Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e31362e342f33302d3330203d3e20323636373639.roa
File:                     3230302e35352e31362e342f33302d3330203d3e20323636373639.roa (raw, json)
Hash identifier:          DGtRokeACi82IY+CK5B1jgOs8h83kvyGwUPmu3SZDfw=
Subject key identifier:   16:84:5F:0E:44:A2:91:77:75:F4:0E:4B:8F:06:FD:19:ED:D7:47:83
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1B384C9450918EACF313334883782C818F143607
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e31362e342f33302d3330203d3e20323636373639.roa
Signing time:             Tue 04 Feb 2025 18:41:21 +0000
ROA not before:           Tue 04 Feb 2025 18:36:21 +0000
ROA not after:            Tue 03 Feb 2026 18:41:21 +0000
asID:                     266769
IP address blocks:        200.55.16.4/30 maxlen: 30
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:4c:94:50:91:8e:ac:f3:13:33:48:83:78:2c:81:8f:14:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:21 2025 GMT
            Not After : Feb  3 18:41:21 2026 GMT
        Subject: CN=16845F0E44A2917775F40E4B8F06FD19EDD74783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:23:77:24:19:68:66:5f:f2:c4:8d:2f:0c:a3:
                    7f:e4:59:88:1c:97:c3:95:84:be:5d:96:97:24:c9:
                    b9:a7:cf:b5:60:59:4e:97:10:ab:0f:f5:60:04:84:
                    40:98:bb:32:d9:51:dc:a8:cd:ba:66:db:a3:26:d4:
                    71:1c:12:2b:ed:7e:2b:79:a3:4f:5d:e5:09:66:d8:
                    b6:07:9b:3c:06:f6:ad:4e:8b:5a:ea:63:47:b0:a1:
                    f9:ea:f6:7e:49:50:0c:43:f6:bd:f8:65:1c:41:82:
                    ef:db:26:1c:ec:07:f3:6e:10:ce:48:94:fb:2b:72:
                    5b:cf:75:0c:16:c3:ed:74:5d:b5:4d:45:e1:20:d6:
                    ad:0d:6a:7e:92:37:c0:fc:66:fc:84:98:e2:c1:48:
                    a7:04:4a:68:59:f3:12:56:85:72:65:27:0f:e5:ad:
                    db:af:ea:ba:75:e7:71:54:70:2d:51:63:ff:f2:24:
                    f5:60:9a:a0:68:31:5f:2b:87:66:b9:68:df:98:28:
                    99:b4:e0:70:50:2a:10:c2:78:5e:d3:12:59:1e:e7:
                    32:4f:83:77:0d:df:4a:fc:cc:06:71:86:67:eb:a9:
                    5a:d6:9c:6a:69:70:18:b1:3f:df:e1:05:16:94:d8:
                    98:5f:71:48:47:48:f8:71:9b:8a:e8:38:4a:31:f9:
                    4c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:84:5F:0E:44:A2:91:77:75:F4:0E:4B:8F:06:FD:19:ED:D7:47:83
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230302e35352e31362e342f33302d3330203d3e20323636373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.16.4/30

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:8e:73:de:d0:b2:07:d7:c9:32:b0:36:9b:77:bf:0d:94:
         0a:42:3b:2c:68:88:cd:b8:77:96:cc:df:41:b0:ff:75:94:0d:
         bf:30:15:67:28:83:21:8f:4c:b9:91:0b:16:1d:24:43:f8:88:
         e2:0a:db:89:9a:0d:2f:4f:42:8e:3b:7d:e3:70:5a:17:b5:c3:
         5b:28:c6:31:93:74:96:9f:cd:21:6c:73:aa:e0:b4:99:9f:23:
         fb:de:b9:e8:92:1d:f6:af:c4:f1:57:35:21:df:53:9f:c0:bf:
         ea:6c:d5:ea:a9:24:e2:1e:33:54:06:81:64:07:b6:fc:75:da:
         b1:e1:0c:1f:fa:15:6d:d4:56:23:b7:42:4f:63:8f:8c:92:f1:
         4a:47:bc:ad:bc:a4:b0:95:be:89:2c:2b:a6:80:84:5b:1b:24:
         a0:6b:83:c0:be:db:a8:23:d5:d0:c6:e5:2c:9e:94:73:f1:9e:
         54:83:90:b2:b5:11:62:61:e2:6a:6d:e8:1c:f9:4e:0e:46:ae:
         ca:29:68:bb:dd:42:a5:e0:61:c7:6a:b5:f6:ec:1c:7c:75:58:
         f6:1a:92:14:7d:18:f4:29:16:21:f4:00:59:ba:a4:5e:8a:97:
         b0:69:5d:d5:8f:24:33:e4:0a:5a:e3:b1:3e:7a:ec:ac:27:b6:
         d1:25:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:20:54 2025 by rpki-client