Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/34352e3233372e38342e302f32322d3232203d3e20323636383230.roa
File:                     34352e3233372e38342e302f32322d3232203d3e20323636383230.roa (raw, json)
Hash identifier:          AM/JAwiF3eKBupssvutIvxxvBjYOopU87mxdzEzv5lE=
Subject key identifier:   34:9F:8F:34:6B:44:98:32:F8:1A:81:4F:F6:FD:5D:0B:F1:B3:56:A7
Certificate issuer:       /CN=876619C7FD0F295D57635312903E44E56FCF51A3
Certificate serial:       5E8C47EBBC4180F0B5C95B2A6EE04180BB01BE4D
Authority key identifier: 87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/34352e3233372e38342e302f32322d3232203d3e20323636383230.roa
Signing time:             Tue 04 Feb 2025 18:56:07 +0000
ROA not before:           Tue 04 Feb 2025 18:51:07 +0000
ROA not after:            Tue 03 Feb 2026 18:56:07 +0000
asID:                     266820
IP address blocks:        45.237.84.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8c:47:eb:bc:41:80:f0:b5:c9:5b:2a:6e:e0:41:80:bb:01:be:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876619C7FD0F295D57635312903E44E56FCF51A3
        Validity
            Not Before: Feb  4 18:51:07 2025 GMT
            Not After : Feb  3 18:56:07 2026 GMT
        Subject: CN=349F8F346B449832F81A814FF6FD5D0BF1B356A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:64:3b:ed:f1:cc:76:ea:7c:6d:ce:7f:b2:
                    96:d3:52:bc:d3:9d:4d:b2:6b:05:b0:fc:95:d7:d0:
                    36:1e:88:37:6c:d5:d8:a5:e0:cb:98:8d:38:aa:ab:
                    ef:d4:08:a5:26:2e:df:aa:13:13:7f:99:4d:f2:21:
                    33:42:87:e1:8a:aa:4b:5e:f1:2f:15:7c:02:95:4f:
                    40:2a:4b:47:7a:8e:ac:7a:17:4e:5e:f2:90:d4:02:
                    81:f7:fc:27:82:7e:b5:f0:ea:16:3b:47:b2:b2:e1:
                    ee:e3:68:c6:7d:90:9d:42:7b:51:72:3b:a4:19:40:
                    26:83:db:bf:45:87:07:ab:72:04:e5:55:5a:49:0d:
                    a5:35:bc:a9:ce:d2:e0:51:a7:c2:f7:53:76:af:b7:
                    2e:77:42:28:29:40:2e:65:b6:03:31:23:08:f6:d0:
                    6a:a2:26:ab:61:cf:a6:0d:01:ab:c2:aa:ab:54:d7:
                    ec:82:d7:a0:9b:0b:e6:c4:c3:07:8c:17:17:01:31:
                    5f:8b:48:80:83:3e:69:f6:4d:d8:c5:85:65:4b:c9:
                    b3:ee:49:34:0c:8f:63:86:6f:66:63:98:74:2f:34:
                    bb:1a:79:78:b5:11:a1:a1:57:48:dd:19:c1:2f:c1:
                    3f:f9:7d:f2:00:68:aa:3e:01:36:b8:1b:ad:4c:ef:
                    cf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9F:8F:34:6B:44:98:32:F8:1A:81:4F:F6:FD:5D:0B:F1:B3:56:A7
            X509v3 Authority Key Identifier:
                keyid:87:66:19:C7:FD:0F:29:5D:57:63:53:12:90:3E:44:E5:6F:CF:51:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/876619C7FD0F295D57635312903E44E56FCF51A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/876619C7FD0F295D57635312903E44E56FCF51A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7F43753D547A9DA546DFC4E583CCE041C35853193177FEE7CE757AF2AD24D19/0/34352e3233372e38342e302f32322d3232203d3e20323636383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:97:ca:4a:c9:f5:0b:ea:13:da:34:bb:a8:6a:e5:bc:2c:
         5f:63:19:bc:a5:ed:8f:64:f0:93:33:32:64:9b:57:a1:45:d7:
         7b:f1:0e:be:70:17:88:16:b1:2a:e0:33:4f:66:85:24:d7:cf:
         6c:7f:e2:b6:74:d3:db:f1:37:a5:f6:15:73:56:0a:69:e0:b0:
         eb:74:bb:00:4b:d3:8a:8e:7b:4c:c0:02:b8:78:b8:17:b2:cf:
         57:1f:5b:01:46:6d:5a:45:f1:96:45:2b:91:8c:3b:6c:f8:68:
         f7:06:17:3e:ec:32:7e:22:cf:c5:b4:87:63:8b:19:24:52:a0:
         01:c7:ad:54:87:9f:5c:76:f3:63:bb:82:fb:ec:63:9a:c9:33:
         d8:62:34:5a:f2:30:30:80:6b:bd:44:18:7f:2a:63:5b:fc:46:
         3f:84:f0:20:34:c6:b4:ed:39:c3:89:01:b0:dd:0f:3c:cd:c8:
         c6:c8:85:2a:97:00:af:9f:99:e7:4d:5e:25:21:15:64:2b:f1:
         8a:ec:f5:7a:70:24:de:62:8e:46:78:df:65:6d:69:98:36:0d:
         97:51:74:0f:5b:c1:47:2a:6a:7e:2b:76:36:6d:8a:93:a1:eb:
         fd:b8:f3:98:b2:95:49:d1:6c:d2:ef:94:2f:73:ca:f3:1c:2a:
         15:05:f6:d8
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXoxH67xBgPC1yVsqbuBBgLsBvk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc2NjE5QzdGRDBGMjk1RDU3NjM1MzEyOTAzRTQ0RTU2
RkNGNTFBMzAeFw0yNTAyMDQxODUxMDdaFw0yNjAyMDMxODU2MDdaMDMxMTAvBgNV
BAMTKDM0OUY4RjM0NkI0NDk4MzJGODFBODE0RkY2RkQ1RDBCRjFCMzU2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KGQ77fHMdup8bc5/spbTUrzT
nU2yawWw/JXX0DYeiDds1dil4MuYjTiqq+/UCKUmLt+qExN/mU3yITNCh+GKqkte
8S8VfAKVT0AqS0d6jqx6F05e8pDUAoH3/CeCfrXw6hY7R7Ky4e7jaMZ9kJ1Ce1Fy
O6QZQCaD279FhwercgTlVVpJDaU1vKnO0uBRp8L3U3avty53QigpQC5ltgMxIwj2
0GqiJqthz6YNAavCqqtU1+yC16CbC+bEwweMFxcBMV+LSICDPmn2TdjFhWVLybPu
STQMj2OGb2ZjmHQvNLsaeXi1EaGhV0jdGcEvwT/5ffIAaKo+ATa4G61M78+1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUNJ+PNGtEmDL4GoFP9v1dC/GzVqcwHwYDVR0j
BBgwFoAUh2YZx/0PKV1XY1MSkD5E5W/PUaMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0Y0Mzc1M0Q1NDdBOURBNTQ2REZDNEU1ODNDQ0UwNDFD
MzU4NTMxOTMxNzdGRUU3Q0U3NTdBRjJBRDI0RDE5LzAvODc2NjE5QzdGRDBGMjk1
RDU3NjM1MzEyOTAzRTQ0RTU2RkNGNTFBMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NzY2MTlDN0ZEMEYyOTVENTc2
MzUzMTI5MDNFNDRFNTZGQ0Y1MUEzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdGNDM3NTNENTQ3QTlEQTU0NkRGQzRFNTgzQ0NFMDQxQzM1ODUzMTkz
MTc3RkVFN0NFNzU3QUYyQUQyNEQxOS8wLzM0MzUyZTMyMzMzNzJlMzgzNDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM4MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3tVDAN
BgkqhkiG9w0BAQsFAAOCAQEATFeXykrJ9QvqE9o0u6hq5bwsX2MZvKXtj2TwkzMy
ZJtXoUXXe/EOvnAXiBaxKuAzT2aFJNfPbH/itnTT2/E3pfYVc1YKaeCw63S7AEvT
io57TMACuHi4F7LPVx9bAUZtWkXxlkUrkYw7bPho9wYXPuwyfiLPxbSHY4sZJFKg
AcetVIefXHbzY7uC++xjmskz2GI0WvIwMIBrvUQYfypjW/xGP4TwIDTGtO05w4kB
sN0PPM3IxsiFKpcAr5+Z501eJSEVZCvxiuz1enAk3mKORnjfZW1pmDYNl1F0D1vB
Rypqfit2Nm2Kk6Hr/bjzmLKVSdFs0u+UL3PK8xwqFQX22A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:10 2025 by rpki-client