Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/34352e3138322e3233362e302f32322d3234203d3e20323639373533.roa
File:                     34352e3138322e3233362e302f32322d3234203d3e20323639373533.roa (raw, json)
Hash identifier:          tonZZWIJ0pGT/SVG4out7Qt96WddvVMjHVVAOWyYiRI=
Subject key identifier:   3C:3F:B9:D0:D5:84:45:42:AE:AB:C9:A6:08:AF:36:53:3D:CF:6D:C2
Certificate issuer:       /CN=C3866720790FE6E72631F4DC662653F04D028366
Certificate serial:       1C010322F32C50CDCDAC164C08D3512B6D354B9F
Authority key identifier: C3:86:67:20:79:0F:E6:E7:26:31:F4:DC:66:26:53:F0:4D:02:83:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3866720790FE6E72631F4DC662653F04D028366.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/34352e3138322e3233362e302f32322d3234203d3e20323639373533.roa
Signing time:             Tue 04 Feb 2025 18:30:44 +0000
ROA not before:           Tue 04 Feb 2025 18:25:44 +0000
ROA not after:            Tue 03 Feb 2026 18:30:44 +0000
asID:                     269753
IP address blocks:        45.182.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:01:03:22:f3:2c:50:cd:cd:ac:16:4c:08:d3:51:2b:6d:35:4b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3866720790FE6E72631F4DC662653F04D028366
        Validity
            Not Before: Feb  4 18:25:44 2025 GMT
            Not After : Feb  3 18:30:44 2026 GMT
        Subject: CN=3C3FB9D0D5844542AEABC9A608AF36533DCF6DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:ea:0a:50:5c:16:2c:da:b0:fd:2b:ea:9c:
                    80:64:ea:00:4c:36:e1:5b:13:65:36:8d:0d:62:f7:
                    90:57:3d:95:36:01:b3:f8:9d:55:ad:d3:89:a2:35:
                    b9:3c:05:e2:ab:88:d4:37:fb:64:d5:88:4a:f6:fd:
                    bf:ad:f0:c6:a7:57:8c:f9:7e:8f:09:48:35:87:ad:
                    2e:60:18:c2:7d:37:e2:59:da:31:6f:ee:e6:19:64:
                    5e:d5:c0:3e:20:1f:da:25:af:5c:20:21:6e:5f:cc:
                    ba:66:9f:6d:2e:63:b9:9c:5c:b2:16:14:14:45:77:
                    e8:06:06:b5:f5:44:67:18:e2:7d:b3:48:a6:a8:9f:
                    8b:14:d9:01:30:4d:55:46:74:09:75:ec:57:93:ac:
                    0c:14:7c:df:76:b7:60:34:83:c9:16:a2:3c:24:f1:
                    2e:49:3b:24:db:c9:8c:34:d6:1b:22:e6:c3:10:27:
                    13:be:67:ba:58:cf:db:df:50:e5:fd:63:e5:f8:1e:
                    df:62:58:b4:85:77:3b:12:49:8c:3c:4f:0b:1c:99:
                    2f:83:2d:1b:15:3d:97:99:c5:f6:72:b0:dd:0c:12:
                    9d:5d:8b:d8:73:a2:fc:5b:5b:81:ca:8f:68:29:69:
                    1e:2c:c7:4b:67:7e:fe:99:25:0c:52:90:f4:0e:6d:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:B9:D0:D5:84:45:42:AE:AB:C9:A6:08:AF:36:53:3D:CF:6D:C2
            X509v3 Authority Key Identifier:
                keyid:C3:86:67:20:79:0F:E6:E7:26:31:F4:DC:66:26:53:F0:4D:02:83:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/C3866720790FE6E72631F4DC662653F04D028366.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3866720790FE6E72631F4DC662653F04D028366.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0C59EBD40B66696483D3812F7E74C05ABD4188CB441A8FE63BC2C07CEB97935/0/34352e3138322e3233362e302f32322d3234203d3e20323639373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:79:4a:88:f7:c2:15:48:d1:25:75:25:e7:a2:6b:03:07:ec:
         6f:e4:16:4f:ed:c4:a7:4e:14:9a:20:63:b6:46:f7:16:a1:ca:
         a7:f7:3f:10:cf:70:52:72:91:76:c7:15:d2:b5:92:f6:25:6a:
         3d:c7:e7:95:6c:2a:dc:77:86:81:24:b5:94:43:ec:87:02:8a:
         7f:fe:e3:17:6c:ba:2d:1f:ee:ef:b1:33:51:6c:65:1f:1d:2a:
         fd:f6:9a:9b:5c:02:0d:42:c5:54:eb:47:53:5a:73:c9:6d:81:
         59:6e:62:fe:68:f0:6a:7e:7f:18:52:ab:a5:38:e6:fe:74:e8:
         79:d0:90:a2:ad:40:c3:c1:62:df:a4:ab:98:bd:48:4d:55:16:
         ef:14:c5:d7:b1:20:da:07:87:81:6c:6a:8a:50:50:bd:c3:53:
         60:74:bf:91:cf:59:87:c0:1d:4a:18:5c:dc:66:04:2d:9c:f9:
         8a:b1:9e:16:c7:be:29:69:b0:43:da:49:cc:ec:80:e0:27:89:
         1d:1d:98:4c:da:ab:95:f4:10:13:b6:84:78:9c:70:31:cf:c6:
         2b:67:b3:7e:d9:05:a7:c5:d8:0b:52:72:f0:60:96:e2:a7:a9:
         48:40:4b:67:3b:33:59:2f:7e:5d:a7:a3:78:d9:c3:5e:ba:b6:
         1e:aa:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:48 2025 by rpki-client