Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134312e302f32342d3234203d3e20323637383131.roa
File:                     34352e3136392e3134312e302f32342d3234203d3e20323637383131.roa (raw, json)
Hash identifier:          lm6E11yFu5uvLsrpmeAG3TrlLuUziRpqcHSJWuwPGac=
Subject key identifier:   7A:9B:F6:D9:93:8E:CF:B3:4B:B7:23:3A:33:23:1D:29:D4:1A:C1:7C
Certificate issuer:       /CN=EDA827CC7A82AE7851CAF29A871B5144E46B1A66
Certificate serial:       566AA5DBC7CC3EFD48535FAF5E22386789CC82AA
Authority key identifier: ED:A8:27:CC:7A:82:AE:78:51:CA:F2:9A:87:1B:51:44:E4:6B:1A:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134312e302f32342d3234203d3e20323637383131.roa
Signing time:             Tue 04 Feb 2025 18:33:26 +0000
ROA not before:           Tue 04 Feb 2025 18:28:26 +0000
ROA not after:            Tue 03 Feb 2026 18:33:26 +0000
asID:                     267811
IP address blocks:        45.169.141.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6a:a5:db:c7:cc:3e:fd:48:53:5f:af:5e:22:38:67:89:cc:82:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA827CC7A82AE7851CAF29A871B5144E46B1A66
        Validity
            Not Before: Feb  4 18:28:26 2025 GMT
            Not After : Feb  3 18:33:26 2026 GMT
        Subject: CN=7A9BF6D9938ECFB34BB7233A33231D29D41AC17C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:8c:bc:4d:0e:0f:6b:b9:4c:32:91:6b:da:
                    28:8f:c1:7e:74:47:4f:6d:be:56:85:27:7a:ea:c4:
                    82:84:b9:09:8d:2c:e4:38:23:dd:bc:10:78:f9:23:
                    93:a2:64:fa:b8:d3:bf:2a:66:87:83:d8:60:27:56:
                    09:34:a9:c5:87:9d:22:78:4c:bc:92:5b:c3:de:22:
                    bf:52:45:0b:38:a1:99:2b:ba:52:0c:20:72:4c:ef:
                    41:6a:fe:bb:b6:c7:e2:2f:13:8b:8d:d8:b8:77:83:
                    a6:b8:a7:40:ea:b5:0f:28:31:74:ee:65:a9:59:8a:
                    a5:06:fb:46:3e:5e:7b:7e:7e:c5:81:4c:cf:96:b1:
                    40:ff:12:5d:b4:f4:09:92:cc:aa:9a:5a:89:14:01:
                    9b:7b:0c:ff:e6:ff:0a:b6:1f:80:2d:42:fd:26:2c:
                    cc:c4:30:86:e7:b4:87:56:05:6b:ab:8b:be:76:56:
                    56:b9:f6:b5:5c:64:1b:5a:76:9c:ba:85:32:99:4e:
                    0d:fa:9f:65:c0:0f:7f:e1:6b:b8:f4:9e:dd:3a:f4:
                    ac:d4:7a:4f:84:3b:6b:35:0d:f3:76:47:45:1e:ee:
                    e4:75:3d:5c:5d:7d:a6:33:9c:85:c3:fa:c2:3d:07:
                    f0:4c:c8:07:db:9e:37:e3:4e:94:03:50:b3:9d:53:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9B:F6:D9:93:8E:CF:B3:4B:B7:23:3A:33:23:1D:29:D4:1A:C1:7C
            X509v3 Authority Key Identifier:
                keyid:ED:A8:27:CC:7A:82:AE:78:51:CA:F2:9A:87:1B:51:44:E4:6B:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA827CC7A82AE7851CAF29A871B5144E46B1A66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A189BFC92C27DF08C9394FBAF72B04862C5B98380994EDC414B936CCF736BF7B/0/34352e3136392e3134312e302f32342d3234203d3e20323637383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:23:66:5d:0a:0d:20:86:95:3b:ee:23:88:0c:9a:0d:60:1c:
         b7:fc:c2:e7:7a:0e:e9:ac:80:7f:f2:23:d7:d0:28:e2:7a:0a:
         bc:de:27:3a:47:de:83:d1:84:b1:92:b4:23:24:aa:67:ca:58:
         2f:b7:9d:84:6f:c9:b5:92:3a:c1:2f:75:86:88:c5:fa:94:85:
         95:ca:b8:b7:b9:20:d6:57:b0:2d:33:63:a7:ea:f8:cc:f1:d9:
         08:f1:2a:a2:8b:f2:43:73:75:d8:04:58:93:34:2f:0b:90:c1:
         7e:b4:18:f7:61:ec:48:ba:c4:b8:37:f8:96:96:38:2f:34:ee:
         ae:b0:b4:dc:56:f1:af:4f:89:6b:a2:b9:08:e2:98:0c:34:42:
         4f:55:31:14:0d:eb:2d:51:86:fc:44:80:5f:eb:b0:57:a6:3c:
         c8:d5:2a:7d:9d:3a:ee:8c:ea:a7:0a:3e:a0:23:f9:b8:f7:3e:
         00:0c:fe:c4:a9:34:41:cb:b1:0f:fe:6a:59:86:ab:ba:1c:48:
         f1:21:45:56:e4:94:b4:a0:5e:22:22:4d:ed:a3:4b:17:25:25:
         af:27:b3:49:1a:d8:fc:20:6f:55:83:db:3f:a6:a1:6d:c6:e1:
         c8:cb:01:aa:37:90:46:81:fc:0f:19:70:f9:b4:66:86:f7:f4:
         22:d7:86:6b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVmql28fMPv1IU1+vXiI4Z4nMgqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURBODI3Q0M3QTgyQUU3ODUxQ0FGMjlBODcxQjUxNDRF
NDZCMUE2NjAeFw0yNTAyMDQxODI4MjZaFw0yNjAyMDMxODMzMjZaMDMxMTAvBgNV
BAMTKDdBOUJGNkQ5OTM4RUNGQjM0QkI3MjMzQTMzMjMxRDI5RDQxQUMxN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWYy8TQ4Pa7lMMpFr2iiPwX50
R09tvlaFJ3rqxIKEuQmNLOQ4I928EHj5I5OiZPq4078qZoeD2GAnVgk0qcWHnSJ4
TLySW8PeIr9SRQs4oZkrulIMIHJM70Fq/ru2x+IvE4uN2Lh3g6a4p0DqtQ8oMXTu
ZalZiqUG+0Y+Xnt+fsWBTM+WsUD/El209AmSzKqaWokUAZt7DP/m/wq2H4AtQv0m
LMzEMIbntIdWBWuri752Vla59rVcZBtadpy6hTKZTg36n2XAD3/ha7j0nt069KzU
ek+EO2s1DfN2R0Ue7uR1PVxdfaYznIXD+sI9B/BMyAfbnjfjTpQDULOdUwSPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUepv22ZOOz7NLtyM6MyMdKdQawXwwHwYDVR0j
BBgwFoAU7agnzHqCrnhRyvKahxtRRORrGmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTg5QkZDOTJDMjdERjA4QzkzOTRGQkFGNzJCMDQ4NjJD
NUI5ODM4MDk5NEVEQzQxNEI5MzZDQ0Y3MzZCRjdCLzAvRURBODI3Q0M3QTgyQUU3
ODUxQ0FGMjlBODcxQjUxNDRFNDZCMUE2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FREE4MjdDQzdBODJBRTc4NTFD
QUYyOUE4NzFCNTE0NEU0NkIxQTY2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE4OUJGQzkyQzI3REYwOEM5Mzk0RkJBRjcyQjA0ODYyQzVCOTgzODA5
OTRFREM0MTRCOTM2Q0NGNzM2QkY3Qi8wLzM0MzUyZTMxMzYzOTJlMzEzNDMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALamN
MA0GCSqGSIb3DQEBCwUAA4IBAQCYI2ZdCg0ghpU77iOIDJoNYBy3/MLneg7prIB/
8iPX0Cjiegq83ic6R96D0YSxkrQjJKpnylgvt52Eb8m1kjrBL3WGiMX6lIWVyri3
uSDWV7AtM2On6vjM8dkI8Sqii/JDc3XYBFiTNC8LkMF+tBj3YexIusS4N/iWljgv
NO6usLTcVvGvT4lrorkI4pgMNEJPVTEUDestUYb8RIBf67BXpjzI1Sp9nTrujOqn
Cj6gI/m49z4ADP7EqTRBy7EP/mpZhqu6HEjxIUVW5JS0oF4iIk3to0sXJSWvJ7NJ
Gtj8IG9Vg9s/pqFtxuHIywGqN5BGgfwPGXD5tGaG9/Qi14Zr
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:12 2025 by rpki-client