Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa
File:                     34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa (raw, json)
Hash identifier:          XwIIrJjE0LxVy4lRZyKlP6xy4wvAdkIRwAH9QZTNONw=
Subject key identifier:   B9:93:C3:91:88:43:A2:64:D4:3F:C3:6B:C7:9A:F7:3A:07:A1:A7:D1
Certificate issuer:       /CN=D2C96715842E19445AE9268C979CE3C8F576D88D
Certificate serial:       4279FC4CF8A0086A6DFC37FC633F8329ED41DD44
Authority key identifier: D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa
Signing time:             Tue 04 Feb 2025 18:20:55 +0000
ROA not before:           Tue 04 Feb 2025 18:15:55 +0000
ROA not after:            Tue 03 Feb 2026 18:20:55 +0000
asID:                     267878
IP address blocks:        45.175.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:79:fc:4c:f8:a0:08:6a:6d:fc:37:fc:63:3f:83:29:ed:41:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2C96715842E19445AE9268C979CE3C8F576D88D
        Validity
            Not Before: Feb  4 18:15:55 2025 GMT
            Not After : Feb  3 18:20:55 2026 GMT
        Subject: CN=B993C3918843A264D43FC36BC79AF73A07A1A7D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:de:5e:de:25:9b:4d:00:4d:0a:ed:a5:34:
                    d1:84:99:24:36:1a:eb:3b:33:d5:6f:6b:98:7b:f5:
                    e3:6a:d5:35:45:fb:f9:ee:0e:aa:13:04:f1:4a:f0:
                    0f:0d:fd:d6:4b:3c:28:2f:75:fc:73:91:bc:b0:b4:
                    59:d3:13:f9:f1:aa:96:eb:70:bc:db:8c:d8:51:9d:
                    da:fb:d4:81:13:23:55:5d:78:28:89:9f:58:4b:6e:
                    02:45:b9:66:23:19:fd:79:ad:e7:71:ac:ae:dd:94:
                    bf:90:ec:7c:03:3b:a8:58:d5:cb:f2:9b:00:f7:e3:
                    79:fe:e7:d7:e6:87:d9:75:2e:5c:49:0b:55:5c:27:
                    f2:9b:b4:57:93:97:8c:28:87:d8:1f:12:6a:d3:f6:
                    d1:58:f1:76:f8:bd:86:59:e7:dc:c6:1f:d8:ed:e4:
                    51:10:d4:0c:b8:d1:f2:a6:0e:6a:57:f0:28:c0:ff:
                    a6:4b:8d:a5:15:42:f0:4f:59:24:5d:ea:84:3d:2b:
                    55:a4:0d:22:fb:3c:0f:3c:13:45:ab:4f:34:51:c7:
                    48:f8:66:15:94:8e:6b:15:ce:c9:5f:18:23:f4:80:
                    5f:15:85:54:76:f3:f5:d1:90:ec:39:f6:d6:3b:60:
                    59:e3:00:e0:0d:12:b4:c3:79:be:33:cf:ca:18:12:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:C3:91:88:43:A2:64:D4:3F:C3:6B:C7:9A:F7:3A:07:A1:A7:D1
            X509v3 Authority Key Identifier:
                keyid:D2:C9:67:15:84:2E:19:44:5A:E9:26:8C:97:9C:E3:C8:F5:76:D8:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/D2C96715842E19445AE9268C979CE3C8F576D88D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2C96715842E19445AE9268C979CE3C8F576D88D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77BA83CFED9B67B91C210D26B785E10F4AC034C1DA3919B5CA5D1FD1C407879/0/34352e3137352e3135312e302f32342d3234203d3e20323637383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:0a:e3:4d:b4:ac:51:df:37:73:cd:01:6f:5c:7f:e8:18:
         e2:7d:59:8c:a8:9d:68:0c:48:63:a7:51:17:c5:28:b2:f1:f0:
         24:a5:3d:66:97:88:e1:e9:b7:07:26:e6:63:f5:5f:cc:9b:c8:
         7b:a3:16:3a:aa:35:73:37:1d:21:89:27:24:a6:dd:87:2d:47:
         3f:6c:0c:ea:b4:e2:d1:30:dd:d8:b4:90:1f:43:24:9d:37:cb:
         de:c5:7e:8b:95:ad:c8:00:cb:4b:6d:ef:f5:d6:6a:a4:16:c4:
         fd:be:fd:2d:c2:67:c2:22:d3:3b:41:9f:89:6b:c2:82:d7:8f:
         4a:a0:fe:ca:21:b0:31:b9:08:e4:73:c6:ba:a9:0c:35:3c:14:
         10:ad:10:be:f9:14:20:9a:9d:f6:23:fd:66:b9:97:01:b4:65:
         97:70:3d:2c:a7:3d:69:af:4d:68:96:4b:ad:f8:f6:31:17:16:
         0c:bf:53:90:a4:b4:7a:b2:21:b5:b7:b9:f3:8f:ae:91:5a:23:
         04:c6:34:bc:d0:9a:77:64:bb:51:eb:89:01:96:43:21:32:4a:
         d3:a2:45:5a:3c:35:d2:22:c7:c8:10:9e:86:6d:cd:1b:7d:2a:
         41:24:50:12:12:2e:b6:11:80:c2:b0:64:27:ae:99:fa:f8:8a:
         eb:b4:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:05:00 2025 by rpki-client