Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32352e302f32342d3234203d3e20323637383038.roa
File:                     34352e3137322e32352e302f32342d3234203d3e20323637383038.roa (raw, json)
Hash identifier:          yzCtK0hh93YVRhpem3EmOZuvaDFXi9IdWlmKEGbiUm4=
Subject key identifier:   7E:2C:97:D1:3B:25:D1:2D:F5:15:8F:0A:BB:B9:D0:5E:20:67:14:20
Certificate issuer:       /CN=57C6B6FCC86CE754D9F1027589B16691F756D393
Certificate serial:       4054DD4361F51B7E4DF37079796F81470EE60AF7
Authority key identifier: 57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32352e302f32342d3234203d3e20323637383038.roa
Signing time:             Tue 04 Feb 2025 20:02:36 +0000
ROA not before:           Tue 04 Feb 2025 19:57:36 +0000
ROA not after:            Tue 03 Feb 2026 20:02:36 +0000
asID:                     267808
IP address blocks:        45.172.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:54:dd:43:61:f5:1b:7e:4d:f3:70:79:79:6f:81:47:0e:e6:0a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57C6B6FCC86CE754D9F1027589B16691F756D393
        Validity
            Not Before: Feb  4 19:57:36 2025 GMT
            Not After : Feb  3 20:02:36 2026 GMT
        Subject: CN=7E2C97D13B25D12DF5158F0ABBB9D05E20671420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:61:33:15:fe:30:d0:1a:4a:9e:38:69:23:
                    b9:29:35:01:c7:88:2f:f3:d7:d1:eb:4f:df:05:a1:
                    04:56:87:0d:12:c6:3d:57:54:c3:0a:59:65:fd:45:
                    68:c2:30:af:f7:2e:71:9f:5b:fb:2d:bb:25:ff:f3:
                    84:5c:21:a5:4a:cb:57:b2:d4:23:37:35:dc:ec:c9:
                    ea:59:e2:eb:b3:86:6e:2a:54:da:b4:1f:f9:68:84:
                    b4:2b:10:0b:3a:86:6b:4e:bb:96:db:78:39:be:9f:
                    33:05:25:a6:20:d7:56:c1:98:36:e4:33:3c:9e:9a:
                    15:e3:a5:b3:54:f3:40:c6:ec:5b:39:23:66:a4:f0:
                    be:18:28:da:1d:cc:88:fc:aa:b9:b4:1b:d3:f1:5d:
                    28:43:18:e4:3e:8e:bb:3f:cc:9f:f9:7a:28:ca:00:
                    5a:8f:06:05:17:2a:ed:84:3a:98:4e:95:e9:a5:af:
                    91:57:32:e8:5b:51:c6:07:0d:12:fd:43:53:3b:09:
                    ba:cb:5c:ed:26:48:8b:0e:02:f8:f0:47:65:dd:d7:
                    ce:af:a4:19:80:ff:c7:f7:71:48:df:3d:35:23:d4:
                    be:62:96:3a:50:e0:65:23:d6:b9:d5:9f:d2:77:f2:
                    4b:ec:69:f3:e2:1c:49:28:df:22:9e:36:99:ec:5c:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:97:D1:3B:25:D1:2D:F5:15:8F:0A:BB:B9:D0:5E:20:67:14:20
            X509v3 Authority Key Identifier:
                keyid:57:C6:B6:FC:C8:6C:E7:54:D9:F1:02:75:89:B1:66:91:F7:56:D3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/57C6B6FCC86CE754D9F1027589B16691F756D393.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/57C6B6FCC86CE754D9F1027589B16691F756D393.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DEE9E4A9F601C8586216D8BB442F223390E3E1CBEA957A00998FE6207B6F147E/0/34352e3137322e32352e302f32342d3234203d3e20323637383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:0a:fb:75:51:1a:49:e9:dd:62:61:39:a0:91:b1:93:a6:
         af:a6:91:58:1a:42:8a:c9:d5:9a:e6:01:bd:12:47:b9:3b:29:
         1b:6c:18:07:5f:9f:bd:46:98:0c:63:55:cd:96:c4:a8:74:b3:
         f1:1f:44:93:cd:95:d9:e0:26:c6:ae:4e:b3:5b:e3:0f:9a:6f:
         6d:86:a2:6a:8b:02:16:2f:1c:c1:82:73:fc:e8:c8:71:2e:30:
         13:12:4b:82:c9:c9:ac:79:18:e1:f7:d2:6a:c0:95:ae:b5:77:
         1f:b5:1a:1a:7a:c1:0e:d3:36:62:eb:d8:e2:42:da:6a:55:4e:
         22:e9:e2:b9:9e:1a:7c:57:90:09:3c:b2:c5:ce:48:a5:42:65:
         e3:bf:48:a4:c7:30:4f:9b:31:1b:14:fc:66:55:9a:64:1e:7a:
         33:8a:09:c5:e6:73:41:e5:13:60:bf:2b:e9:2b:0d:2e:96:2a:
         11:aa:34:6b:c0:aa:a9:31:8d:8a:ca:73:cc:bb:5e:3f:4e:12:
         ac:ec:38:07:7b:5c:00:12:03:ac:1d:b3:d5:97:e8:b5:b2:38:
         04:a7:77:cf:e1:88:d0:e7:f6:18:83:e5:72:ea:f9:89:84:d5:
         2d:13:d1:25:36:0f:a7:e4:a7:a5:c0:d4:64:94:39:6f:17:e8:
         41:41:38:6e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQFTdQ2H1G35N83B5eW+BRw7mCvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdDNkI2RkNDODZDRTc1NEQ5RjEwMjc1ODlCMTY2OTFG
NzU2RDM5MzAeFw0yNTAyMDQxOTU3MzZaFw0yNjAyMDMyMDAyMzZaMDMxMTAvBgNV
BAMTKDdFMkM5N0QxM0IyNUQxMkRGNTE1OEYwQUJCQjlEMDVFMjA2NzE0MjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4WEzFf4w0BpKnjhpI7kpNQHH
iC/z19HrT98FoQRWhw0Sxj1XVMMKWWX9RWjCMK/3LnGfW/stuyX/84RcIaVKy1ey
1CM3NdzsyepZ4uuzhm4qVNq0H/lohLQrEAs6hmtOu5bbeDm+nzMFJaYg11bBmDbk
MzyemhXjpbNU80DG7Fs5I2ak8L4YKNodzIj8qrm0G9PxXShDGOQ+jrs/zJ/5eijK
AFqPBgUXKu2EOphOlemlr5FXMuhbUcYHDRL9Q1M7CbrLXO0mSIsOAvjwR2Xd186v
pBmA/8f3cUjfPTUj1L5iljpQ4GUj1rnVn9J38kvsafPiHEko3yKeNpnsXHGXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUfiyX0Tsl0S31FY8Ku7nQXiBnFCAwHwYDVR0j
BBgwFoAUV8a2/Mhs51TZ8QJ1ibFmkfdW05MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERUU5RTRBOUY2MDFDODU4NjIxNkQ4QkI0NDJGMjIzMzkw
RTNFMUNCRUE5NTdBMDA5OThGRTYyMDdCNkYxNDdFLzAvNTdDNkI2RkNDODZDRTc1
NEQ5RjEwMjc1ODlCMTY2OTFGNzU2RDM5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81N0M2QjZGQ0M4NkNFNzU0RDlG
MTAyNzU4OUIxNjY5MUY3NTZEMzkzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREVFOUU0QTlGNjAxQzg1ODYyMTZEOEJCNDQyRjIyMzM5MEUzRTFDQkVB
OTU3QTAwOTk4RkU2MjA3QjZGMTQ3RS8wLzM0MzUyZTMxMzczMjJlMzIzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM4MzAzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2sGTAN
BgkqhkiG9w0BAQsFAAOCAQEAWMQK+3VRGknp3WJhOaCRsZOmr6aRWBpCisnVmuYB
vRJHuTspG2wYB1+fvUaYDGNVzZbEqHSz8R9Ek82V2eAmxq5Os1vjD5pvbYaiaosC
Fi8cwYJz/OjIcS4wExJLgsnJrHkY4ffSasCVrrV3H7UaGnrBDtM2YuvY4kLaalVO
IuniuZ4afFeQCTyyxc5IpUJl479IpMcwT5sxGxT8ZlWaZB56M4oJxeZzQeUTYL8r
6SsNLpYqEao0a8CqqTGNispzzLteP04SrOw4B3tcABIDrB2z1ZfotbI4BKd3z+GI
0Of2GIPlcur5iYTVLRPRJTYPp+SnpcDUZJQ5bxfoQUE4bg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:18 2025 by rpki-client