Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33382e302f32342d3234203d3e20323637363830.roa
File:                     34352e3136332e33382e302f32342d3234203d3e20323637363830.roa (raw, json)
Hash identifier:          Y3tNshWTORR4A57XRaKIty2c/MO6tw+jncZRdE0XOOs=
Subject key identifier:   E3:DD:82:E9:F3:E9:D2:04:F3:A4:67:D5:86:4C:47:BD:EC:D4:41:5E
Certificate issuer:       /CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
Certificate serial:       7473D2128CD2D468B3FBE9C9BB8F126BC9C262C5
Authority key identifier: A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33382e302f32342d3234203d3e20323637363830.roa
Signing time:             Tue 04 Feb 2025 18:29:31 +0000
ROA not before:           Tue 04 Feb 2025 18:24:31 +0000
ROA not after:            Tue 03 Feb 2026 18:29:31 +0000
asID:                     267680
IP address blocks:        45.163.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:73:d2:12:8c:d2:d4:68:b3:fb:e9:c9:bb:8f:12:6b:c9:c2:62:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A43B54A45F6595D87EE8D04C516D7321C1DC20D6
        Validity
            Not Before: Feb  4 18:24:31 2025 GMT
            Not After : Feb  3 18:29:31 2026 GMT
        Subject: CN=E3DD82E9F3E9D204F3A467D5864C47BDECD4415E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:a1:29:d4:db:df:cd:6c:57:18:c7:bf:85:
                    ad:01:6a:54:8b:d7:d9:29:cb:09:49:7d:c8:35:32:
                    3b:7c:b9:45:de:e8:c0:cd:de:3a:2d:52:50:2b:37:
                    d5:27:fe:61:3f:71:99:82:c9:f0:8c:81:14:93:4f:
                    11:fe:74:f1:34:92:28:d1:69:ba:fb:9f:b5:ea:2b:
                    fc:53:74:1b:77:21:8a:4c:e5:e4:8a:53:ad:59:7c:
                    62:9e:bd:6d:19:b6:e0:06:1a:cd:1a:0c:ab:34:a8:
                    0b:bb:80:7b:4b:c7:49:37:02:96:a5:20:d1:ad:8b:
                    61:67:f8:68:6b:55:c3:62:6b:22:1a:92:ad:d6:a3:
                    94:5f:fb:6a:ac:34:02:b7:78:25:ad:a8:9b:cd:8c:
                    e0:a5:78:c4:b6:70:7a:9d:9f:d3:b3:91:cb:d7:d7:
                    37:13:e5:8f:87:ec:69:f0:b1:60:11:26:bc:5d:8b:
                    90:3a:05:11:17:e0:05:cb:58:7a:5e:3c:4e:84:ba:
                    d5:50:d0:bf:63:e5:36:d9:9e:2f:df:3d:fd:aa:95:
                    be:9b:31:72:87:fb:43:65:ce:dd:61:06:f2:60:74:
                    57:27:07:ba:cd:80:42:88:74:10:3d:1e:1c:27:56:
                    9a:da:23:b5:fa:9e:24:4e:df:0c:f4:36:8a:5e:3f:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:82:E9:F3:E9:D2:04:F3:A4:67:D5:86:4C:47:BD:EC:D4:41:5E
            X509v3 Authority Key Identifier:
                keyid:A4:3B:54:A4:5F:65:95:D8:7E:E8:D0:4C:51:6D:73:21:C1:DC:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A43B54A45F6595D87EE8D04C516D7321C1DC20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB2F4B18733DF6D5DA23DFCB366E80C41C381A8F729986ACE8536477F346800C/0/34352e3136332e33382e302f32342d3234203d3e20323637363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:70:e6:12:40:4c:05:eb:9e:14:c2:66:e3:c6:05:93:ab:
         46:65:ab:cc:ad:f2:c4:8a:ee:e1:fe:29:de:37:7b:81:a9:b7:
         6c:9e:19:06:c0:20:4d:c3:85:e2:e3:31:fe:07:1a:41:4c:a1:
         f4:5d:1c:53:16:bd:8d:b7:cc:43:39:2d:48:e9:b4:f1:9e:06:
         da:d2:b0:bf:91:2c:e6:3a:53:00:e9:d4:fe:71:d6:4b:67:4d:
         66:c1:8b:04:d2:c0:be:f3:0b:e9:40:9d:cd:03:1d:59:ba:b6:
         27:ac:f6:fb:ed:4c:bc:bd:d4:b4:c9:ca:c1:3c:62:27:e2:c0:
         da:8a:18:4b:5c:2f:50:db:ea:7c:ab:fb:d4:0e:fa:be:1c:07:
         e3:d5:68:86:53:06:a7:cc:dc:10:e6:6c:5b:6d:40:03:c0:bb:
         79:08:7f:6e:e5:7c:81:eb:62:92:09:00:fe:6e:92:cc:23:d6:
         19:6b:bc:58:b4:2a:18:17:df:0e:81:38:6e:10:e6:4d:33:7d:
         09:85:d1:37:fe:a2:24:82:c8:4f:20:4a:b7:6d:9c:5a:5d:d0:
         dc:5d:85:5c:f4:b2:10:60:77:5c:0a:56:38:5a:30:f5:f2:c0:
         40:50:c2:c6:c1:42:db:4f:eb:cb:91:04:08:c8:7e:a5:44:0e:
         12:6a:ee:d6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdHPSEozS1Giz++nJu48Sa8nCYsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQzQjU0QTQ1RjY1OTVEODdFRThEMDRDNTE2RDczMjFD
MURDMjBENjAeFw0yNTAyMDQxODI0MzFaFw0yNjAyMDMxODI5MzFaMDMxMTAvBgNV
BAMTKEUzREQ4MkU5RjNFOUQyMDRGM0E0NjdENTg2NEM0N0JERUNENDQxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCewqEp1NvfzWxXGMe/ha0BalSL
19kpywlJfcg1Mjt8uUXe6MDN3jotUlArN9Un/mE/cZmCyfCMgRSTTxH+dPE0kijR
abr7n7XqK/xTdBt3IYpM5eSKU61ZfGKevW0ZtuAGGs0aDKs0qAu7gHtLx0k3Apal
INGti2Fn+GhrVcNiayIakq3Wo5Rf+2qsNAK3eCWtqJvNjOCleMS2cHqdn9OzkcvX
1zcT5Y+H7GnwsWARJrxdi5A6BREX4AXLWHpePE6EutVQ0L9j5TbZni/fPf2qlb6b
MXKH+0Nlzt1hBvJgdFcnB7rNgEKIdBA9HhwnVpraI7X6niRO3wz0NopeP0pjAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU492C6fPp0gTzpGfVhkxHvezUQV4wHwYDVR0j
BBgwFoAUpDtUpF9lldh+6NBMUW1zIcHcINYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjJGNEIxODczM0RGNkQ1REEyM0RGQ0IzNjZFODBDNDFD
MzgxQThGNzI5OTg2QUNFODUzNjQ3N0YzNDY4MDBDLzAvQTQzQjU0QTQ1RjY1OTVE
ODdFRThEMDRDNTE2RDczMjFDMURDMjBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNDNCNTRBNDVGNjU5NUQ4N0VF
OEQwNEM1MTZENzMyMUMxREMyMEQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIyRjRCMTg3MzNERjZENURBMjNERkNCMzY2RTgwQzQxQzM4MUE4Rjcy
OTk4NkFDRTg1MzY0NzdGMzQ2ODAwQy8wLzM0MzUyZTMxMzYzMzJlMzMzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNzM2MzgzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2jJjAN
BgkqhkiG9w0BAQsFAAOCAQEAjedw5hJATAXrnhTCZuPGBZOrRmWrzK3yxIru4f4p
3jd7gam3bJ4ZBsAgTcOF4uMx/gcaQUyh9F0cUxa9jbfMQzktSOm08Z4G2tKwv5Es
5jpTAOnU/nHWS2dNZsGLBNLAvvML6UCdzQMdWbq2J6z2++1MvL3UtMnKwTxiJ+LA
2ooYS1wvUNvqfKv71A76vhwH49VohlMGp8zcEOZsW21AA8C7eQh/buV8getikgkA
/m6SzCPWGWu8WLQqGBffDoE4bhDmTTN9CYXRN/6iJILITyBKt22cWl3Q3F2FXPSy
EGB3XApWOFow9fLAQFDCxsFC20/ry5EECMh+pUQOEmru1g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:12:51 2025 by rpki-client