Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33352e302f32342d3234203d3e20323636383435.roa
File:                     34352e3233392e33352e302f32342d3234203d3e20323636383435.roa (raw, json)
Hash identifier:          aVEuJFIhsS3R1GtKzWWHxwzlDTtLC7C1gzSB7t1ASQw=
Subject key identifier:   BC:03:4B:B9:C7:48:A4:71:83:29:A2:12:D2:CD:12:0E:83:F1:CD:36
Certificate issuer:       /CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
Certificate serial:       58CB5579F1869CA999E50BFB13B95D5BC54E449A
Authority key identifier: 9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33352e302f32342d3234203d3e20323636383435.roa
Signing time:             Tue 04 Feb 2025 18:18:27 +0000
ROA not before:           Tue 04 Feb 2025 18:13:27 +0000
ROA not after:            Tue 03 Feb 2026 18:18:27 +0000
asID:                     266845
IP address blocks:        45.239.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cb:55:79:f1:86:9c:a9:99:e5:0b:fb:13:b9:5d:5b:c5:4e:44:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C47A2CE71365140A7ACBE7252BB0916C054BE16
        Validity
            Not Before: Feb  4 18:13:27 2025 GMT
            Not After : Feb  3 18:18:27 2026 GMT
        Subject: CN=BC034BB9C748A4718329A212D2CD120E83F1CD36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ab:26:e0:5d:02:c0:a2:40:21:5a:34:8c:8f:
                    59:d2:fd:69:78:a8:47:3f:ab:3e:f9:63:b0:b3:9f:
                    77:e9:2e:64:de:ff:ea:d4:4c:a7:9d:7b:2c:9c:6e:
                    66:11:5e:32:03:78:a7:03:d8:a8:09:37:b1:82:59:
                    f0:67:5f:98:77:60:49:6d:87:2f:83:05:62:69:91:
                    77:11:0a:f2:2a:1c:bb:58:1e:2d:1d:49:15:89:19:
                    af:5d:78:e5:f2:45:e1:91:b3:1f:a4:6a:e2:f2:9b:
                    f2:9b:54:05:d0:26:55:9f:dd:77:7f:ee:b3:96:83:
                    a7:d4:50:cf:4f:d4:ee:f9:9b:10:f0:5f:3e:e2:63:
                    15:2d:67:39:05:b6:a0:4e:3c:3e:3e:e7:24:2d:44:
                    19:c5:9e:e2:46:4c:e5:29:5b:f9:9d:f8:94:de:35:
                    ea:8b:63:fa:29:5f:ce:c7:9e:17:dd:70:1d:2f:16:
                    85:83:b6:1b:04:2a:da:40:3e:fa:7b:c9:5b:90:81:
                    31:00:9e:e8:fc:2f:6e:a4:c5:30:cd:29:a3:c3:68:
                    98:56:97:6e:d7:13:d4:fa:cf:44:70:d8:99:bb:fa:
                    87:47:7c:47:b7:11:c8:ca:ad:85:13:aa:a0:64:82:
                    54:1b:0e:8a:74:f5:bf:d7:47:23:44:2a:03:6d:99:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:03:4B:B9:C7:48:A4:71:83:29:A2:12:D2:CD:12:0E:83:F1:CD:36
            X509v3 Authority Key Identifier:
                keyid:9C:47:A2:CE:71:36:51:40:A7:AC:BE:72:52:BB:09:16:C0:54:BE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9C47A2CE71365140A7ACBE7252BB0916C054BE16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3B3C59E236C329AC389A06069BAAA611D89A6B9773ADB9FCB58348A73F9F8B3/0/34352e3233392e33352e302f32342d3234203d3e20323636383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:40:f0:cf:da:53:53:2f:59:24:a0:14:a9:00:1f:67:fc:21:
         d9:5d:db:b0:b8:b5:71:48:52:1a:df:3d:84:d4:53:7d:b3:f1:
         6f:94:4f:46:9c:93:ee:15:83:ad:3c:3e:2e:0b:dd:ad:c8:a6:
         02:37:a5:d5:42:2b:86:5b:cb:ed:ac:0c:38:96:18:fb:ee:82:
         2d:6d:32:39:52:32:21:06:b5:75:b7:8e:18:1c:e7:21:ba:b8:
         08:bf:73:28:4d:34:3a:9c:26:e2:e0:c3:6a:56:60:b0:81:dd:
         57:0e:c4:58:67:ed:c2:b4:a6:0f:94:84:5b:47:c2:93:b8:88:
         61:74:f2:31:77:0e:40:06:dc:17:7e:ac:b1:a5:40:4b:a1:69:
         cd:fc:98:91:79:24:40:fa:7a:27:01:99:13:da:a9:ef:f1:48:
         e0:85:af:c9:d5:21:65:32:31:b3:09:04:46:a4:29:ef:46:e4:
         b2:d6:a8:50:c7:71:36:20:d9:94:c1:8b:64:8f:61:9c:42:bf:
         66:51:f2:1e:d0:85:b2:31:99:d4:42:17:5a:11:fe:ac:9f:c5:
         56:90:89:34:f0:38:1d:4c:fb:88:1f:18:51:20:c8:59:59:30:
         3b:2f:9c:31:b4:79:42:be:04:60:cf:0c:44:be:c9:b4:15:8e:
         66:91:0e:a0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWMtVefGGnKmZ5Qv7E7ldW8VORJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM0N0EyQ0U3MTM2NTE0MEE3QUNCRTcyNTJCQjA5MTZD
MDU0QkUxNjAeFw0yNTAyMDQxODEzMjdaFw0yNjAyMDMxODE4MjdaMDMxMTAvBgNV
BAMTKEJDMDM0QkI5Qzc0OEE0NzE4MzI5QTIxMkQyQ0QxMjBFODNGMUNEMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8qybgXQLAokAhWjSMj1nS/Wl4
qEc/qz75Y7Czn3fpLmTe/+rUTKedeyycbmYRXjIDeKcD2KgJN7GCWfBnX5h3YElt
hy+DBWJpkXcRCvIqHLtYHi0dSRWJGa9deOXyReGRsx+kauLym/KbVAXQJlWf3Xd/
7rOWg6fUUM9P1O75mxDwXz7iYxUtZzkFtqBOPD4+5yQtRBnFnuJGTOUpW/md+JTe
NeqLY/opX87HnhfdcB0vFoWDthsEKtpAPvp7yVuQgTEAnuj8L26kxTDNKaPDaJhW
l27XE9T6z0Rw2Jm7+odHfEe3EcjKrYUTqqBkglQbDop09b/XRyNEKgNtmf5LAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvANLucdIpHGDKaIS0s0SDoPxzTYwHwYDVR0j
BBgwFoAUnEeiznE2UUCnrL5yUrsJFsBUvhYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DM0IzQzU5RTIzNkMzMjlBQzM4OUEwNjA2OUJBQUE2MTFE
ODlBNkI5NzczQURCOUZDQjU4MzQ4QTczRjlGOEIzLzAvOUM0N0EyQ0U3MTM2NTE0
MEE3QUNCRTcyNTJCQjA5MTZDMDU0QkUxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QzQ3QTJDRTcxMzY1MTQwQTdB
Q0JFNzI1MkJCMDkxNkMwNTRCRTE2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzNCM0M1OUUyMzZDMzI5QUMzODlBMDYwNjlCQUFBNjExRDg5QTZCOTc3
M0FEQjlGQ0I1ODM0OEE3M0Y5RjhCMy8wLzM0MzUyZTMyMzMzOTJlMzMzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM4MzQzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3vIzAN
BgkqhkiG9w0BAQsFAAOCAQEAtkDwz9pTUy9ZJKAUqQAfZ/wh2V3bsLi1cUhSGt89
hNRTfbPxb5RPRpyT7hWDrTw+LgvdrcimAjel1UIrhlvL7awMOJYY++6CLW0yOVIy
IQa1dbeOGBznIbq4CL9zKE00Opwm4uDDalZgsIHdVw7EWGftwrSmD5SEW0fCk7iI
YXTyMXcOQAbcF36ssaVAS6FpzfyYkXkkQPp6JwGZE9qp7/FI4IWvydUhZTIxswkE
RqQp70bkstaoUMdxNiDZlMGLZI9hnEK/ZlHyHtCFsjGZ1EIXWhH+rJ/FVpCJNPA4
HUz7iB8YUSDIWVkwOy+cMbR5Qr4EYM8MRL7JtBWOZpEOoA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:16 2025 by rpki-client