Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31372e302f32342d3234203d3e20323635383639.roa
File:                     34352e3232372e31372e302f32342d3234203d3e20323635383639.roa (raw, json)
Hash identifier:          ZjaaIFFtmxe37SsNJAYoHeqvedqDWEsCpZ+UMrUqxMk=
Subject key identifier:   40:CB:D9:24:14:7A:6F:6E:7A:73:CE:19:3B:E0:A9:EE:DC:FA:B5:EA
Certificate issuer:       /CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
Certificate serial:       29AE44AF0AAD4E1A1B455614E7EE8636771263FC
Authority key identifier: E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31372e302f32342d3234203d3e20323635383639.roa
Signing time:             Tue 04 Feb 2025 18:29:10 +0000
ROA not before:           Tue 04 Feb 2025 18:24:10 +0000
ROA not after:            Tue 03 Feb 2026 18:29:10 +0000
asID:                     265869
IP address blocks:        45.227.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ae:44:af:0a:ad:4e:1a:1b:45:56:14:e7:ee:86:36:77:12:63:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2
        Validity
            Not Before: Feb  4 18:24:10 2025 GMT
            Not After : Feb  3 18:29:10 2026 GMT
        Subject: CN=40CBD924147A6F6E7A73CE193BE0A9EEDCFAB5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:ea:a1:3e:55:c6:43:08:eb:be:14:da:1c:
                    d4:d7:61:dd:d0:9c:3e:dc:f7:41:52:8b:8f:cd:b2:
                    e3:39:32:03:c4:f1:32:cf:6b:2b:f2:48:9e:35:e4:
                    6a:e1:19:8a:0f:11:75:b8:f1:fe:36:c7:37:c1:fc:
                    18:ab:d8:2b:a5:c4:4f:7e:95:b8:2e:c1:2f:6a:d8:
                    54:dc:c6:13:92:75:b5:49:95:a5:71:a5:1a:fd:6a:
                    f6:06:1e:99:5c:68:1b:61:2d:2e:7d:f4:46:44:94:
                    02:92:92:b2:92:ee:46:e5:46:87:dc:e6:a5:60:f0:
                    a5:b9:24:74:e7:9f:9b:b5:d6:a9:23:7a:bd:2b:01:
                    06:f9:36:e0:d7:72:75:9f:3f:81:ef:d0:f8:63:4b:
                    9f:18:a7:c0:83:ef:6f:8a:f6:41:ca:b6:ab:1a:69:
                    e8:ea:87:a7:3d:2f:c4:0f:32:c5:ed:b2:4a:91:19:
                    d1:dc:67:a9:91:94:78:7a:e3:45:9b:d4:5b:4e:2a:
                    a1:b5:3b:19:99:22:8b:6e:22:51:7e:ea:78:5a:4c:
                    86:fd:19:2c:87:ad:d4:b0:51:40:49:7f:eb:b5:5a:
                    0d:f3:15:6b:40:83:cb:92:1e:18:66:28:fe:d0:b8:
                    b9:4c:70:64:a5:e1:27:21:ad:6b:4c:f9:fb:1d:7e:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CB:D9:24:14:7A:6F:6E:7A:73:CE:19:3B:E0:A9:EE:DC:FA:B5:EA
            X509v3 Authority Key Identifier:
                keyid:E7:6D:7E:4B:B5:C0:67:85:FC:4F:DE:5D:20:63:A4:21:FC:05:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E76D7E4BB5C06785FC4FDE5D2063A421FC0510E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB7A727AC4A6390C65E37075660F5A3588A3D153E048BA4E081F336E71DC1416/0/34352e3232372e31372e302f32342d3234203d3e20323635383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:4a:f0:be:9f:0f:c7:30:bf:f1:5b:3d:d9:e0:aa:8c:1d:
         19:b0:c3:fb:9f:7e:a4:1c:59:22:4e:28:fc:ca:07:e4:0d:9c:
         cc:73:1f:20:d7:d4:9a:6b:57:4a:18:2a:ab:00:1e:36:5d:7f:
         af:e2:af:63:96:fb:9d:83:a2:f8:39:bd:16:9a:8d:2a:6e:43:
         e8:0b:19:24:3c:6b:d1:6f:70:ed:6b:7f:d4:7c:3d:2a:d6:5a:
         6a:db:c6:4d:e5:d9:d0:dc:82:4c:56:a4:06:fd:7b:15:8d:69:
         d7:79:3d:6a:20:00:83:97:45:c8:73:2a:db:02:64:0e:da:eb:
         e7:82:bd:96:9b:5d:3c:8a:38:51:c7:90:26:64:b7:34:a7:e0:
         84:22:7c:47:ff:25:d3:83:b2:36:22:33:bb:14:0c:96:e7:d9:
         0e:da:af:35:c2:96:a7:a0:ee:c2:be:51:9d:4c:54:af:a7:dd:
         79:dd:a8:61:28:c5:b6:5f:ec:58:db:60:73:aa:d1:bf:2f:a4:
         4b:be:7b:1c:a3:8c:7a:65:68:2c:d3:65:75:e6:49:d4:67:41:
         04:0d:83:41:8b:c9:b3:c2:08:62:d5:3e:95:d9:89:7e:e4:52:
         be:43:58:44:2f:10:cd:a6:62:d7:47:aa:0a:a8:80:16:76:2c:
         53:42:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:18 2025 by rpki-client