Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34312e302f32342d3234203d3e20323635353936.roa
File:                     34352e3138312e34312e302f32342d3234203d3e20323635353936.roa (raw, json)
Hash identifier:          s8yQ/QgUIAqa25dgGeYtbxFFxdmE0jZHErLW8CLLt5U=
Subject key identifier:   78:13:CC:A1:9A:CC:50:82:D9:EB:D7:7F:5E:D1:12:CB:F2:FD:8B:53
Certificate issuer:       /CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
Certificate serial:       6D3E71893F0DE7628FADD12B49541BA1AFFA4F0F
Authority key identifier: AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34312e302f32342d3234203d3e20323635353936.roa
Signing time:             Tue 04 Feb 2025 18:39:08 +0000
ROA not before:           Tue 04 Feb 2025 18:34:08 +0000
ROA not after:            Tue 03 Feb 2026 18:39:08 +0000
asID:                     265596
IP address blocks:        45.181.41.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3e:71:89:3f:0d:e7:62:8f:ad:d1:2b:49:54:1b:a1:af:fa:4f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D
        Validity
            Not Before: Feb  4 18:34:08 2025 GMT
            Not After : Feb  3 18:39:08 2026 GMT
        Subject: CN=7813CCA19ACC5082D9EBD77F5ED112CBF2FD8B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:95:4a:90:6e:a8:72:9f:58:df:de:80:28:62:
                    a3:10:9c:ac:2c:79:1f:2c:07:02:d4:8c:69:1e:35:
                    6a:8c:b6:a5:1a:6c:78:34:15:f8:2a:d1:62:be:cb:
                    50:db:cd:e6:1f:ce:a9:d7:aa:3c:a1:79:59:f7:e5:
                    dc:cf:04:ff:ed:43:7e:b8:51:7c:58:d4:91:00:6c:
                    56:91:53:15:0f:89:69:2b:17:3c:c4:44:bb:c4:ea:
                    89:bb:74:44:d4:3b:02:07:9f:8c:14:77:48:49:e0:
                    7a:a2:7a:52:48:7f:68:73:a5:9b:70:9d:17:11:7b:
                    15:c9:04:5b:73:a0:39:60:a0:96:3b:60:e1:3f:2d:
                    04:55:72:4d:7d:1a:5f:31:0d:7e:ac:23:fb:ff:07:
                    6f:44:3a:4b:cb:91:1f:aa:a1:83:c4:dc:16:46:72:
                    b5:14:1a:85:5e:50:7e:a3:5d:86:cf:0a:42:af:09:
                    6c:eb:76:ae:14:ac:d6:8f:40:4f:55:9c:db:4e:6a:
                    b6:76:29:8e:f4:88:23:3e:52:c2:d3:81:cb:98:b3:
                    ec:b0:59:31:65:dc:80:9f:53:d6:61:fa:eb:e3:4b:
                    a6:3a:5e:45:a0:bc:63:6c:91:02:13:fa:3e:c9:db:
                    64:11:9d:59:04:55:ae:4d:6f:c5:f9:24:01:67:68:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:13:CC:A1:9A:CC:50:82:D9:EB:D7:7F:5E:D1:12:CB:F2:FD:8B:53
            X509v3 Authority Key Identifier:
                keyid:AA:9A:0A:0C:41:11:BA:02:78:2A:2E:97:69:1F:9F:C6:C0:8F:EF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA9A0A0C4111BA02782A2E97691F9FC6C08FEF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E21B9BFA0C2374346F33E6CE1AEC79412B2DFB5866C5FC0C1C0C65C4665C588/0/34352e3138312e34312e302f32342d3234203d3e20323635353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:25:69:74:e3:00:f6:86:e3:32:cf:c5:9a:de:1c:fa:15:b0:
         95:77:ad:1b:52:b4:17:76:9f:e7:a5:38:94:92:03:a0:bc:19:
         79:d9:c6:56:57:ce:48:2b:cf:11:b4:3b:2a:a4:55:58:87:f3:
         5a:56:fb:b0:95:8c:ce:55:f5:41:aa:ed:a7:24:d0:c7:8e:4c:
         ab:1a:3a:19:da:7a:bb:17:8a:0f:c0:04:63:43:66:b5:72:fd:
         0c:42:ac:65:c0:37:6f:cd:fd:93:5c:50:c2:35:3f:45:39:d4:
         33:20:b0:8e:c5:4d:50:66:49:fe:56:5f:3d:30:e7:4c:c0:fc:
         39:10:5d:eb:65:e4:69:c3:89:6d:a5:da:d9:37:5f:30:2f:10:
         d0:55:7e:01:1e:35:20:d7:08:39:1d:07:d0:c9:8c:0e:13:37:
         bc:07:69:ca:df:28:4b:b4:83:75:ec:69:d9:5d:94:b6:15:ba:
         11:d4:f6:8f:62:01:d5:5d:f4:ff:67:b1:af:96:2c:ac:99:0b:
         c1:2c:fd:88:68:c3:22:9c:b7:bb:db:1d:18:0a:5f:b4:a5:f2:
         ea:6e:81:c6:38:d1:bc:7c:9b:4b:0e:7c:23:34:83:db:f7:a8:
         6e:0f:5b:73:11:60:91:ae:f1:57:41:1d:02:68:63:d2:99:2d:
         39:1d:f7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:19 2025 by rpki-client