Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3131332e302f32342d3234203d3e20323637383135.roa
File:                     3230312e3233342e3131332e302f32342d3234203d3e20323637383135.roa (raw, json)
Hash identifier:          Dpb+qUblAm2EzGJzB3dHw950YDIbday+CNCW1YUQye0=
Subject key identifier:   EA:29:95:B1:D4:04:70:82:D8:AB:C9:AF:DE:3C:44:9E:A9:AC:00:0C
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       114A511792DC76362797AF935A3F3E52BD4ABD6B
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3131332e302f32342d3234203d3e20323637383135.roa
Signing time:             Tue 04 Feb 2025 18:41:42 +0000
ROA not before:           Tue 04 Feb 2025 18:36:42 +0000
ROA not after:            Tue 03 Feb 2026 18:41:42 +0000
asID:                     267815
IP address blocks:        201.234.113.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4a:51:17:92:dc:76:36:27:97:af:93:5a:3f:3e:52:bd:4a:bd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:42 2025 GMT
            Not After : Feb  3 18:41:42 2026 GMT
        Subject: CN=EA2995B1D4047082D8ABC9AFDE3C449EA9AC000C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:e9:e7:22:58:e0:2a:cd:b7:1d:50:b9:c6:
                    18:38:ba:1c:5d:d5:1d:ad:fc:88:d1:0e:95:40:fa:
                    59:c4:93:82:c3:f1:2a:24:e9:c5:3c:2d:64:10:49:
                    d3:a5:98:5d:7d:5d:30:50:f1:61:63:c2:11:1a:ec:
                    b6:78:98:69:41:e5:8a:a3:85:95:bf:80:49:c4:37:
                    93:ae:3a:64:79:ef:2e:9b:ae:8a:08:41:1d:15:a4:
                    b2:d9:f3:d9:bd:df:46:cc:25:db:92:62:ae:fa:ee:
                    22:7a:4e:f1:a0:17:5b:c5:91:b2:f2:1b:53:b3:ff:
                    ad:0c:d7:e4:41:c4:c7:b8:d5:99:bd:45:4b:96:85:
                    d1:97:ce:3b:16:bd:86:1b:98:cc:4a:7b:8b:23:67:
                    d6:3d:a9:12:f6:e8:40:e3:72:5d:99:76:f6:f8:e5:
                    71:94:a0:df:95:ad:5a:f5:2b:cf:41:d5:27:81:14:
                    9c:cf:1a:bc:fe:67:6b:01:76:63:51:df:14:eb:e2:
                    ca:d3:1f:1a:68:44:78:49:bb:ae:81:c6:1c:00:aa:
                    29:1f:1c:84:8b:f5:e2:4f:88:91:20:96:0a:62:8f:
                    f8:cf:a7:0c:7c:2a:a5:f8:8c:0f:f2:ba:c0:71:7a:
                    d0:2b:ca:ca:41:cf:b4:24:92:4a:ba:b2:e1:90:f8:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:95:B1:D4:04:70:82:D8:AB:C9:AF:DE:3C:44:9E:A9:AC:00:0C
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3131332e302f32342d3234203d3e20323637383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:92:b1:35:e3:0d:d6:e1:2b:2a:02:60:26:91:ea:9c:7b:
         bc:b3:7e:1a:6a:00:29:41:3e:01:f2:64:c4:5c:dc:71:c5:64:
         97:a4:ca:63:da:9e:d4:a5:46:16:6a:e3:85:8d:25:d8:87:f1:
         7e:61:19:62:18:38:e2:62:a0:c9:70:7f:58:7e:1d:83:f2:82:
         fb:fd:28:39:eb:80:23:38:aa:9a:e8:d5:35:3c:43:28:4e:e1:
         84:10:08:bb:bb:30:b0:90:06:50:9a:32:d6:74:63:11:30:f1:
         34:34:d5:1c:a4:60:6e:05:0f:3a:74:42:cc:d7:0d:01:11:a1:
         fb:04:e0:44:e6:ee:7a:8d:f3:fd:09:4d:76:10:50:11:24:2c:
         66:02:c2:be:38:0e:ab:c4:ec:5f:74:fa:ef:6b:ee:b5:d8:06:
         2c:82:65:78:9e:56:7e:3d:e4:94:de:67:c8:91:a4:c7:6f:39:
         9e:f6:62:3a:5b:e2:d3:a0:41:eb:91:b0:ea:8c:03:7f:b0:77:
         fd:4e:2b:84:da:dd:35:8d:da:c7:f8:d0:54:d1:e2:2d:cb:6d:
         93:cf:76:d3:30:70:22:df:76:a6:48:bc:57:aa:cc:b9:99:9f:
         31:23:61:8a:68:fa:8c:dd:22:6e:8b:e6:a0:f7:3e:47:32:ba:
         4f:d4:7c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:52 2025 by rpki-client