:5d:5d:94:7d:75:e4:80:31:25:43:
         91:9d:e0:9b:30:6b:06:1f:2e:b0:f4:69:a1:61:cb:55:c1:66:
         8f:a4:6c:af:26:f2:47:01:3c:fb:b5:67:d4:d2:e8:11:5d:25:
         40:41:a2:68:35:5a:e6:b9:72:c9:e7:2a:93:73:ec:61:76:e9:
         32:1a:77:13:7a:3e:26:71:0e:d4:fa:76:55:20:20:c2:98:15:
         9c:b7:fb:b7:22:87:31:19:9a:9b:a6:62:15:c8:d0:a8:10:81:
         c2:0d:9f:f4:c7:7f:b4:b3:ef:10:53:9d:c1:ff:f7:de:bd:a3:
         5a:70:ac:0a:97:5e:eb:af:13:99:7d:f3:58:c8:f4:ed:61:7c:
         a9:cd:26:27:63:3c:bd:9f:cf:6b:46:1a:80:46:cd:f3:0a:72:
         19:88:e7:e9:52:ae:83:93:fc:33:93:14:5e:b2:3d:4c:00:f3:
         7b:8b:49:61:bd:a7:03:f1:8c:4e:21:1e:b3:66:70:61:4e:6d:
         e1:6b:34:b2:e6:1f:e8:7a:ae:b3:87:57:48:0c:78:7f:58:39:
         15:17:c8:47:fd:9d:db:d9:e9:4d:6f:ad:9c:69:0b:74:2d:90:
         cc:f4:c2:1c:48:4f:0e:b9:97:9a:ad:f7:38:13:39:24:bc:35:
         09:9e:00:f1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUBS0A3OEfj9lpcY9VXAYjIYmJ1lkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI1M0Y1NTY1NDc5QjdDN0IwNEEyNzk1NTQ0NDU4OTMy
RUMwNkY2QzAeFw0yNTAyMDQxODE3MjdaFw0yNjAyMDMxODIyMjdaMDMxMTAvBgNV
BAMTKDlEMzcyMkE1NzIwMzNGOTFERDBGMzQwMzI3OUFFMzUwOEJDOTlEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGfiVdI0TzbaXhMnF1OX42MTS
FP5I6Yezjd4vz1re1sWBuD+PZ5wsa1wp0woDyV2qaTi9N5riUoT1X2CuaypQRl3i
RyKwKtokZYWGu79vbgLh9y75K/kuN8IxWdenm5VZcANtOtP9ccTACyDhLE6hcK78
j6IuM1x0Q9QrO0kqDW3SKCIq9gDerVrT40LnWH09Kj6bGd0k+cXwnuDu8Aqu+zZU
F07McOwAf9oOXPhGbi4vivvvGwcC5T+k8J+bjGCXpTtvYP26CEkUxNmh/lAKX6po
qibum/ST9I/rZdGzuK7qEo47nWvdFxQwWt85VLVmYUqstutrrf8ptMhCKCANAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnTcipXIDP5HdDzQDJ5rjUIvJnZYwHwYDVR0j
BBgwFoAUElP1VlR5t8ewSieVVERYky7Ab2wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84OUMxOTJBQTZCQ0I1RjU5RjRBMzcwMTExODk3RTBEMkYw
QzE1QUQ1RjlCQzIxN0M2MjU1MzU0QUU3M0MxOTQ0LzAvMTI1M0Y1NTY1NDc5QjdD
N0IwNEEyNzk1NTQ0NDU4OTMyRUMwNkY2Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMjUzRjU1NjU0NzlCN0M3QjA0
QTI3OTU1NDQ0NTg5MzJFQzA2RjZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODlDMTkyQUE2QkNCNUY1OUY0QTM3MDExMTg5N0UwRDJGMEMxNUFENUY5
QkMyMTdDNjI1NTM1NEFFNzNDMTk0NC8wLzM0MzUyZTMxMzczNzJlMzEzNzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzODM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbGw
MA0GCSqGSIb3DQEBCwUAA4IBAQBsx7oz5VE97F1dlH115IAxJUORneCbMGsGHy6w
9GmhYctVwWaPpGyvJvJHATz7tWfU0ugRXSVAQaJoNVrmuXLJ5yqTc+xhdukyGncT
ej4mcQ7U+nZVICDCmBWct/u3IocxGZqbpmIVyNCoEIHCDZ/0x3+0s+8QU53B//fe
vaNacKwKl17rrxOZffNYyPTtYXypzSYnYzy9n89rRhqARs3zCnIZiOfpUq6Dk/wz
kxResj1MAPN7i0lhvacD8YxOIR6zZnBhTm3hazSy5h/oeq6zh1dIDHh/WDkVF8hH
/Z3b2elNb62caQt0LZDM9MIcSE8OuZearfc4EzkkvDUJngDx
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:43 2025 by rpki-client