Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa
File:                     34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa (raw, json)
Hash identifier:          ms1ysop4wXA/J0MMq77LD0YOmKhVyjwyQ28vVu2T+ok=
Subject key identifier:   91:C9:73:07:8C:36:E5:6C:E1:CB:E5:22:35:91:71:D0:12:8C:38:17
Certificate issuer:       /CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
Certificate serial:       766762D91062985AF1ED247F7B927A54D5504CDE
Authority key identifier: 6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa
Signing time:             Tue 04 Feb 2025 18:07:36 +0000
ROA not before:           Tue 04 Feb 2025 18:02:36 +0000
ROA not after:            Tue 03 Feb 2026 18:07:36 +0000
asID:                     269804
IP address blocks:        45.167.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:67:62:d9:10:62:98:5a:f1:ed:24:7f:7b:92:7a:54:d5:50:4c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CFC0CD36DE83898AFE4634C103FE1CF06563CF4
        Validity
            Not Before: Feb  4 18:02:36 2025 GMT
            Not After : Feb  3 18:07:36 2026 GMT
        Subject: CN=91C973078C36E56CE1CBE522359171D0128C3817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:56:2a:bb:30:ed:2c:7c:b5:5a:04:10:e6:
                    91:d5:c4:b4:20:42:31:51:10:3c:fe:71:4a:6f:96:
                    84:aa:b5:24:d9:ce:ca:d9:cd:a1:15:5d:4b:21:9e:
                    43:9f:ed:ae:88:a2:d8:81:3d:8f:7d:ca:01:d1:48:
                    ab:31:e6:5f:5e:ed:0d:7d:e0:d7:61:9d:e5:18:eb:
                    af:52:a1:08:8a:56:fb:61:2d:40:e4:70:22:ae:f2:
                    eb:0d:b8:6c:79:21:54:f7:34:7c:2d:3a:26:f5:84:
                    e8:24:d9:e0:66:0a:95:99:8e:2a:18:cf:8b:77:84:
                    dd:d2:be:2a:95:cc:be:ac:b7:82:71:eb:e4:2c:c0:
                    ef:4c:96:c9:63:eb:6f:c2:85:d9:2b:3f:33:14:41:
                    b6:ca:c8:0c:ff:24:cb:89:4a:4c:8f:06:69:c9:64:
                    53:0f:39:da:00:70:05:ae:b2:c3:0c:50:6a:f2:d7:
                    b5:07:cb:9d:7d:24:51:c2:a1:4c:e9:87:84:d1:9f:
                    41:26:74:48:46:22:dc:2f:1b:7e:c3:7b:08:7a:f9:
                    4b:3d:22:2b:a2:6d:e8:a5:6b:d8:20:25:7f:44:1a:
                    14:0e:ad:09:4a:17:dd:7e:93:4b:0f:c2:6e:ab:92:
                    ec:a1:ca:d6:5c:26:c9:79:4d:4b:a1:eb:3c:b5:46:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:73:07:8C:36:E5:6C:E1:CB:E5:22:35:91:71:D0:12:8C:38:17
            X509v3 Authority Key Identifier:
                keyid:6C:FC:0C:D3:6D:E8:38:98:AF:E4:63:4C:10:3F:E1:CF:06:56:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CFC0CD36DE83898AFE4634C103FE1CF06563CF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3E92E6AD40AA0C9FEAB99AC81E2F2FE4F89BCFF80B8AE8F38912B295F0E9914/0/34352e3136372e3132362e302f32342d3234203d3e20323639383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:e9:50:80:58:18:e5:3b:98:ca:f5:e6:7d:50:25:25:58:
         ed:36:ab:c0:5a:2a:b5:99:de:70:96:0b:3e:2a:9f:83:a6:05:
         07:83:94:15:5a:5d:c5:d8:d7:ba:1f:01:dc:cc:d1:88:26:3d:
         d6:ac:3b:47:c0:0a:b5:5c:19:81:5a:26:2c:c8:f9:9d:53:fe:
         e1:1b:9c:a0:a8:6a:aa:65:a5:be:b6:be:69:d5:4f:2c:e8:d4:
         b4:b6:d0:9f:30:78:38:e6:be:bd:ce:83:8d:6b:36:04:00:fe:
         5e:c1:1b:44:bb:86:5e:cc:89:ef:4a:7f:f4:3b:97:a9:e1:a6:
         cb:dc:87:42:71:d1:aa:b4:8f:e4:51:3f:33:f7:93:9b:6d:07:
         1b:f0:88:dd:a2:9a:37:7c:2b:12:b3:8f:ec:ae:61:38:61:90:
         dc:3e:ff:65:ca:92:e4:36:7c:52:ec:db:c9:76:c9:59:04:fc:
         2c:d5:c4:5c:93:25:59:7d:1a:29:07:53:18:bd:ff:84:0b:06:
         75:05:d7:03:38:3a:11:31:f2:63:a5:0c:2d:ce:dc:da:e7:6b:
         54:cc:ed:16:58:ea:bd:90:7c:16:1d:eb:8f:d8:57:07:d1:fd:
         97:7c:e1:8d:5d:89:44:5f:86:2e:cd:5c:16:42:9e:6c:fc:5d:
         30:b3:b2:2d
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdmdi2RBimFrx7SR/e5J6VNVQTN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkNGQzBDRDM2REU4Mzg5OEFGRTQ2MzRDMTAzRkUxQ0Yw
NjU2M0NGNDAeFw0yNTAyMDQxODAyMzZaFw0yNjAyMDMxODA3MzZaMDMxMTAvBgNV
BAMTKDkxQzk3MzA3OEMzNkU1NkNFMUNCRTUyMjM1OTE3MUQwMTI4QzM4MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDELlYquzDtLHy1WgQQ5pHVxLQg
QjFREDz+cUpvloSqtSTZzsrZzaEVXUshnkOf7a6IotiBPY99ygHRSKsx5l9e7Q19
4NdhneUY669SoQiKVvthLUDkcCKu8usNuGx5IVT3NHwtOib1hOgk2eBmCpWZjioY
z4t3hN3SviqVzL6st4Jx6+QswO9Mlslj62/ChdkrPzMUQbbKyAz/JMuJSkyPBmnJ
ZFMPOdoAcAWussMMUGry17UHy519JFHCoUzph4TRn0EmdEhGItwvG37Dewh6+Us9
Iiuibeila9ggJX9EGhQOrQlKF91+k0sPwm6rkuyhytZcJsl5TUuh6zy1RgJLAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkclzB4w25Wzhy+UiNZFx0BKMOBcwHwYDVR0j
BBgwFoAUbPwM023oOJiv5GNMED/hzwZWPPQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0U5MkU2QUQ0MEFBMEM5RkVBQjk5QUM4MUUyRjJGRTRG
ODlCQ0ZGODBCOEFFOEYzODkxMkIyOTVGMEU5OTE0LzAvNkNGQzBDRDM2REU4Mzg5
OEFGRTQ2MzRDMTAzRkUxQ0YwNjU2M0NGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82Q0ZDMENEMzZERTgzODk4QUZF
NDYzNEMxMDNGRTFDRjA2NTYzQ0Y0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNFOTJFNkFENDBBQTBDOUZFQUI5OUFDODFFMkYyRkU0Rjg5QkNGRjgw
QjhBRThGMzg5MTJCMjk1RjBFOTkxNC8wLzM0MzUyZTMxMzYzNzJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzgzMDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALad+
MA0GCSqGSIb3DQEBCwUAA4IBAQCPVOlQgFgY5TuYyvXmfVAlJVjtNqvAWiq1md5w
lgs+Kp+DpgUHg5QVWl3F2Ne6HwHczNGIJj3WrDtHwAq1XBmBWiYsyPmdU/7hG5yg
qGqqZaW+tr5p1U8s6NS0ttCfMHg45r69zoONazYEAP5ewRtEu4ZezInvSn/0O5ep
4abL3IdCcdGqtI/kUT8z95ObbQcb8Ijdopo3fCsSs4/srmE4YZDcPv9lypLkNnxS
7NvJdslZBPws1cRckyVZfRopB1MYvf+ECwZ1BdcDODoRMfJjpQwtztza52tUzO0W
WOq9kHwWHeuP2FcH0f2XfOGNXYlEX4YuzVwWQp5s/F0ws7It
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:02:36 2025 by rpki-client