Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32332d3233203d3e203532333238.roa
File:                     34352e3232362e3137342e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          T5kwpT85ijUWttBAPlBLjWOdn7WlLCeTqOTZrvjTCQY=
Subject key identifier:   18:90:76:79:9C:0B:AD:22:4F:BA:0A:34:B5:2C:E5:74:9B:29:4A:11
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       64D702EFC7C3C42BBF14CA7170499BC60B73DC79
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:32 +0000
ROA not before:           Tue 04 Feb 2025 18:11:32 +0000
ROA not after:            Tue 03 Feb 2026 18:16:32 +0000
asID:                     52328
IP address blocks:        45.226.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d7:02:ef:c7:c3:c4:2b:bf:14:ca:71:70:49:9b:c6:0b:73:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:32 2025 GMT
            Not After : Feb  3 18:16:32 2026 GMT
        Subject: CN=189076799C0BAD224FBA0A34B52CE5749B294A11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:c6:74:c5:13:af:af:b5:13:ea:49:60:23:
                    79:e1:9b:9b:26:ea:54:30:bc:7c:8c:c2:a6:31:cf:
                    29:51:e5:1d:5b:3e:10:b7:72:ce:e1:76:48:3c:f2:
                    92:0c:c5:9f:bb:cc:7c:9f:4d:1f:10:b0:f7:fe:67:
                    fc:35:04:60:eb:dd:2d:83:fe:11:c4:ea:96:db:26:
                    46:01:a3:c5:0b:b4:2f:76:04:8c:49:ab:8d:f1:a9:
                    81:90:b9:7a:a7:0d:f1:b3:70:82:2b:b7:c1:61:7c:
                    dd:39:1a:48:ef:33:3b:02:8b:1b:f4:ec:7e:bb:83:
                    b6:22:f2:68:00:1c:c9:8f:c4:16:84:b0:e7:5a:fb:
                    1d:30:4a:f1:da:46:5d:55:8e:b5:79:8a:d1:1a:df:
                    07:88:4a:19:6c:2c:c5:b5:52:1b:8a:0d:47:b8:47:
                    49:2b:2d:6b:b6:61:b2:d3:57:e3:08:d0:dd:62:50:
                    bc:6a:49:e8:d3:54:a5:f3:36:19:05:fd:92:8f:4e:
                    fe:05:e2:ce:bf:91:a9:79:38:d9:08:a6:15:f5:ad:
                    6f:02:f6:15:11:ac:7d:df:85:69:32:4f:5f:6b:8c:
                    ef:3f:c4:6f:2c:62:7d:b3:0b:42:a4:a9:73:cf:68:
                    9d:40:30:bb:45:00:89:ce:35:48:36:cc:6c:07:d3:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:90:76:79:9C:0B:AD:22:4F:BA:0A:34:B5:2C:E5:74:9B:29:4A:11
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/34352e3232362e3137342e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:40:50:7a:2c:84:54:3f:76:05:9b:c4:13:0e:76:25:7a:
         41:9d:0f:bd:f6:42:9f:b6:3b:3b:72:20:2a:8c:6c:ad:49:70:
         6b:a7:12:f1:83:fb:13:3c:77:ca:3b:65:65:4f:b7:4d:53:96:
         0d:79:a3:5b:86:bf:c8:a3:4f:47:93:c6:c2:db:d4:c2:6f:df:
         3c:4b:f0:3b:d3:d0:36:88:89:ad:8c:b0:9d:e9:df:b0:b9:50:
         f7:30:ef:c6:a7:c5:e6:f0:d3:9b:6d:9e:23:f8:fd:45:c7:a8:
         19:bb:71:90:39:c0:1f:42:e1:4c:8b:4b:37:d8:8d:dc:41:14:
         d3:d0:85:b6:8a:36:47:d7:94:be:38:f4:fa:c1:a7:8a:e3:df:
         ce:12:e7:eb:d0:a3:08:48:41:3a:1c:84:4f:6b:3b:24:2b:c0:
         13:dc:65:3b:75:36:76:09:d9:69:66:0b:93:34:4d:db:7d:9b:
         f0:1b:37:20:3f:c2:bc:73:ad:8c:19:c8:87:a7:27:f8:49:30:
         e0:ed:4f:0a:22:35:b8:be:cb:f9:c6:99:aa:59:fd:71:fe:6d:
         51:c0:1b:93:c5:1a:ad:0f:b7:bd:14:af:ac:c0:20:f8:25:5d:
         b3:3a:6c:46:f2:f0:b8:1f:99:27:c8:ef:62:5c:92:31:5c:09:
         e8:62:d1:7c
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUZNcC78fDxCu/FMpxcEmbxgtz3HkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNTAyMDQxODExMzJaFw0yNjAyMDMxODE2MzJaMDMxMTAvBgNV
BAMTKDE4OTA3Njc5OUMwQkFEMjI0RkJBMEEzNEI1MkNFNTc0OUIyOTRBMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5cZ0xROvr7UT6klgI3nhm5sm
6lQwvHyMwqYxzylR5R1bPhC3cs7hdkg88pIMxZ+7zHyfTR8QsPf+Z/w1BGDr3S2D
/hHE6pbbJkYBo8ULtC92BIxJq43xqYGQuXqnDfGzcIIrt8FhfN05GkjvMzsCixv0
7H67g7Yi8mgAHMmPxBaEsOda+x0wSvHaRl1VjrV5itEa3weIShlsLMW1UhuKDUe4
R0krLWu2YbLTV+MI0N1iULxqSejTVKXzNhkF/ZKPTv4F4s6/kal5ONkIphX1rW8C
9hURrH3fhWkyT19rjO8/xG8sYn2zC0KkqXPPaJ1AMLtFAInONUg2zGwH0+SVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGJB2eZwLrSJPugo0tSzldJspShEwHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzM0MzUyZTMyMzIzNjJlMzEzNzM0MmUz
MDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3irjAN
BgkqhkiG9w0BAQsFAAOCAQEAPPxAUHoshFQ/dgWbxBMOdiV6QZ0PvfZCn7Y7O3Ig
KoxsrUlwa6cS8YP7Ezx3yjtlZU+3TVOWDXmjW4a/yKNPR5PGwtvUwm/fPEvwO9PQ
NoiJrYywnenfsLlQ9zDvxqfF5vDTm22eI/j9RceoGbtxkDnAH0LhTItLN9iN3EEU
09CFtoo2R9eUvjj0+sGniuPfzhLn69CjCEhBOhyET2s7JCvAE9xlO3U2dgnZaWYL
kzRN232b8Bs3ID/CvHOtjBnIh6cn+Ekw4O1PCiI1uL7L+caZqln9cf5tUcAbk8Ua
rQ+3vRSvrMAg+CVdszpsRvLwuB+ZJ8jvYlySMVwJ6GLRfA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:08 2025 by rpki-client