Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33342e302f32342d3234203d3e20323636383435.roa
File:                     34352e3233392e33342e302f32342d3234203d3e20323636383435.roa (raw, json)
Hash identifier:          r+HwoxvsevuX8z+auLeUJpGk3kiXj/VPgxG5GNmc22o=
Subject key identifier:   A5:8C:50:B8:BE:A6:81:FB:8B:85:C9:92:35:65:0C:AE:B7:CA:BF:4E
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       785C8AD7068994289A41345E06E8721342866E23
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33342e302f32342d3234203d3e20323636383435.roa
Signing time:             Tue 04 Feb 2025 18:18:26 +0000
ROA not before:           Tue 04 Feb 2025 18:13:26 +0000
ROA not after:            Tue 03 Feb 2026 18:18:26 +0000
asID:                     266845
IP address blocks:        45.239.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5c:8a:d7:06:89:94:28:9a:41:34:5e:06:e8:72:13:42:86:6e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Feb  4 18:13:26 2025 GMT
            Not After : Feb  3 18:18:26 2026 GMT
        Subject: CN=A58C50B8BEA681FB8B85C99235650CAEB7CABF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:31:68:91:5e:14:a3:ae:84:17:fa:c1:2d:
                    d8:2d:23:77:3b:84:b2:fd:6c:58:e2:02:93:9f:89:
                    bf:13:b4:81:dd:9f:c2:a3:21:93:d6:bc:19:2d:f9:
                    3f:72:80:cd:57:bb:d8:c1:00:54:d5:5c:3e:9a:f4:
                    e6:8d:20:80:bd:70:6a:a4:47:cb:d6:74:22:46:19:
                    51:77:0f:12:41:93:f7:b0:f0:82:ab:a7:96:ba:47:
                    24:e8:f5:97:2c:87:cb:07:18:71:9d:ae:ea:da:0b:
                    d1:01:64:7f:a9:29:4b:6b:44:bd:5c:ea:c7:a5:16:
                    bc:ee:b5:9d:d7:92:5f:91:2e:50:87:26:e5:3e:2a:
                    d8:ff:af:7b:4d:85:7a:2b:56:b3:ad:3a:a8:05:60:
                    eb:8c:d5:c5:be:ac:53:54:ac:22:59:e2:11:89:0b:
                    15:4e:f3:5b:42:10:15:7b:75:ae:b8:df:21:b8:fc:
                    45:5e:29:20:76:6b:2e:ae:41:4a:05:66:be:51:32:
                    20:df:a6:ba:31:d2:3a:dc:49:5b:d8:25:33:b3:2a:
                    84:20:62:c5:67:18:47:9f:54:b0:c1:18:60:35:1c:
                    86:45:58:41:12:63:34:fd:fe:af:f3:bc:74:07:8b:
                    e3:6e:34:94:0e:cf:65:56:af:0c:98:27:33:c6:53:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8C:50:B8:BE:A6:81:FB:8B:85:C9:92:35:65:0C:AE:B7:CA:BF:4E
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33342e302f32342d3234203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:08:68:f1:1f:22:c0:4d:ee:db:5c:54:27:cf:ea:ea:8f:11:
         09:a7:45:26:11:c5:1d:56:2e:be:aa:f0:d8:ea:fc:ea:59:70:
         ee:2e:16:87:67:42:e2:80:bd:32:a0:40:3a:c8:f2:37:3a:d1:
         fc:2d:9b:c5:e4:8d:1f:fc:df:9a:6c:28:e5:2d:ea:3a:76:3b:
         30:2f:7f:62:bc:59:3c:93:b9:c5:89:76:ce:dc:02:69:41:85:
         44:d9:2e:c2:95:b8:10:c9:9c:eb:ef:06:63:c6:31:98:bd:e9:
         7b:67:11:7a:a9:d6:fc:e2:74:4f:b5:c9:dd:0b:fa:be:6f:a3:
         eb:c6:86:d9:42:b5:d6:38:40:c6:7f:71:e2:0c:5c:ba:f0:f8:
         f6:a2:32:00:19:30:29:ba:cb:69:b3:3a:a1:79:26:b0:1f:b6:
         31:b2:82:00:97:03:2e:bb:e9:e7:ee:fd:07:c4:ce:67:dc:2e:
         39:02:42:75:8c:39:43:d0:1b:f0:ad:20:13:c7:34:61:19:a3:
         02:8b:16:42:cc:90:64:92:be:e9:98:15:f7:29:c1:e5:bc:8d:
         d4:63:46:a8:03:f2:ae:51:fe:2b:21:df:a8:61:61:47:f4:42:
         30:f3:96:ce:9f:55:2c:3c:30:7a:21:8b:f8:bc:7d:b3:23:49:
         f4:6c:d6:0b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUeFyK1waJlCiaQTReBuhyE0KGbiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0N0EyQ0U3MTM2NTE0MEE3QUNCRTcyNTJCQjA5MTZD
MDU0QkUxNjAeFw0yNTAyMDQxODEzMjZaFw0yNjAyMDMxODE4MjZaMDMxMTAvBgNV
BAMTKEE1OEM1MEI4QkVBNjgxRkI4Qjg1Qzk5MjM1NjUwQ0FFQjdDQUJGNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChnzFokV4Uo66EF/rBLdgtI3c7
hLL9bFjiApOfib8TtIHdn8KjIZPWvBkt+T9ygM1Xu9jBAFTVXD6a9OaNIIC9cGqk
R8vWdCJGGVF3DxJBk/ew8IKrp5a6RyTo9Zcsh8sHGHGdruraC9EBZH+pKUtrRL1c
6selFrzutZ3Xkl+RLlCHJuU+Ktj/r3tNhXorVrOtOqgFYOuM1cW+rFNUrCJZ4hGJ
CxVO81tCEBV7da643yG4/EVeKSB2ay6uQUoFZr5RMiDfprox0jrcSVvYJTOzKoQg
YsVnGEefVLDBGGA1HIZFWEESYzT9/q/zvHQHi+NuNJQOz2VWrwyYJzPGU3zlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUpYxQuL6mgfuLhcmSNWUMrrfKv04wHwYDVR0j
BBgwFoAUnEeiznE2UUCnrL5yUrsJFsBUvhYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzQzU5RTIzNkMzMjlBQzM4OUEwNjA2OUJBQUE2MTFE
ODlBNkI5NzczQURCOUZDQjU4MzQ4QTczRjlGOEIzLzAvOUM0N0EyQ0U3MTM2NTE0
MEE3QUNCRTcyNTJCQjA5MTZDMDU0QkUxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzQ3QTJDRTcxMzY1MTQwQTdB
Q0JFNzI1MkJCMDkxNkMwNTRCRTE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0M1OUUyMzZDMzI5QUMzODlBMDYwNjlCQUFBNjExRDg5QTZCOTc3
M0FEQjlGQ0I1ODM0OEE3M0Y5RjhCMy8wLzM0MzUyZTMyMzMzOTJlMzMzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vIjAN
BgkqhkiG9w0BAQsFAAOCAQEAYgho8R8iwE3u21xUJ8/q6o8RCadFJhHFHVYuvqrw
2Or86llw7i4Wh2dC4oC9MqBAOsjyNzrR/C2bxeSNH/zfmmwo5S3qOnY7MC9/YrxZ
PJO5xYl2ztwCaUGFRNkuwpW4EMmc6+8GY8YxmL3pe2cReqnW/OJ0T7XJ3Qv6vm+j
68aG2UK11jhAxn9x4gxcuvD49qIyABkwKbrLabM6oXkmsB+2MbKCAJcDLrvp5+79
B8TOZ9wuOQJCdYw5Q9Ab8K0gE8c0YRmjAosWQsyQZJK+6ZgV9ynB5byN1GNGqAPy
rlH+KyHfqGFhR/RCMPOWzp9VLDwweiGL+Lx9syNJ9GzWCw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:57 2025 by rpki-client