Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e332e302f32342d3234203d3e20323633373336.roa
File:                     3230302e33312e332e302f32342d3234203d3e20323633373336.roa (raw, json)
Hash identifier:          /i0pWXkhUjmpT+gs+d7OT8dBTfr19afFGRDExJZMt2Y=
Subject key identifier:   49:36:CA:D6:F8:C1:73:26:F7:82:C7:EF:73:D4:A6:80:8E:25:E8:65
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       267B0BD670815595A555B913C3E3923BD646FECD
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e332e302f32342d3234203d3e20323633373336.roa
Signing time:             Tue 04 Feb 2025 18:41:21 +0000
ROA not before:           Tue 04 Feb 2025 18:36:21 +0000
ROA not after:            Tue 03 Feb 2026 18:41:21 +0000
asID:                     263736
IP address blocks:        200.31.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7b:0b:d6:70:81:55:95:a5:55:b9:13:c3:e3:92:3b:d6:46:fe:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:21 2025 GMT
            Not After : Feb  3 18:41:21 2026 GMT
        Subject: CN=4936CAD6F8C17326F782C7EF73D4A6808E25E865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ea:11:2b:9e:1f:9c:bf:81:90:8c:a7:b9:a9:
                    e2:44:b7:dd:49:99:d2:f5:20:d4:0a:e0:e6:da:f7:
                    f8:c2:bf:02:04:ba:35:c9:9a:a1:7b:13:b6:d2:5c:
                    6d:ef:61:c2:43:1e:5f:67:c1:ee:b1:7b:90:85:49:
                    e9:c3:d8:43:af:a3:1d:c6:13:23:e8:ea:a9:21:99:
                    ab:ce:62:e6:3f:0e:1f:36:48:0e:46:42:56:50:1c:
                    da:16:86:40:10:50:3f:2d:c3:c3:bf:ad:a9:e8:c5:
                    04:78:be:3a:f8:15:9c:74:a8:11:ed:a0:26:47:6e:
                    07:83:45:0c:8e:cc:56:2f:42:cb:4a:b3:cf:18:85:
                    cc:0e:f3:b6:cb:7e:6e:b5:00:d3:5d:8a:cc:e4:c9:
                    50:bd:b3:f3:61:b4:60:c6:b6:2e:fe:73:cc:44:e0:
                    8b:44:06:a9:d8:d7:5c:8c:b6:fd:5c:df:eb:ad:98:
                    d7:08:67:da:3c:6b:8b:a3:94:3a:8c:be:f0:59:8f:
                    94:a6:b1:22:4d:b7:35:9e:dc:c5:55:27:a9:b7:41:
                    53:35:53:ff:88:44:6c:e6:2c:61:68:31:af:1f:49:
                    86:94:9d:ce:c0:d5:d8:25:4f:8a:11:52:d6:8d:05:
                    6e:e4:93:0c:19:d6:87:1b:f5:08:21:6f:27:6a:6e:
                    2c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:36:CA:D6:F8:C1:73:26:F7:82:C7:EF:73:D4:A6:80:8E:25:E8:65
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e33312e332e302f32342d3234203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:4e:6d:2f:ae:33:ce:65:2a:d8:89:2d:98:00:26:99:4b:41:
         5c:c6:24:cf:20:8f:8f:90:19:6a:a9:19:35:82:a3:5d:b1:a3:
         94:bd:62:2f:a1:55:c0:17:6f:55:75:a4:82:6c:1b:56:db:b7:
         9c:68:ce:78:10:07:f7:64:d3:69:14:a2:ab:38:3d:6d:81:20:
         a4:e4:3a:d6:a4:b4:68:51:22:16:f7:c7:40:5c:f9:f2:d6:70:
         5f:bd:d9:97:f6:86:20:c6:1c:7b:cd:1a:ad:7a:e1:d1:03:ef:
         54:d0:eb:3a:0e:54:60:0a:d8:93:9d:50:14:87:36:e3:c1:38:
         c5:30:55:de:f8:af:46:58:b3:0f:b4:b4:73:06:56:46:32:f6:
         9a:86:1a:83:e7:8e:2b:31:13:69:05:3e:8a:44:4c:14:5f:ba:
         d4:c7:0d:c2:18:80:5f:ca:14:1d:65:b8:e6:43:29:4f:2b:45:
         03:cd:ce:be:00:bc:6a:d8:54:db:1d:a7:ab:e9:86:bb:b7:d4:
         69:c8:ef:60:f4:35:a3:12:df:63:c8:55:bd:b9:ca:d6:07:17:
         b5:a7:d6:29:3d:09:e8:ad:01:28:65:4a:b2:13:78:5b:64:0f:
         42:a4:17:32:87:5d:88:65:d0:78:b8:f1:4b:91:36:28:26:df:
         d4:4a:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:19 2025 by rpki-client