Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e20323637383639.roa
File:                     34352e3137362e3233322e302f32322d3234203d3e20323637383639.roa (raw, json)
Hash identifier:          GBxxoi9dq7MiAFxXZMH997AL8NDT5eABnSQipOziNJE=
Subject key identifier:   1B:B6:CA:41:8F:6F:6D:EB:16:0A:B6:15:D4:36:D0:11:AD:E2:FC:E5
Certificate issuer:       /CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
Certificate serial:       0D63FDA71E37664258C8A0D28EB6C8C211FC4B1D
Authority key identifier: E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e20323637383639.roa
Signing time:             Tue 04 Feb 2025 18:49:10 +0000
ROA not before:           Tue 04 Feb 2025 18:44:10 +0000
ROA not after:            Tue 03 Feb 2026 18:49:10 +0000
asID:                     267869
IP address blocks:        45.176.232.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:63:fd:a7:1e:37:66:42:58:c8:a0:d2:8e:b6:c8:c2:11:fc:4b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48C5AD5CAD244C1A19CF65CED538162C984F4AD
        Validity
            Not Before: Feb  4 18:44:10 2025 GMT
            Not After : Feb  3 18:49:10 2026 GMT
        Subject: CN=1BB6CA418F6F6DEB160AB615D436D011ADE2FCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:10:5f:05:45:22:b3:dd:b0:9e:d5:63:4e:5d:
                    e3:d5:7c:4c:0a:f2:34:38:66:03:ef:51:a0:b3:cb:
                    a7:49:d8:d1:46:63:48:8c:a6:e1:ae:8a:90:5f:69:
                    50:cb:e4:27:ed:0a:28:c2:39:21:48:7b:1a:1b:d9:
                    d0:94:97:ba:49:91:ec:45:6d:04:52:b9:0b:43:3e:
                    54:56:9a:f1:f3:fe:00:f4:f8:46:5d:70:e2:ba:13:
                    6f:02:d7:ce:ec:f4:3e:8b:6e:52:ea:34:fc:69:66:
                    00:be:d8:58:ec:b8:3c:5f:e5:9e:fc:92:74:e4:2e:
                    4d:a6:b5:76:e8:8e:d1:a7:fe:6e:05:f3:62:d3:c0:
                    69:50:01:c4:ec:4a:1c:9d:6a:fd:f9:5b:c3:70:f0:
                    a0:cf:bc:4e:13:2d:ab:ab:88:48:5c:ed:ae:5a:54:
                    d3:95:76:e3:c8:cc:4c:10:8f:76:f6:17:b8:a2:f5:
                    4d:bf:e9:38:5e:95:6a:1d:7a:a3:f4:5a:f0:56:00:
                    9f:46:b5:97:d3:69:4c:58:ae:89:7b:88:0e:5b:5d:
                    b1:c6:25:49:bf:cd:6d:81:91:f2:72:68:fa:2d:6a:
                    09:14:c6:9f:81:93:3d:d9:6b:8b:52:41:77:8f:17:
                    68:6c:1d:a2:db:e8:21:dc:52:d7:fb:a6:60:12:83:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:CA:41:8F:6F:6D:EB:16:0A:B6:15:D4:36:D0:11:AD:E2:FC:E5
            X509v3 Authority Key Identifier:
                keyid:E4:8C:5A:D5:CA:D2:44:C1:A1:9C:F6:5C:ED:53:81:62:C9:84:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E48C5AD5CAD244C1A19CF65CED538162C984F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D8BCCB388650063C38404DF51523586457808D54F6B505C66F3ED997D62614CD/0/34352e3137362e3233322e302f32322d3234203d3e20323637383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:b6:f8:4b:61:bb:f2:71:e6:1e:3d:65:82:9e:41:91:17:
         5e:1b:45:bd:d9:e9:cd:78:7d:74:0b:6b:18:bf:db:fd:33:54:
         33:6e:08:bc:0d:33:8f:de:b6:83:22:33:85:9d:fb:8c:9f:79:
         ad:a9:e9:d4:b1:b5:b3:d7:4f:cf:d1:ff:cc:6c:d6:3b:52:d4:
         9e:d3:61:10:7f:e2:51:72:09:1b:32:bf:9f:53:ff:cc:91:18:
         6e:08:37:1e:c5:75:7a:43:f8:31:38:ac:54:24:b6:af:b0:4f:
         de:eb:69:3f:96:d2:1a:00:64:61:f3:13:e9:a0:85:e5:e3:c6:
         da:fd:10:08:ee:8f:6f:c2:0f:95:23:0e:7a:a1:37:3c:8b:b0:
         ee:b6:48:e3:70:70:5c:3b:c4:3b:bf:5a:21:51:de:16:23:67:
         79:b6:6e:d4:13:e3:bf:f7:2c:37:a9:3b:97:4a:20:b5:93:a6:
         65:f8:8b:ed:41:28:30:8b:70:ac:d0:f1:ea:a8:d9:d0:26:a8:
         95:1d:9a:cb:5c:3b:0f:1a:3a:5d:81:fd:1a:24:2f:0a:01:10:
         91:e2:b4:92:75:92:ae:ba:89:2c:35:6f:d9:b9:6a:2c:89:9a:
         61:b7:9f:38:24:ec:0c:ae:d0:35:3d:46:83:69:c4:83:00:e5:
         bf:b9:37:b3
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDWP9px43ZkJYyKDSjrbIwhH8Sx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4QzVBRDVDQUQyNDRDMUExOUNGNjVDRUQ1MzgxNjJD
OTg0RjRBRDAeFw0yNTAyMDQxODQ0MTBaFw0yNjAyMDMxODQ5MTBaMDMxMTAvBgNV
BAMTKDFCQjZDQTQxOEY2RjZERUIxNjBBQjYxNUQ0MzZEMDExQURFMkZDRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIEF8FRSKz3bCe1WNOXePVfEwK
8jQ4ZgPvUaCzy6dJ2NFGY0iMpuGuipBfaVDL5CftCijCOSFIexob2dCUl7pJkexF
bQRSuQtDPlRWmvHz/gD0+EZdcOK6E28C187s9D6LblLqNPxpZgC+2FjsuDxf5Z78
knTkLk2mtXbojtGn/m4F82LTwGlQAcTsShydav35W8Nw8KDPvE4TLauriEhc7a5a
VNOVduPIzEwQj3b2F7ii9U2/6ThelWodeqP0WvBWAJ9GtZfTaUxYrol7iA5bXbHG
JUm/zW2BkfJyaPotagkUxp+Bkz3Za4tSQXePF2hsHaLb6CHcUtf7pmASgzwFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUG7bKQY9vbesWCrYV1DbQEa3i/OUwHwYDVR0j
BBgwFoAU5Ixa1crSRMGhnPZc7VOBYsmE9K0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOEJDQ0IzODg2NTAwNjNDMzg0MDRERjUxNTIzNTg2NDU3
ODA4RDU0RjZCNTA1QzY2RjNFRDk5N0Q2MjYxNENELzAvRTQ4QzVBRDVDQUQyNDRD
MUExOUNGNjVDRUQ1MzgxNjJDOTg0RjRBRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDhDNUFENUNBRDI0NEMxQTE5
Q0Y2NUNFRDUzODE2MkM5ODRGNEFELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDhCQ0NCMzg4NjUwMDYzQzM4NDA0REY1MTUyMzU4NjQ1NzgwOEQ1NEY2
QjUwNUM2NkYzRUQ5OTdENjI2MTRDRC8wLzM0MzUyZTMxMzczNjJlMzIzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzgzNjM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLbDo
MA0GCSqGSIb3DQEBCwUAA4IBAQCwA7b4S2G78nHmHj1lgp5BkRdeG0W92enNeH10
C2sYv9v9M1Qzbgi8DTOP3raDIjOFnfuMn3mtqenUsbWz10/P0f/MbNY7UtSe02EQ
f+JRcgkbMr+fU//MkRhuCDcexXV6Q/gxOKxUJLavsE/e62k/ltIaAGRh8xPpoIXl
48ba/RAI7o9vwg+VIw56oTc8i7DutkjjcHBcO8Q7v1ohUd4WI2d5tm7UE+O/9yw3
qTuXSiC1k6Zl+IvtQSgwi3Cs0PHqqNnQJqiVHZrLXDsPGjpdgf0aJC8KARCR4rSS
dZKuuoksNW/ZuWosiZpht584JOwMrtA1PUaDacSDAOW/uTez
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:41 2025 by rpki-client