Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532333230.roa
File:                     34352e3136322e322e302f32342d3234203d3e203532333230.roa (raw, json)
Hash identifier:          yRKRM+fQBjUj+RpWOAhaO1621UDpwsOJyEbfpFCWmoY=
Subject key identifier:   24:BF:C3:AB:B2:DD:17:A9:45:03:2C:FB:20:C6:B1:04:27:44:C4:45
Certificate issuer:       /CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
Certificate serial:       4F06E68D665EA649927710901520C4391BF82A1A
Authority key identifier: E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532333230.roa
Signing time:             Wed 26 Mar 2025 14:40:00 +0000
ROA not before:           Wed 26 Mar 2025 14:35:00 +0000
ROA not after:            Wed 25 Mar 2026 14:40:00 +0000
asID:                     52320
IP address blocks:        45.162.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:e6:8d:66:5e:a6:49:92:77:10:90:15:20:c4:39:1b:f8:2a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8046FCFA090ED30A80016F0BC46AB289E25831A
        Validity
            Not Before: Mar 26 14:35:00 2025 GMT
            Not After : Mar 25 14:40:00 2026 GMT
        Subject: CN=24BFC3ABB2DD17A945032CFB20C6B1042744C445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:87:c3:d9:95:61:c8:b3:26:90:36:17:43:
                    fe:bd:f6:a0:71:f0:36:c1:a7:80:e0:a5:09:41:b7:
                    5a:1e:7b:08:65:fd:23:da:8f:5d:32:94:ac:33:f1:
                    e0:e1:b4:28:90:71:e8:88:c3:27:db:5e:1b:9a:fd:
                    3a:aa:6b:a9:1e:dc:0b:41:e1:42:c2:11:16:4a:28:
                    ff:9a:e0:36:40:bd:ec:da:17:4c:96:cd:33:7b:8e:
                    a5:14:94:d5:73:1a:51:5e:09:f4:04:8c:c2:45:d8:
                    a4:6b:fb:cd:19:ef:12:57:29:56:09:0a:5c:af:5d:
                    2a:58:3a:6d:b0:d8:8b:d2:da:5f:09:09:a4:4a:be:
                    a9:d6:7d:01:63:13:8a:ff:21:10:49:38:02:55:fc:
                    ef:5a:62:61:48:79:4d:f0:d7:2b:c6:19:a2:bf:ca:
                    f9:8a:19:4f:e0:e9:41:d5:02:d0:4a:11:10:80:c6:
                    78:5c:7f:29:57:90:cb:e2:8c:ba:a5:0c:1d:1a:09:
                    62:0b:d6:e7:67:a3:42:99:1b:8a:1b:c7:00:2b:04:
                    57:7f:01:f9:fb:e6:24:f9:85:aa:8e:03:d0:be:96:
                    61:5b:80:d7:5b:cd:a6:23:ab:ca:ba:e6:60:24:bc:
                    87:eb:e7:fe:1f:92:4e:e1:1c:fb:09:8e:56:2c:87:
                    4c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BF:C3:AB:B2:DD:17:A9:45:03:2C:FB:20:C6:B1:04:27:44:C4:45
            X509v3 Authority Key Identifier:
                keyid:E8:04:6F:CF:A0:90:ED:30:A8:00:16:F0:BC:46:AB:28:9E:25:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8046FCFA090ED30A80016F0BC46AB289E25831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9704764EDAA01E892295FC92039FDAA0387F0376CF0BD5FD8604F1A365D9CFFF/0/34352e3136322e322e302f32342d3234203d3e203532333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:41:62:0d:c8:50:56:75:46:2d:e4:c7:7d:0d:73:11:9f:ff:
         96:3e:49:70:56:9f:eb:23:ab:72:3f:b5:7f:86:6d:32:56:4b:
         b1:7c:b0:30:f8:9a:05:e4:64:7e:ec:f9:fb:91:36:05:c6:ef:
         a4:62:e4:08:71:88:ec:cd:b9:74:23:95:c9:b3:e7:bf:6c:18:
         2a:eb:7b:4c:e2:0c:5b:ee:94:99:a3:32:17:cd:b9:09:fb:63:
         06:10:2b:31:c3:2d:75:30:ff:b3:aa:aa:7a:c8:4b:df:be:b2:
         27:00:17:55:4b:a2:90:b8:58:dd:00:6a:e5:f1:4e:a9:ea:2a:
         1b:c0:0d:30:38:bc:3e:9f:d1:92:c4:e1:0c:94:f4:fc:86:20:
         d7:cb:95:91:58:a6:72:56:46:88:d9:13:14:04:14:9d:5e:cc:
         b1:ba:fc:5d:15:8a:b8:6a:10:c4:15:56:32:8f:b3:4d:3d:d9:
         18:a9:45:8b:85:54:ce:8d:a8:fd:54:c7:05:69:83:71:1b:fe:
         b8:77:bd:a0:61:89:4b:da:c2:6b:01:b0:7b:05:68:43:04:d8:
         12:f7:22:1d:c2:5b:30:7c:be:df:f6:a2:be:3a:53:2a:df:28:
         34:ce:be:8e:23:b4:ae:01:34:fa:e5:a4:04:35:ad:2b:21:08:
         f1:93:9f:c9
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTwbmjWZepkmSdxCQFSDEORv4KhowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgwNDZGQ0ZBMDkwRUQzMEE4MDAxNkYwQkM0NkFCMjg5
RTI1ODMxQTAeFw0yNTAzMjYxNDM1MDBaFw0yNjAzMjUxNDQwMDBaMDMxMTAvBgNV
BAMTKDI0QkZDM0FCQjJERDE3QTk0NTAzMkNGQjIwQzZCMTA0Mjc0NEM0NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+74fD2ZVhyLMmkDYXQ/699qBx
8DbBp4DgpQlBt1oeewhl/SPaj10ylKwz8eDhtCiQceiIwyfbXhua/Tqqa6ke3AtB
4ULCERZKKP+a4DZAvezaF0yWzTN7jqUUlNVzGlFeCfQEjMJF2KRr+80Z7xJXKVYJ
ClyvXSpYOm2w2IvS2l8JCaRKvqnWfQFjE4r/IRBJOAJV/O9aYmFIeU3w1yvGGaK/
yvmKGU/g6UHVAtBKERCAxnhcfylXkMvijLqlDB0aCWIL1udno0KZG4obxwArBFd/
Afn75iT5haqOA9C+lmFbgNdbzaYjq8q65mAkvIfr5/4fkk7hHPsJjlYsh0ylAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUJL/Dq7LdF6lFAyz7IMaxBCdExEUwHwYDVR0j
BBgwFoAU6ARvz6CQ7TCoABbwvEarKJ4lgxowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzA0NzY0RURBQTAxRTg5MjI5NUZDOTIwMzlGREFBMDM4
N0YwMzc2Q0YwQkQ1RkQ4NjA0RjFBMzY1RDlDRkZGLzAvRTgwNDZGQ0ZBMDkwRUQz
MEE4MDAxNkYwQkM0NkFCMjg5RTI1ODMxQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FODA0NkZDRkEwOTBFRDMwQTgw
MDE2RjBCQzQ2QUIyODlFMjU4MzFBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwNDc2NEVEQUEwMUU4OTIyOTVGQzkyMDM5RkRBQTAzODdGMDM3NkNG
MEJENUZEODYwNEYxQTM2NUQ5Q0ZGRi8wLzM0MzUyZTMxMzYzMjJlMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTMyMzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALaICMA0GCSqG
SIb3DQEBCwUAA4IBAQCGQWINyFBWdUYt5Md9DXMRn/+WPklwVp/rI6tyP7V/hm0y
VkuxfLAw+JoF5GR+7Pn7kTYFxu+kYuQIcYjszbl0I5XJs+e/bBgq63tM4gxb7pSZ
ozIXzbkJ+2MGECsxwy11MP+zqqp6yEvfvrInABdVS6KQuFjdAGrl8U6p6iobwA0w
OLw+n9GSxOEMlPT8hiDXy5WRWKZyVkaI2RMUBBSdXsyxuvxdFYq4ahDEFVYyj7NN
PdkYqUWLhVTOjaj9VMcFaYNxG/64d72gYYlL2sJrAbB7BWhDBNgS9yIdwlswfL7f
9qK+OlMq3yg0zr6OI7SuATT65aQENa0rIQjxk5/J
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:45 2025 by rpki-client