Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/34352e3136312e3136392e302f32342d3234203d3e203238303933.roa
File:                     34352e3136312e3136392e302f32342d3234203d3e203238303933.roa (raw, json)
Hash identifier:          c2K/6MqFb8qS+t4yV0LPdTegi4ZDfDGtEI+toAtHc1I=
Subject key identifier:   13:7F:DF:57:47:62:62:56:62:07:39:DF:A6:A1:DD:C7:9A:11:A1:EE
Certificate issuer:       /CN=4E10749617F934E1D6CBF359A4033D533EA752C4
Certificate serial:       54D728C4DB74A063A8571716213262B4686988FD
Authority key identifier: 4E:10:74:96:17:F9:34:E1:D6:CB:F3:59:A4:03:3D:53:3E:A7:52:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/34352e3136312e3136392e302f32342d3234203d3e203238303933.roa
Signing time:             Tue 04 Feb 2025 18:16:54 +0000
ROA not before:           Tue 04 Feb 2025 18:11:54 +0000
ROA not after:            Tue 03 Feb 2026 18:16:54 +0000
asID:                     28093
IP address blocks:        45.161.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d7:28:c4:db:74:a0:63:a8:57:17:16:21:32:62:b4:68:69:88:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E10749617F934E1D6CBF359A4033D533EA752C4
        Validity
            Not Before: Feb  4 18:11:54 2025 GMT
            Not After : Feb  3 18:16:54 2026 GMT
        Subject: CN=137FDF5747626256620739DFA6A1DDC79A11A1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e4:d2:8b:0b:37:4b:ed:14:28:6b:54:c0:d6:
                    68:da:70:f9:bf:ef:ba:7e:02:a5:bf:38:e0:9d:60:
                    3d:aa:d0:7f:24:23:80:ad:17:fa:ab:9c:5f:d1:ce:
                    1f:6a:a3:5d:d7:5f:2e:16:4b:4b:e5:51:ed:65:d4:
                    a2:25:1d:f3:56:fd:f9:2d:d0:fd:81:06:d0:6d:07:
                    00:dc:9a:91:62:4c:d6:f3:ba:4b:e2:19:64:12:bd:
                    ef:2d:d6:c6:5c:87:3f:7f:c8:8e:f4:57:23:3b:ec:
                    aa:81:76:57:c7:12:0b:72:6b:12:f0:ba:06:6e:c1:
                    bc:88:48:2c:1e:86:d5:ea:92:f5:b4:d8:17:64:72:
                    c2:cb:46:a0:ab:d5:69:cb:2c:50:09:da:80:a4:26:
                    12:c4:ef:8e:5b:d7:c0:5f:7a:66:5a:54:35:b8:8a:
                    12:7f:77:5e:38:13:f4:27:31:42:bf:2e:11:4e:71:
                    16:85:ea:c1:79:14:de:8a:98:43:48:75:50:85:1e:
                    49:33:b0:42:fb:1c:01:03:74:c3:9f:74:ef:48:3f:
                    23:65:be:56:c1:8d:ca:49:9f:fc:63:53:1f:31:2b:
                    0b:3a:40:44:65:9e:8e:9a:b7:25:f6:17:80:ce:3d:
                    3e:25:70:7e:ff:78:2d:f3:5a:aa:c5:48:f1:4a:3d:
                    0c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:DF:57:47:62:62:56:62:07:39:DF:A6:A1:DD:C7:9A:11:A1:EE
            X509v3 Authority Key Identifier:
                keyid:4E:10:74:96:17:F9:34:E1:D6:CB:F3:59:A4:03:3D:53:3E:A7:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/4E10749617F934E1D6CBF359A4033D533EA752C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E10749617F934E1D6CBF359A4033D533EA752C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8CA5C2B6FE4EA46710AE431C291F4701BF7F128BCF106F463C1B530C0E2405CD/0/34352e3136312e3136392e302f32342d3234203d3e203238303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:55:d4:00:50:8a:0b:9e:61:81:b7:17:8b:d9:57:c9:c8:a0:
         57:43:f1:0c:49:25:a8:04:10:26:75:17:36:ce:a8:bc:35:b1:
         15:5e:36:13:e0:65:d2:1b:bd:78:94:1f:ba:48:c6:c5:ad:44:
         92:53:cd:3d:9c:fb:c4:5a:05:ef:66:ba:fb:e5:cc:40:a5:62:
         bc:44:27:78:36:f7:96:dc:30:9f:d4:4e:6f:94:c3:95:75:02:
         3a:d0:92:26:16:79:5a:51:9d:32:de:bb:bc:e8:03:c0:13:f9:
         86:91:7c:13:c1:56:ba:1e:19:fe:fa:36:64:4b:be:a9:f0:33:
         66:92:e3:b5:33:44:7d:9c:96:6a:ca:4a:22:a6:e5:fa:ef:a5:
         78:e1:a6:fa:26:9f:5c:a7:87:cd:ce:8a:65:fc:a2:1c:a4:6d:
         2a:b6:be:e1:ac:14:b3:13:36:c5:ec:87:1e:1b:4f:79:c0:65:
         8f:f6:a8:93:8f:f8:1c:f1:4e:c4:91:8d:a6:4f:98:62:d5:c1:
         42:a7:9e:6e:be:d5:69:3c:c7:fa:3a:a4:ed:ab:95:11:b2:a7:
         b9:a7:62:58:4a:93:5e:8a:81:07:7d:e6:38:8d:c3:b0:e3:23:
         22:58:10:0a:4e:3d:02:c4:b5:2b:c7:0b:e2:cc:56:c7:4d:ab:
         60:dc:b2:b5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVNcoxNt0oGOoVxcWITJitGhpiP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUxMDc0OTYxN0Y5MzRFMUQ2Q0JGMzU5QTQwMzNENTMz
RUE3NTJDNDAeFw0yNTAyMDQxODExNTRaFw0yNjAyMDMxODE2NTRaMDMxMTAvBgNV
BAMTKDEzN0ZERjU3NDc2MjYyNTY2MjA3MzlERkE2QTFEREM3OUExMUExRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv5NKLCzdL7RQoa1TA1mjacPm/
77p+AqW/OOCdYD2q0H8kI4CtF/qrnF/Rzh9qo13XXy4WS0vlUe1l1KIlHfNW/fkt
0P2BBtBtBwDcmpFiTNbzukviGWQSve8t1sZchz9/yI70VyM77KqBdlfHEgtyaxLw
ugZuwbyISCwehtXqkvW02BdkcsLLRqCr1WnLLFAJ2oCkJhLE745b18BfemZaVDW4
ihJ/d144E/QnMUK/LhFOcRaF6sF5FN6KmENIdVCFHkkzsEL7HAEDdMOfdO9IPyNl
vlbBjcpJn/xjUx8xKws6QERlno6atyX2F4DOPT4lcH7/eC3zWqrFSPFKPQyNAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUE3/fV0diYlZiBznfpqHdx5oRoe4wHwYDVR0j
BBgwFoAUThB0lhf5NOHWy/NZpAM9Uz6nUsQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84Q0E1QzJCNkZFNEVBNDY3MTBBRTQzMUMyOTFGNDcwMUJG
N0YxMjhCQ0YxMDZGNDYzQzFCNTMwQzBFMjQwNUNELzAvNEUxMDc0OTYxN0Y5MzRF
MUQ2Q0JGMzU5QTQwMzNENTMzRUE3NTJDNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RTEwNzQ5NjE3RjkzNEUxRDZD
QkYzNTlBNDAzM0Q1MzNFQTc1MkM0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOENBNUMyQjZGRTRFQTQ2NzEwQUU0MzFDMjkxRjQ3MDFCRjdGMTI4QkNG
MTA2RjQ2M0MxQjUzMEMwRTI0MDVDRC8wLzM0MzUyZTMxMzYzMTJlMzEzNjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzkzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2hqTAN
BgkqhkiG9w0BAQsFAAOCAQEAnVXUAFCKC55hgbcXi9lXycigV0PxDEklqAQQJnUX
Ns6ovDWxFV42E+Bl0hu9eJQfukjGxa1EklPNPZz7xFoF72a6++XMQKVivEQneDb3
ltwwn9ROb5TDlXUCOtCSJhZ5WlGdMt67vOgDwBP5hpF8E8FWuh4Z/vo2ZEu+qfAz
ZpLjtTNEfZyWaspKIqbl+u+leOGm+iafXKeHzc6KZfyiHKRtKra+4awUsxM2xeyH
HhtPecBlj/aok4/4HPFOxJGNpk+YYtXBQqeebr7VaTzH+jqk7auVEbKnuadiWEqT
XoqBB33mOI3DsOMjIlgQCk49AsS1K8cL4sxWx02rYNyytQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:06:27 2025 by rpki-client