Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32332d3233203d3e20323636383435.roa
File:                     34352e3233392e33322e302f32332d3233203d3e20323636383435.roa (raw, json)
Hash identifier:          AD1e3sUPWGXk8TT1BCLPziCiiAXphD6Bw6o8x0C5WM8=
Subject key identifier:   25:50:AA:36:77:5A:D3:C0:15:1E:E5:7C:11:CC:CA:DD:08:15:CC:4B
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       3F374A5B27BBAE394F19C1BC6668CCCDE4D6FC91
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32332d3233203d3e20323636383435.roa
Signing time:             Tue 04 Feb 2025 18:18:27 +0000
ROA not before:           Tue 04 Feb 2025 18:13:27 +0000
ROA not after:            Tue 03 Feb 2026 18:18:27 +0000
asID:                     266845
IP address blocks:        45.239.32.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:37:4a:5b:27:bb:ae:39:4f:19:c1:bc:66:68:cc:cd:e4:d6:fc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Feb  4 18:13:27 2025 GMT
            Not After : Feb  3 18:18:27 2026 GMT
        Subject: CN=2550AA36775AD3C0151EE57C11CCCADD0815CC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:6f:af:4c:df:05:0f:fa:88:52:2a:b3:05:
                    3f:cb:cb:63:fd:cc:ff:fd:6b:36:2f:fc:ca:0b:b5:
                    39:e9:17:3f:3e:7c:bd:4a:a2:e6:04:91:f5:49:cf:
                    b8:5b:d3:85:39:b1:dc:e5:a0:22:bb:4f:5c:14:0a:
                    54:fb:e8:ad:5b:29:8b:e9:8b:12:f7:df:46:51:bc:
                    5c:8a:14:2e:f3:b9:74:fa:74:e5:77:25:4d:3f:6c:
                    5d:21:e2:cc:c4:af:c2:c9:a3:03:5b:b9:f3:fb:92:
                    b4:30:f2:48:cd:17:51:00:75:99:f2:d8:62:21:9e:
                    e0:ae:21:dc:09:a3:21:ee:7a:85:24:1d:f6:3b:e5:
                    f0:3b:25:ec:19:d3:b8:57:32:64:a4:db:06:a7:a4:
                    c4:54:1d:5b:77:47:6e:10:50:92:57:76:73:39:f5:
                    ee:dd:62:cd:e9:b7:27:13:11:52:da:cf:40:db:04:
                    45:e5:11:c1:2b:b3:13:be:16:af:06:29:0e:6d:6e:
                    e4:28:9f:2f:7c:be:ed:b5:7b:48:c7:62:d8:85:e2:
                    1f:5e:36:99:ed:57:1a:81:3d:8d:f9:1d:8d:a3:96:
                    3b:00:b6:28:58:08:3f:89:26:ba:f2:11:5e:2c:bc:
                    94:eb:00:85:e5:5f:11:83:29:bb:f7:66:13:02:2e:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:50:AA:36:77:5A:D3:C0:15:1E:E5:7C:11:CC:CA:DD:08:15:CC:4B
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33322e302f32332d3233203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:88:d4:a0:45:18:6d:87:b6:99:36:50:4e:a0:d6:17:de:f6:
         b1:d1:94:3f:d1:5a:27:0b:c3:9d:3c:6f:61:51:a3:c5:88:c2:
         29:b2:98:b3:7f:22:7e:80:fc:63:40:5e:2d:5b:e2:dd:ff:10:
         13:b0:ac:aa:94:88:47:eb:d8:8c:e3:29:65:79:11:06:a7:07:
         ff:aa:9d:93:6b:70:45:a4:f0:33:64:f2:1d:53:e2:9f:bc:0e:
         d8:0f:02:e5:f3:bf:44:bf:ca:f4:f9:d5:b2:1f:44:ac:2a:61:
         db:10:45:5f:05:c3:f6:81:37:3f:49:98:73:f3:16:da:0c:41:
         e8:93:13:27:09:39:eb:6a:31:72:04:a0:73:da:db:9b:0e:84:
         20:b6:f6:1b:8b:1f:70:6f:5d:b0:47:9f:01:bf:72:d9:ae:58:
         a7:ef:46:d9:46:81:65:82:b0:97:c3:47:80:10:25:f1:e2:1a:
         fe:d6:5f:ac:54:d3:4e:bc:82:b0:2c:9d:58:95:be:5d:96:23:
         7b:8c:15:10:96:39:36:de:fd:6b:cb:f7:a3:b7:c3:e1:2a:7f:
         ba:ed:9c:d6:11:4b:52:ea:17:e1:e1:8a:7b:0b:05:63:04:cb:
         d0:dc:90:6e:3d:5f:d9:7b:be:31:4a:a5:0a:da:64:4e:0c:35:
         bd:4a:85:56
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPzdKWye7rjlPGcG8ZmjMzeTW/JEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0N0EyQ0U3MTM2NTE0MEE3QUNCRTcyNTJCQjA5MTZD
MDU0QkUxNjAeFw0yNTAyMDQxODEzMjdaFw0yNjAyMDMxODE4MjdaMDMxMTAvBgNV
BAMTKDI1NTBBQTM2Nzc1QUQzQzAxNTFFRTU3QzExQ0NDQUREMDgxNUNDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYDG+vTN8FD/qIUiqzBT/Ly2P9
zP/9azYv/MoLtTnpFz8+fL1KouYEkfVJz7hb04U5sdzloCK7T1wUClT76K1bKYvp
ixL330ZRvFyKFC7zuXT6dOV3JU0/bF0h4szEr8LJowNbufP7krQw8kjNF1EAdZny
2GIhnuCuIdwJoyHueoUkHfY75fA7JewZ07hXMmSk2wanpMRUHVt3R24QUJJXdnM5
9e7dYs3ptycTEVLaz0DbBEXlEcErsxO+Fq8GKQ5tbuQony98vu21e0jHYtiF4h9e
NpntVxqBPY35HY2jljsAtihYCD+JJrryEV4svJTrAIXlXxGDKbv3ZhMCLqIhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJVCqNnda08AVHuV8EczK3QgVzEswHwYDVR0j
BBgwFoAUnEeiznE2UUCnrL5yUrsJFsBUvhYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzQzU5RTIzNkMzMjlBQzM4OUEwNjA2OUJBQUE2MTFE
ODlBNkI5NzczQURCOUZDQjU4MzQ4QTczRjlGOEIzLzAvOUM0N0EyQ0U3MTM2NTE0
MEE3QUNCRTcyNTJCQjA5MTZDMDU0QkUxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzQ3QTJDRTcxMzY1MTQwQTdB
Q0JFNzI1MkJCMDkxNkMwNTRCRTE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0M1OUUyMzZDMzI5QUMzODlBMDYwNjlCQUFBNjExRDg5QTZCOTc3
M0FEQjlGQ0I1ODM0OEE3M0Y5RjhCMy8wLzM0MzUyZTMyMzMzOTJlMzMzMjJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS3vIDAN
BgkqhkiG9w0BAQsFAAOCAQEAJYjUoEUYbYe2mTZQTqDWF972sdGUP9FaJwvDnTxv
YVGjxYjCKbKYs38ifoD8Y0BeLVvi3f8QE7CsqpSIR+vYjOMpZXkRBqcH/6qdk2tw
RaTwM2TyHVPin7wO2A8C5fO/RL/K9PnVsh9ErCph2xBFXwXD9oE3P0mYc/MW2gxB
6JMTJwk562oxcgSgc9rbmw6EILb2G4sfcG9dsEefAb9y2a5Yp+9G2UaBZYKwl8NH
gBAl8eIa/tZfrFTTTryCsCydWJW+XZYje4wVEJY5Nt79a8v3o7fD4Sp/uu2c1hFL
UuoX4eGKewsFYwTL0NyQbj1f2Xu+MUqlCtpkTgw1vUqFVg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:09 2025 by rpki-client