Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e3131372e302f32342d3234203d3e20323633373731.roa
File:                     3230302e34312e3131372e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          zqXxOARBB20Gqucz0LmslvQCOOWjvFDX1i8tRw3Ido8=
Subject key identifier:   F7:A9:B3:FA:FA:9C:34:3F:EE:B7:B2:16:EF:4C:B8:82:3B:3C:14:3A
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       62750A2615F09A7E663C97404C954C35FECB2FA3
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e3131372e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 04 Feb 2025 18:41:25 +0000
ROA not before:           Tue 04 Feb 2025 18:36:25 +0000
ROA not after:            Tue 03 Feb 2026 18:41:25 +0000
asID:                     263771
IP address blocks:        200.41.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:75:0a:26:15:f0:9a:7e:66:3c:97:40:4c:95:4c:35:fe:cb:2f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:25 2025 GMT
            Not After : Feb  3 18:41:25 2026 GMT
        Subject: CN=F7A9B3FAFA9C343FEEB7B216EF4CB8823B3C143A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:3c:39:47:cc:d3:17:a9:e7:60:dc:69:e6:
                    05:7a:70:20:0c:83:19:ae:86:79:87:03:7c:c9:19:
                    2e:f2:b0:0f:92:a0:bb:df:20:3f:3a:9b:08:bd:cf:
                    21:f9:af:c7:5b:d3:47:85:79:b7:79:db:24:bf:b5:
                    1b:af:82:a3:f8:af:c6:ce:fa:e0:3d:97:df:cb:2f:
                    02:5a:44:01:17:e5:38:d2:61:a9:62:0e:57:5f:94:
                    f0:b7:dd:e3:e0:0b:e5:8f:23:1a:c1:a3:c9:d6:1b:
                    7e:aa:1f:dc:27:bd:fc:25:d1:a3:a3:3e:0a:4e:07:
                    5f:4a:54:54:10:cc:b0:e4:55:35:1f:cc:53:a6:11:
                    fe:1f:15:dc:80:0a:81:c2:b5:79:9b:93:46:e4:ea:
                    e8:42:05:c9:40:40:5a:75:d7:4b:fb:1d:ea:aa:88:
                    e2:48:ba:41:1a:a3:76:42:21:a9:c5:95:55:dd:9f:
                    84:07:13:3f:f8:46:1d:75:52:e8:99:0b:19:44:bb:
                    0a:d2:ae:22:85:a7:d7:9b:98:e0:9e:14:ac:26:2a:
                    79:72:59:68:b9:bf:40:3a:93:4d:32:6f:16:1d:d6:
                    3b:4c:e4:7f:1d:05:83:74:fa:3c:9e:e1:01:c2:54:
                    6b:50:b6:de:6a:5e:6c:bb:7d:47:1e:4a:ff:af:12:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:B3:FA:FA:9C:34:3F:EE:B7:B2:16:EF:4C:B8:82:3B:3C:14:3A
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e34312e3131372e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.41.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:36:b1:03:3f:4d:1a:6c:68:05:b0:8d:da:7e:6f:3e:23:e0:
         cc:bd:5d:94:80:7e:c4:70:1f:57:eb:f4:3c:08:0a:f3:b6:60:
         6d:04:3a:29:54:a0:8d:d5:80:27:4d:b6:7a:cf:5a:85:be:94:
         20:60:55:a1:8d:d4:2f:e6:66:99:c7:b4:a6:5a:13:02:a2:c9:
         7c:d7:e9:4b:a1:db:39:b5:f9:e0:9e:32:35:92:58:4c:13:70:
         80:bd:a9:e8:b4:b7:08:4a:3c:56:81:13:f5:99:e7:a4:03:89:
         a5:e4:53:55:ff:e4:98:43:5c:0b:2f:a3:c5:f3:68:13:a9:16:
         f8:4d:58:b2:ca:bd:d4:5f:63:66:ba:94:2d:ab:d0:92:46:a9:
         fc:a2:8f:b4:68:cb:b5:4e:e0:50:23:1f:b1:48:78:b6:b8:a1:
         62:f8:4e:72:4e:5f:31:48:a2:55:e9:4c:76:48:cd:1b:e1:17:
         5f:d0:1f:61:dc:bb:8c:e5:06:1e:83:02:99:1d:42:7a:44:ab:
         98:c4:40:14:c3:3c:1b:1f:6a:ac:b6:ac:3d:bf:fa:5a:4d:16:
         ce:49:b3:3f:f4:5d:be:0f:8d:0a:c1:26:32:76:72:ad:46:34:
         e1:ee:6b:76:e5:81:79:63:2a:b4:24:21:d2:f9:0f:6b:70:9d:
         28:8b:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:41:07 2025 by rpki-client