Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa
File:                     34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa (raw, json)
Hash identifier:          wPXMbP8u4QVhkvmlbN8jxrPA82m134/IhmFce4mGlFQ=
Subject key identifier:   09:D4:F5:8A:E2:8E:02:4D:BD:65:90:B1:37:0D:9D:DF:05:36:A2:B7
Certificate issuer:       /CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
Certificate serial:       699D4CAB00BC09D1DFDEEC931F87723B65CD8320
Authority key identifier: F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa
Signing time:             Thu 20 Feb 2025 20:10:32 +0000
ROA not before:           Thu 20 Feb 2025 20:05:32 +0000
ROA not after:            Thu 19 Feb 2026 20:10:32 +0000
asID:                     265684
IP address blocks:        45.186.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9d:4c:ab:00:bc:09:d1:df:de:ec:93:1f:87:72:3b:65:cd:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04E62F42E8C754132C4137521873CFCE3C2BB48
        Validity
            Not Before: Feb 20 20:05:32 2025 GMT
            Not After : Feb 19 20:10:32 2026 GMT
        Subject: CN=09D4F58AE28E024DBD6590B1370D9DDF0536A2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:3a:e2:6a:55:f0:a0:ae:5a:a4:96:3b:47:
                    69:f7:7c:43:e0:b2:15:55:6d:9a:41:92:35:b0:49:
                    62:fc:db:c6:42:63:da:46:e5:3e:33:8f:d0:8a:1f:
                    8c:a3:ef:be:04:18:8c:1c:ee:8b:3b:f3:22:ed:6c:
                    8d:bb:47:ed:7b:05:05:f4:76:84:e7:72:5a:6a:20:
                    6c:bf:bc:81:9b:04:d6:06:12:d4:ce:d5:97:0d:43:
                    5c:46:72:92:59:55:c7:5d:ff:69:52:75:0c:a3:e0:
                    ab:de:2b:d1:80:99:4b:c1:d2:2b:7f:58:df:d9:db:
                    80:4b:72:2a:53:e5:96:6b:0b:3d:d1:fe:2b:fd:cd:
                    ac:4e:bb:c2:9f:21:9e:e8:19:4e:3d:52:74:87:42:
                    0f:fa:a4:38:8a:3a:07:af:a2:cc:0d:d1:14:8d:f7:
                    33:d2:ad:91:d8:00:98:d1:fc:27:48:d7:2b:b9:fc:
                    16:6a:49:ae:99:22:bb:c5:05:a1:a3:96:1f:33:aa:
                    a0:3f:41:7d:e0:e3:bf:ea:00:c2:04:d5:c8:3a:44:
                    df:dc:95:1e:ee:d2:83:a9:55:72:b0:8c:4a:37:12:
                    52:76:03:b6:e8:86:da:c3:61:23:39:83:33:8f:22:
                    a7:f8:96:1a:f5:d2:11:ec:34:68:70:47:06:21:23:
                    42:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:F5:8A:E2:8E:02:4D:BD:65:90:B1:37:0D:9D:DF:05:36:A2:B7
            X509v3 Authority Key Identifier:
                keyid:F0:4E:62:F4:2E:8C:75:41:32:C4:13:75:21:87:3C:FC:E3:C2:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F04E62F42E8C754132C4137521873CFCE3C2BB48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9DD08B54583E42B47762A4A9BB042329017FDB4454EC1143A7A6255D3A97EB36/0/34352e3138362e3130342e302f32342d3234203d3e20323635363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:df:bd:bc:f4:be:8e:59:15:f7:78:5e:6b:26:c9:e9:5a:af:
         2d:27:6f:49:01:7c:97:8d:30:fe:bb:cf:c9:a1:94:45:60:a5:
         26:0b:44:51:65:10:23:43:48:17:21:d4:0d:9f:10:59:e8:ed:
         18:f2:ba:c5:82:81:a5:c5:1d:99:b3:2c:30:14:6b:a7:ca:16:
         1d:64:fd:1c:02:66:2c:5f:d3:ea:2c:cd:fc:60:03:7d:36:1f:
         f3:fd:3a:7a:1a:52:8d:a0:46:5e:d6:57:9e:8b:38:e6:d2:89:
         88:ad:44:db:e3:9b:cd:26:40:07:cc:af:32:55:44:6e:dc:fe:
         33:34:15:1c:92:2e:1d:50:de:19:70:bc:ba:f0:90:e8:a8:09:
         ef:28:14:28:3f:f3:3c:30:ce:da:2d:8b:1f:fb:d6:54:c1:46:
         b2:e1:b3:d2:88:25:88:28:aa:56:05:bc:84:c2:94:d2:bc:ca:
         99:3a:f3:98:94:0d:5e:40:9f:5b:22:86:9b:46:66:2a:38:fc:
         16:99:89:bc:e0:ee:32:89:c2:45:29:12:97:fb:6a:dd:00:d7:
         43:47:88:a0:96:9e:a8:62:9e:22:35:5d:9e:64:3e:1f:45:09:
         e8:c3:1b:0a:a4:e0:ab:70:4e:00:0b:e9:43:d1:cb:cc:ea:e1:
         66:e0:f3:63
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaZ1MqwC8CdHf3uyTH4dyO2XNgyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0RTYyRjQyRThDNzU0MTMyQzQxMzc1MjE4NzNDRkNF
M0MyQkI0ODAeFw0yNTAyMjAyMDA1MzJaFw0yNjAyMTkyMDEwMzJaMDMxMTAvBgNV
BAMTKDA5RDRGNThBRTI4RTAyNERCRDY1OTBCMTM3MEQ5RERGMDUzNkEyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrjrialXwoK5apJY7R2n3fEPg
shVVbZpBkjWwSWL828ZCY9pG5T4zj9CKH4yj774EGIwc7os78yLtbI27R+17BQX0
doTnclpqIGy/vIGbBNYGEtTO1ZcNQ1xGcpJZVcdd/2lSdQyj4KveK9GAmUvB0it/
WN/Z24BLcipT5ZZrCz3R/iv9zaxOu8KfIZ7oGU49UnSHQg/6pDiKOgevoswN0RSN
9zPSrZHYAJjR/CdI1yu5/BZqSa6ZIrvFBaGjlh8zqqA/QX3g47/qAMIE1cg6RN/c
lR7u0oOpVXKwjEo3ElJ2A7bohtrDYSM5gzOPIqf4lhr10hHsNGhwRwYhI0I9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCdT1iuKOAk29ZZCxNw2d3wU2orcwHwYDVR0j
BBgwFoAU8E5i9C6MdUEyxBN1IYc8/OPCu0gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85REQwOEI1NDU4M0U0MkI0Nzc2MkE0QTlCQjA0MjMyOTAx
N0ZEQjQ0NTRFQzExNDNBN0E2MjU1RDNBOTdFQjM2LzAvRjA0RTYyRjQyRThDNzU0
MTMyQzQxMzc1MjE4NzNDRkNFM0MyQkI0OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDRFNjJGNDJFOEM3NTQxMzJD
NDEzNzUyMTg3M0NGQ0UzQzJCQjQ4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUREMDhCNTQ1ODNFNDJCNDc3NjJBNEE5QkIwNDIzMjkwMTdGREI0NDU0
RUMxMTQzQTdBNjI1NUQzQTk3RUIzNi8wLzM0MzUyZTMxMzgzNjJlMzEzMDM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzODM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbpo
MA0GCSqGSIb3DQEBCwUAA4IBAQBZ37289L6OWRX3eF5rJsnpWq8tJ29JAXyXjTD+
u8/JoZRFYKUmC0RRZRAjQ0gXIdQNnxBZ6O0Y8rrFgoGlxR2ZsywwFGunyhYdZP0c
AmYsX9PqLM38YAN9Nh/z/Tp6GlKNoEZe1leeizjm0omIrUTb45vNJkAHzK8yVURu
3P4zNBUcki4dUN4ZcLy68JDoqAnvKBQoP/M8MM7aLYsf+9ZUwUay4bPSiCWIKKpW
BbyEwpTSvMqZOvOYlA1eQJ9bIoabRmYqOPwWmYm84O4yicJFKRKX+2rdANdDR4ig
lp6oYp4iNV2eZD4fRQnowxsKpOCrcE4AC+lD0cvM6uFm4PNj
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:08 2025 by rpki-client