Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323633323434.roa
File:                     34352e3138322e3131322e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          YvRNf/MT4RWMlzyOENRO41MXucN1g7q25zyouraSOzc=
Subject key identifier:   CE:8F:DA:F3:F1:F4:2F:03:F1:F5:E3:B7:67:59:B3:87:72:A4:11:18
Certificate issuer:       /CN=C73F4086487CA38B0D5EEE670B20804A270AA478
Certificate serial:       4D0CE93C103E15B3D394B70CCB8FFDF74598FCF6
Authority key identifier: C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323633323434.roa
Signing time:             Tue 04 Feb 2025 18:02:15 +0000
ROA not before:           Tue 04 Feb 2025 17:57:15 +0000
ROA not after:            Tue 03 Feb 2026 18:02:15 +0000
asID:                     263244
IP address blocks:        45.182.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0c:e9:3c:10:3e:15:b3:d3:94:b7:0c:cb:8f:fd:f7:45:98:fc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73F4086487CA38B0D5EEE670B20804A270AA478
        Validity
            Not Before: Feb  4 17:57:15 2025 GMT
            Not After : Feb  3 18:02:15 2026 GMT
        Subject: CN=CE8FDAF3F1F42F03F1F5E3B76759B38772A41118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:b4:6f:c1:2b:7c:ae:a7:c9:7e:ab:fd:a1:
                    4d:31:49:0f:c2:42:62:51:a1:ba:70:5c:61:5d:0c:
                    e6:33:ad:f1:e2:56:04:5a:2f:1f:77:04:a6:b1:f2:
                    72:e5:3f:a3:76:0a:cd:29:0b:84:88:7e:28:d7:be:
                    29:a3:2c:12:e7:1d:06:73:8f:75:bb:fa:d9:7e:2f:
                    ac:e6:63:2c:bf:9c:7d:94:bf:15:c8:a9:51:c6:ab:
                    39:90:9f:4f:4d:18:49:1f:0f:c2:4e:0c:46:86:1a:
                    6f:e4:dd:a5:74:3b:1a:3e:45:ec:20:1b:d2:cc:3f:
                    74:8c:2d:44:97:7a:e7:d5:dc:73:22:72:65:2f:28:
                    08:c1:b7:21:5f:4b:da:02:93:ce:ca:c3:fe:94:e7:
                    79:31:24:38:c6:81:1f:18:e3:a3:c5:48:62:c9:d7:
                    30:d3:d6:1c:2e:73:a0:81:95:30:a1:85:88:ec:fe:
                    7e:54:38:fa:3d:7e:dc:01:be:ed:1e:eb:a3:e5:a3:
                    cf:52:08:aa:fb:28:fd:16:a2:e3:32:35:a1:ba:91:
                    ea:30:cd:54:aa:c6:de:1c:ec:2c:5b:d8:a7:d2:0c:
                    01:82:3e:61:8a:20:b6:93:09:9f:e6:c8:96:4b:81:
                    b8:98:24:8d:4e:b7:a7:ca:86:57:84:c0:da:d9:a6:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8F:DA:F3:F1:F4:2F:03:F1:F5:E3:B7:67:59:B3:87:72:A4:11:18
            X509v3 Authority Key Identifier:
                keyid:C7:3F:40:86:48:7C:A3:8B:0D:5E:EE:67:0B:20:80:4A:27:0A:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/C73F4086487CA38B0D5EEE670B20804A270AA478.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73F4086487CA38B0D5EEE670B20804A270AA478.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A760A3AB69A749E51AB2EFAF557A26794E4FFF699374C0DD69E2E3DB115A30B9/0/34352e3138322e3131322e302f32322d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:69:6b:58:83:38:c6:84:0c:16:00:bd:2e:51:fa:83:19:19:
         a1:6e:5b:25:64:03:fe:88:26:2e:52:e7:4c:87:eb:01:4e:66:
         35:1c:37:d3:3f:54:59:4b:a2:12:36:26:0e:6a:b1:4d:7b:b3:
         97:9d:46:eb:c5:1f:13:86:75:e2:a1:b5:5b:4c:0f:d2:34:81:
         47:b9:9c:6e:bb:9d:ef:42:4a:ac:da:9d:c8:04:fb:9c:06:28:
         23:db:a8:80:8e:06:d5:9c:1c:78:21:5f:fb:a1:75:f4:d5:dc:
         75:b9:5a:28:df:90:b8:b6:aa:26:38:a4:19:23:fc:6f:89:fb:
         dc:36:df:ee:1e:45:de:81:d8:4f:d3:dd:63:cb:b1:86:24:78:
         d1:b1:ef:74:26:e0:3a:a8:cb:46:5f:5d:c0:c2:d9:2a:85:02:
         19:4c:cf:6f:1c:7d:b2:7d:dc:b6:23:2b:3a:9c:c8:b4:df:15:
         6f:95:0f:4e:d3:fb:70:48:5a:d4:f3:c4:15:d1:7f:8c:65:8c:
         b1:24:db:a0:a4:43:cc:0c:4a:e1:bd:bb:80:01:92:64:41:fd:
         64:c5:25:f2:5b:67:0e:62:0f:86:4b:a1:e6:78:13:bd:60:43:
         19:cf:97:a5:fd:12:96:ce:b5:ba:31:9d:ec:93:f5:bc:7c:76:
         3d:7b:90:59
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTQzpPBA+FbPTlLcMy4/990WY/PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczRjQwODY0ODdDQTM4QjBENUVFRTY3MEIyMDgwNEEy
NzBBQTQ3ODAeFw0yNTAyMDQxNzU3MTVaFw0yNjAyMDMxODAyMTVaMDMxMTAvBgNV
BAMTKENFOEZEQUYzRjFGNDJGMDNGMUY1RTNCNzY3NTlCMzg3NzJBNDExMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqO7RvwSt8rqfJfqv9oU0xSQ/C
QmJRobpwXGFdDOYzrfHiVgRaLx93BKax8nLlP6N2Cs0pC4SIfijXvimjLBLnHQZz
j3W7+tl+L6zmYyy/nH2UvxXIqVHGqzmQn09NGEkfD8JODEaGGm/k3aV0Oxo+Rewg
G9LMP3SMLUSXeufV3HMicmUvKAjBtyFfS9oCk87Kw/6U53kxJDjGgR8Y46PFSGLJ
1zDT1hwuc6CBlTChhYjs/n5UOPo9ftwBvu0e66Plo89SCKr7KP0WouMyNaG6keow
zVSqxt4c7Cxb2KfSDAGCPmGKILaTCZ/myJZLgbiYJI1Ot6fKhleEwNrZpjqpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzo/a8/H0LwPx9eO3Z1mzh3KkERgwHwYDVR0j
BBgwFoAUxz9Ahkh8o4sNXu5nCyCASicKpHgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNzYwQTNBQjY5QTc0OUU1MUFCMkVGQUY1NTdBMjY3OTRF
NEZGRjY5OTM3NEMwREQ2OUUyRTNEQjExNUEzMEI5LzAvQzczRjQwODY0ODdDQTM4
QjBENUVFRTY3MEIyMDgwNEEyNzBBQTQ3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzNGNDA4NjQ4N0NBMzhCMEQ1
RUVFNjcwQjIwODA0QTI3MEFBNDc4LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTc2MEEzQUI2OUE3NDlFNTFBQjJFRkFGNTU3QTI2Nzk0RTRGRkY2OTkz
NzRDMERENjlFMkUzREIxMTVBMzBCOS8wLzM0MzUyZTMxMzgzMjJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzIzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbZw
MA0GCSqGSIb3DQEBCwUAA4IBAQBMaWtYgzjGhAwWAL0uUfqDGRmhblslZAP+iCYu
UudMh+sBTmY1HDfTP1RZS6ISNiYOarFNe7OXnUbrxR8ThnXiobVbTA/SNIFHuZxu
u53vQkqs2p3IBPucBigj26iAjgbVnBx4IV/7oXX01dx1uVoo35C4tqomOKQZI/xv
ifvcNt/uHkXegdhP091jy7GGJHjRse90JuA6qMtGX13AwtkqhQIZTM9vHH2yfdy2
Iys6nMi03xVvlQ9O0/twSFrU88QV0X+MZYyxJNugpEPMDErhvbuAAZJkQf1kxSXy
W2cOYg+GS6HmeBO9YEMZz5el/RKWzrW6MZ3sk/W8fHY9e5BZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:16 2025 by rpki-client