Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa
File:                     34352e37302e3230322e302f32332d3234203d3e203532343638.roa (raw, json)
Hash identifier:          NhXC2XFptE5F7f1ErKcgpjLw0GNiSGZ9Eu25dOSIKD0=
Subject key identifier:   85:77:60:E2:59:2E:FE:4A:67:00:AE:6B:67:5C:40:5A:EE:2B:DB:C4
Certificate issuer:       /CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
Certificate serial:       157AEF7EE43E73996FF0E1C964081A9F369EB67E
Authority key identifier: 39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:43:04 +0000
ROA not before:           Tue 04 Feb 2025 18:38:04 +0000
ROA not after:            Tue 03 Feb 2026 18:43:04 +0000
asID:                     52468
IP address blocks:        45.70.202.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7a:ef:7e:e4:3e:73:99:6f:f0:e1:c9:64:08:1a:9f:36:9e:b6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3969A916AB2A182C19F90F28E002F43BBA68A0E4
        Validity
            Not Before: Feb  4 18:38:04 2025 GMT
            Not After : Feb  3 18:43:04 2026 GMT
        Subject: CN=857760E2592EFE4A6700AE6B675C405AEE2BDBC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:a4:56:b1:21:1b:e8:08:33:c3:da:dc:9b:
                    d9:f9:a5:b0:65:1b:f3:1e:67:ea:01:18:9f:f2:2e:
                    f1:23:13:98:21:45:b1:b3:0d:35:d6:0d:b3:a5:ea:
                    47:7b:30:e5:55:fa:fe:96:a2:b3:c1:43:a1:ec:93:
                    35:e4:3f:42:b3:74:bd:8a:a3:29:c0:35:b7:83:49:
                    18:c7:91:00:73:61:9e:00:19:10:a7:32:60:ad:6c:
                    89:e5:5a:c3:bb:8e:20:18:f3:40:b2:a5:c6:0a:22:
                    83:5a:47:be:c2:bc:54:ef:a6:6b:a9:8a:ba:95:e3:
                    7f:aa:ae:56:36:f0:55:67:db:f4:99:2a:cb:79:de:
                    2f:ef:ad:48:00:f3:14:58:ca:d4:50:6e:dc:c7:f7:
                    09:02:38:75:d5:f8:c9:8a:1d:a2:ec:02:b5:c6:7a:
                    f3:d9:9e:69:21:b2:ca:b2:39:0d:ee:ca:d3:72:3d:
                    3a:51:10:5e:f1:58:c5:ba:00:4e:c9:23:97:e3:2d:
                    d2:3f:f6:3d:ff:4a:a3:cd:1b:5d:f4:08:46:32:24:
                    12:6b:43:2e:d7:b9:c2:bd:38:c9:0a:28:6c:70:ca:
                    23:5b:ec:ee:26:81:2d:02:be:dc:1f:b2:f4:fa:27:
                    7e:3f:10:e4:0a:e5:35:74:12:d5:91:45:dd:40:a2:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:60:E2:59:2E:FE:4A:67:00:AE:6B:67:5C:40:5A:EE:2B:DB:C4
            X509v3 Authority Key Identifier:
                keyid:39:69:A9:16:AB:2A:18:2C:19:F9:0F:28:E0:02:F4:3B:BA:68:A0:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3969A916AB2A182C19F90F28E002F43BBA68A0E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB0C32254BADF118E3E8E1FC5E1D13916CA9F020D47B417DEF5FA9CEE16B8A7E/0/34352e37302e3230322e302f32332d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:33:c7:79:5c:73:32:ce:9e:77:98:43:27:b8:f4:25:7b:db:
         a3:51:5e:67:0a:a6:8e:85:cc:66:62:ca:00:63:45:84:eb:05:
         bb:73:13:7e:a4:c6:10:95:a8:8a:0f:47:ca:e5:d2:5e:95:99:
         23:7f:c3:55:f0:ae:3a:7a:c6:5c:bf:c1:3c:10:17:c0:62:fe:
         11:d6:ee:2e:3d:78:1b:91:4a:fb:58:f9:c5:40:11:2d:64:cd:
         0c:63:f3:48:36:4a:53:4a:02:ba:3a:f1:2e:41:7e:85:1c:8c:
         e5:58:c3:59:b6:e6:38:8b:8c:d5:6f:92:61:76:0b:4b:bc:ab:
         14:3a:40:63:2d:92:45:3a:51:b6:e5:92:64:6f:ac:37:a0:f7:
         e9:31:cd:d5:2c:a6:c8:3e:da:af:49:ea:9c:a4:a6:4b:06:bf:
         77:6d:e5:52:6a:2a:2f:db:6d:0f:f7:c0:bb:5e:07:8a:45:7a:
         c7:af:a4:1d:0b:3b:b7:87:fd:3a:23:39:04:05:82:8c:7c:83:
         e7:a3:81:70:20:b2:24:f1:5b:2d:82:b6:b8:8f:eb:29:7c:29:
         9f:ca:58:d8:25:c0:48:96:60:c8:20:9b:b6:50:62:b5:73:99:
         4b:35:6c:28:e5:b2:3d:5a:55:5c:15:c5:6f:65:00:d5:2a:93:
         df:ad:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:19 2025 by rpki-client