Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32342e302f32342d3234203d3e20323639383134.roa
File:                     34352e3138362e32342e302f32342d3234203d3e20323639383134.roa (raw, json)
Hash identifier:          nOm57ReeiqbVPkUJkqBxLCIvf7ZkwcLhJ39+mi6gh6k=
Subject key identifier:   37:1D:36:48:3B:06:0D:A2:A9:13:F5:F7:83:7F:58:EB:B3:8B:BA:2F
Certificate issuer:       /CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
Certificate serial:       7D095D5A5BDC47B6DD5E7E31034F080756985ACF
Authority key identifier: 8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32342e302f32342d3234203d3e20323639383134.roa
Signing time:             Tue 04 Feb 2025 18:08:59 +0000
ROA not before:           Tue 04 Feb 2025 18:03:59 +0000
ROA not after:            Tue 03 Feb 2026 18:08:59 +0000
asID:                     269814
IP address blocks:        45.186.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:09:5d:5a:5b:dc:47:b6:dd:5e:7e:31:03:4f:08:07:56:98:5a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7
        Validity
            Not Before: Feb  4 18:03:59 2025 GMT
            Not After : Feb  3 18:08:59 2026 GMT
        Subject: CN=371D36483B060DA2A913F5F7837F58EBB38BBA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:ed:3a:f3:5b:22:a4:d9:b1:f0:ed:97:c8:
                    f8:9b:d5:30:b3:89:50:bf:cc:0b:1a:b1:00:29:83:
                    9b:f1:cd:9a:61:ac:8e:1b:3f:57:ba:45:56:70:2a:
                    1e:b9:91:17:35:63:9a:df:64:ad:23:cf:57:f0:a8:
                    53:a4:78:8f:16:f2:c7:f2:dd:59:eb:38:a5:37:ba:
                    c3:44:55:55:ac:83:c8:07:24:59:fa:00:02:72:a8:
                    c5:d4:ca:60:0a:84:1a:de:c0:7e:4a:c2:50:d4:f4:
                    b1:dd:f9:09:24:bf:60:99:ba:92:b9:67:a3:59:9f:
                    cd:5a:84:45:38:83:b2:ce:9f:ba:57:02:ef:70:aa:
                    fa:22:2b:5f:25:0a:2c:0a:40:b1:79:65:4a:2b:6f:
                    4c:28:55:e4:2f:16:6a:11:76:c0:cb:63:aa:d0:7c:
                    4f:49:a3:17:a8:d6:df:cf:2c:5c:21:7e:68:ea:4b:
                    9b:2e:fa:8d:9e:d7:3d:8c:08:40:92:33:d1:be:7b:
                    5a:77:5f:17:8c:df:d5:b7:35:11:ab:c1:1d:21:0e:
                    70:ad:98:5d:e3:b2:bd:06:38:76:c9:44:22:76:6f:
                    31:c5:64:b2:10:b2:2d:84:3f:f7:40:d5:bb:ee:ff:
                    2e:dd:41:f1:71:4e:0f:ed:cb:88:ab:e4:8e:8b:5a:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1D:36:48:3B:06:0D:A2:A9:13:F5:F7:83:7F:58:EB:B3:8B:BA:2F
            X509v3 Authority Key Identifier:
                keyid:8D:A8:22:00:D0:E6:AB:11:C8:4B:B7:FA:99:D7:B0:53:0B:02:D3:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8DA82200D0E6AB11C84BB7FA99D7B0530B02D3F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ABDFF8AC1F52EB03F4F2120204D33DF0617CBD11AF7D961AECA6C66C7BDEE10/0/34352e3138362e32342e302f32342d3234203d3e20323639383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:46:bf:a8:fe:69:3b:ed:ec:65:79:02:80:9b:95:da:4c:
         11:c3:20:c1:e5:a0:99:44:e1:76:c9:24:c7:01:98:86:fd:e1:
         83:4b:cb:fd:07:5a:bf:b7:6b:b0:2c:47:71:37:6f:06:b3:59:
         0f:24:91:66:bf:24:ac:aa:72:cf:56:0d:ac:33:92:8f:e9:b6:
         8c:b7:50:32:43:0c:37:94:9d:34:48:11:e4:6e:8d:4b:13:22:
         f7:c3:b7:26:c2:7d:95:e8:e5:da:b2:38:7c:a8:47:22:d4:8a:
         18:67:e9:7f:3c:11:ab:fa:25:5e:87:ff:df:b3:79:2c:08:e8:
         5f:03:17:5c:bd:b0:c0:8c:40:77:76:eb:42:14:47:5b:17:6b:
         ce:60:5e:39:95:f1:2a:50:0d:88:73:18:13:db:6b:0c:e6:21:
         14:2b:e4:39:5d:26:31:bf:1e:6f:5c:c5:b3:a8:71:72:50:5e:
         78:7d:d1:df:15:31:66:64:9c:d9:41:a5:aa:58:51:cf:16:be:
         91:dd:19:ff:89:53:3d:66:da:df:ba:5f:b2:ef:63:68:29:ea:
         8a:1e:03:de:2f:b9:be:9c:93:6b:f4:ed:31:d8:d0:34:d9:83:
         8f:cd:a8:45:8e:5b:ce:15:3a:81:50:f7:8e:e1:46:2f:ce:7d:
         98:c1:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:13 2025 by rpki-client