Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e31382e302f32342d3234203d3e203232363938.roa
File:                     3230302e33312e31382e302f32342d3234203d3e203232363938.roa (raw, json)
Hash identifier:          +oQDFIATCmNc7Nh1JNADnfZchCXfRtiG2ac90UWwUpE=
Subject key identifier:   79:B4:8A:E2:C8:D6:D3:2B:3B:65:F5:61:A9:11:A0:29:24:85:7F:9B
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       2D6D795870DF07BECEFA15051B6B99C9663A3554
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e31382e302f32342d3234203d3e203232363938.roa
Signing time:             Tue 04 Feb 2025 18:41:32 +0000
ROA not before:           Tue 04 Feb 2025 18:36:32 +0000
ROA not after:            Tue 03 Feb 2026 18:41:32 +0000
asID:                     22698
IP address blocks:        200.31.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6d:79:58:70:df:07:be:ce:fa:15:05:1b:6b:99:c9:66:3a:35:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:32 2025 GMT
            Not After : Feb  3 18:41:32 2026 GMT
        Subject: CN=79B48AE2C8D6D32B3B65F561A911A02924857F9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:0b:d5:a8:b9:e0:30:f6:80:68:99:70:ee:
                    e9:27:c3:da:6c:93:e0:a5:34:52:ba:0f:c9:61:e9:
                    00:1d:d9:8e:6e:e0:7e:7c:34:83:a2:72:eb:4d:df:
                    76:96:8c:28:5e:e2:4f:26:c5:5c:d8:84:fe:03:b5:
                    34:b9:03:9a:5a:55:8a:55:b9:e9:9e:12:e3:9c:f7:
                    6f:ee:2e:ea:93:6b:85:3a:03:15:2c:f4:a1:41:ed:
                    9c:6a:93:4f:3d:7b:af:57:5b:11:dd:ae:35:9c:54:
                    5a:6d:a5:4a:dd:9e:27:42:bc:fa:99:e5:47:65:b9:
                    7d:ca:11:1d:69:5d:28:7d:d5:18:c8:75:78:10:db:
                    36:20:55:91:9f:10:3b:9a:a3:18:ae:72:a0:c1:e5:
                    4e:7b:18:e2:36:11:f3:7b:e4:36:81:84:4a:dc:af:
                    9c:65:ae:f7:02:61:e8:d6:e8:61:35:30:5d:cf:85:
                    c0:95:d7:f3:df:78:a6:04:42:07:07:e9:2e:d0:f4:
                    5a:44:6d:9c:94:d9:9f:c4:f7:dd:71:88:b1:b0:84:
                    32:c5:10:b2:dc:5d:41:ee:20:4b:9e:d5:e7:b3:7b:
                    8b:e5:de:a6:75:ab:46:09:b3:32:a6:ad:17:07:83:
                    eb:67:92:f7:fe:af:ff:e3:49:ba:de:4b:a4:f1:fc:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B4:8A:E2:C8:D6:D3:2B:3B:65:F5:61:A9:11:A0:29:24:85:7F:9B
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e31382e302f32342d3234203d3e203232363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:33:9c:d2:7a:f3:e4:02:44:97:8d:d7:a2:84:22:de:c7:b7:
         69:b2:c6:a5:ad:55:4c:fe:81:8e:0d:cb:67:f0:69:94:53:ea:
         7c:86:13:f9:0c:91:2e:05:bc:5c:8a:3f:2e:f2:b1:69:ca:e0:
         ca:ee:1b:82:60:7b:e2:5b:d0:63:0b:30:e8:0a:a4:e3:2c:2d:
         64:22:01:15:1e:74:8f:61:46:85:bc:8c:93:b4:37:51:39:a5:
         da:d2:8a:0a:61:9e:ff:3e:84:e3:7b:1d:9b:21:b6:da:85:b2:
         e1:c2:a6:8d:30:fb:16:f5:79:39:bd:99:a9:ee:db:f1:b9:16:
         d0:a5:2a:b4:6f:d6:53:85:9f:3e:77:ac:0d:29:1b:05:23:9e:
         6f:c2:40:9c:b3:c5:f1:98:2b:af:e9:b1:32:45:7e:ac:58:8f:
         c3:53:d2:d5:10:6b:b9:73:b4:3c:eb:88:da:73:19:35:b9:51:
         01:ea:5f:15:79:b3:4f:2f:04:fa:9e:fe:56:e0:64:e7:d5:b1:
         f8:d0:5f:3e:c4:a0:cc:9b:76:eb:69:c0:24:59:fe:d3:40:bf:
         4d:b4:da:78:ec:16:31:ce:98:ca:8c:e5:81:66:50:7a:35:20:
         c9:51:2e:23:3c:ff:b6:7d:92:ec:c8:95:9a:10:60:13:a3:9b:
         69:ae:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:30 2025 by rpki-client