Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203138363738.roa
File:                     34352e3137362e3233322e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          QE1oMj77osqC5brAAAl7AIIqoGzG2kIxjCRi2NEqWFI=
Subject key identifier:   CB:FE:8F:D9:16:0E:6A:CC:C1:73:F4:73:D0:5C:1B:E4:A3:EA:12:6C
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       1E3918DCDE9E7A6FDE6D5ABDBD52B4C4F0A589E6
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 18:49:11 +0000
ROA not before:           Tue 04 Feb 2025 18:44:11 +0000
ROA not after:            Tue 03 Feb 2026 18:49:11 +0000
asID:                     18678
IP address blocks:        45.176.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:39:18:dc:de:9e:7a:6f:de:6d:5a:bd:bd:52:b4:c4:f0:a5:89:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Feb  4 18:44:11 2025 GMT
            Not After : Feb  3 18:49:11 2026 GMT
        Subject: CN=CBFE8FD9160E6ACCC173F473D05C1BE4A3EA126C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:a4:6b:20:a3:77:a5:95:bf:af:0c:89:2d:
                    48:28:4e:98:95:1e:53:80:55:cb:74:ff:18:12:03:
                    cb:47:8e:69:95:76:6b:70:18:9a:77:ba:ec:2f:26:
                    a9:c4:5a:97:1d:33:e0:21:8e:43:13:70:5b:13:e6:
                    ae:b0:cf:7d:d9:c0:d2:ed:a7:e6:84:d3:c2:8c:47:
                    29:c1:66:a0:67:24:0c:85:de:ae:3b:d9:ba:f0:32:
                    37:e2:7d:30:c6:07:04:2a:d8:ba:dc:64:70:6e:83:
                    52:ed:8e:de:a6:49:30:1e:7d:e7:12:83:1c:f2:05:
                    31:4f:24:da:11:87:f7:87:c1:f9:2f:e1:5e:ef:00:
                    c0:b0:f4:c1:76:88:d7:b0:74:38:35:14:5c:2b:5e:
                    12:7f:32:62:ad:65:c8:4e:c2:96:86:09:34:af:bc:
                    92:98:43:3f:48:63:27:39:b2:61:9f:19:34:09:f6:
                    6d:f3:76:5b:eb:0c:30:d2:0f:67:0c:f6:6e:3f:5e:
                    b2:ee:66:a5:bd:5c:de:73:51:10:b1:32:23:86:a1:
                    1b:80:7f:08:90:46:a2:76:f0:2f:4b:61:ff:21:eb:
                    b6:7b:f1:bb:6c:b2:33:cf:53:2d:8b:42:45:14:17:
                    2e:54:85:ef:55:b4:4f:4a:47:3c:d0:2c:e2:1c:31:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FE:8F:D9:16:0E:6A:CC:C1:73:F4:73:D0:5C:1B:E4:A3:EA:12:6C
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:86:cd:1e:4a:6e:b7:ad:62:73:6e:0e:80:38:93:23:d9:78:
         01:47:d9:c4:c5:bd:11:69:f3:26:3e:c1:96:a0:69:47:59:1c:
         f8:4c:32:77:99:6e:8d:26:75:e8:e3:e6:27:6a:83:ef:3d:57:
         c1:3e:67:55:75:4b:56:88:7e:65:09:e3:5b:1b:6a:bc:bb:cf:
         31:66:a5:7c:47:08:fa:15:23:1f:4c:15:ad:49:9c:67:cb:cc:
         27:5b:c3:4a:59:d4:4a:b7:67:9f:bd:22:dd:b7:c7:ab:66:60:
         3a:d1:b3:20:6a:44:23:e6:37:3d:8d:70:23:b9:43:ec:6f:7e:
         2f:7b:73:29:be:f0:6e:d2:4f:80:19:09:54:a7:89:9c:ef:e1:
         15:c4:64:3a:bf:d0:4a:6f:9c:49:51:2a:89:d7:83:c9:be:96:
         d6:f9:d9:3e:27:4b:53:79:ef:99:ca:32:a4:02:34:96:6c:ff:
         64:73:a8:50:b9:67:80:84:f9:da:b8:7a:86:53:d9:b1:0b:0e:
         b3:ec:fd:f4:17:ed:57:c1:c0:3b:8f:e1:2d:91:58:3a:03:5d:
         f0:53:58:6f:d1:6f:84:5c:f8:83:de:29:87:a8:59:6c:d0:04:
         48:ad:65:68:f7:26:ea:14:06:fa:c9:4a:c6:33:e2:df:50:46:
         d6:e2:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:27 2025 by rpki-client