Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e20323731393230.roa
File:                     34352e3138332e34322e302f32332d3233203d3e20323731393230.roa (raw, json)
Hash identifier:          1tbfMaQob+EnbBDjtX55QjwkTYQI7nXc+Th4ITd3Wsc=
Subject key identifier:   C5:01:E7:06:1A:57:8F:E1:54:09:04:29:8B:35:CF:35:E3:46:03:94
Certificate issuer:       /CN=8210175404341E39B37F824D85585065838DF0B5
Certificate serial:       4B11C9CF998A645383A0E07A09F30F3724811866
Authority key identifier: 82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e20323731393230.roa
Signing time:             Tue 04 Feb 2025 19:59:57 +0000
ROA not before:           Tue 04 Feb 2025 19:54:57 +0000
ROA not after:            Tue 03 Feb 2026 19:59:57 +0000
asID:                     271920
IP address blocks:        45.183.42.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:11:c9:cf:99:8a:64:53:83:a0:e0:7a:09:f3:0f:37:24:81:18:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8210175404341E39B37F824D85585065838DF0B5
        Validity
            Not Before: Feb  4 19:54:57 2025 GMT
            Not After : Feb  3 19:59:57 2026 GMT
        Subject: CN=C501E7061A578FE1540904298B35CF35E3460394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:26:e3:bf:97:41:40:4a:72:93:0c:9e:ff:
                    d1:b7:7e:d6:f2:ed:47:26:ed:40:12:37:3c:bd:7b:
                    ac:f8:26:10:ca:fe:59:ff:a7:66:47:00:f0:7d:5c:
                    fb:f3:31:09:ce:2a:25:0f:c8:4b:65:85:e4:28:e3:
                    78:af:2e:52:6c:b6:18:56:a9:32:6e:1a:f5:16:ec:
                    66:59:49:1d:08:13:94:06:41:8c:1a:23:01:f2:a1:
                    b2:55:d7:40:5f:d5:7a:44:51:c9:bd:3d:df:02:e8:
                    9b:1d:d7:35:ce:a7:f9:bb:e5:e7:b7:1d:01:75:11:
                    c9:46:f5:20:dc:f8:ec:e0:5e:c1:d8:85:19:8d:ca:
                    31:dd:96:44:c0:34:db:8a:33:d3:df:ad:bd:cd:c8:
                    50:4b:12:87:1e:23:27:51:fa:a1:18:8e:fb:ab:9e:
                    ef:2e:a3:a9:ed:86:c1:c9:c3:7a:f9:fd:3b:ca:dd:
                    20:9d:e0:4c:43:35:0a:2f:b6:ac:b6:06:4c:08:54:
                    ae:9d:39:aa:a0:72:79:a5:e3:22:e6:e4:bf:49:a7:
                    8f:3e:ac:a1:2b:8e:d2:df:fc:ee:87:c5:d6:f6:76:
                    1e:9e:26:c3:ac:aa:97:0f:1b:49:41:f1:8e:fb:f7:
                    cb:39:65:55:1b:f7:4b:54:87:31:a6:a1:37:5b:e7:
                    ca:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:E7:06:1A:57:8F:E1:54:09:04:29:8B:35:CF:35:E3:46:03:94
            X509v3 Authority Key Identifier:
                keyid:82:10:17:54:04:34:1E:39:B3:7F:82:4D:85:58:50:65:83:8D:F0:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/8210175404341E39B37F824D85585065838DF0B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8210175404341E39B37F824D85585065838DF0B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB965A4F0806DD6CDD0EC40F0491AF1F59C6EF396977426EBFD142E50BF372EE/0/34352e3138332e34322e302f32332d3233203d3e20323731393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:63:f4:ad:7e:dd:f5:89:70:c9:39:7d:1f:97:74:6c:b5:
         1e:18:f5:bd:f2:98:53:56:09:93:9a:a5:5e:8b:d5:fe:21:6c:
         29:47:85:84:a0:94:51:f4:05:7e:19:24:76:e3:18:18:91:7f:
         0f:e4:8e:e9:e0:69:a9:48:09:49:6f:0b:af:76:7d:8a:9e:eb:
         0d:da:7f:58:63:55:cd:31:d8:dd:d8:cf:d1:eb:85:f5:5c:b9:
         9c:8e:8a:b2:c4:55:1e:d3:25:92:6d:6f:81:12:1b:fe:6d:1b:
         72:09:aa:13:a6:94:04:17:64:5c:90:ce:63:d1:47:1d:03:02:
         02:b5:1b:3c:ae:13:f5:30:52:e3:9d:37:ce:66:a3:2d:cc:ee:
         aa:c6:15:fb:d1:ef:e3:6a:53:0a:21:62:40:51:72:dd:8a:5d:
         cf:25:34:bb:f4:c4:15:54:a0:a7:5d:9e:e7:74:b7:93:b7:df:
         8d:2c:5a:9c:4f:f6:e8:e9:35:ba:0b:5d:5d:8a:8e:06:8a:41:
         02:02:b1:af:18:c6:40:52:6d:7d:aa:14:64:65:64:a7:37:31:
         6f:51:69:0a:84:fa:0b:d0:0c:3c:64:ae:75:ba:94:46:da:4d:
         74:ff:97:b6:45:e5:b9:9c:20:3d:07:00:99:7a:41:11:c6:0c:
         06:9e:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:40 2025 by rpki-client