Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa
File:                     3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa (raw, json)
Hash identifier:          t9rv3wibFrwwAFGtDFN5EvH6RJjtA5jIwjTu63Ly/h0=
Subject key identifier:   2F:52:1D:3E:96:CE:02:8C:D1:52:E8:98:0D:53:08:EC:17:01:FA:AE
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       57E3F338D56C5A08C9C9B1C273F5F47BC4A8EEB2
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa
Signing time:             Tue 04 Feb 2025 18:41:22 +0000
ROA not before:           Tue 04 Feb 2025 18:36:22 +0000
ROA not after:            Tue 03 Feb 2026 18:41:22 +0000
asID:                     22698
IP address blocks:        201.234.187.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:e3:f3:38:d5:6c:5a:08:c9:c9:b1:c2:73:f5:f4:7b:c4:a8:ee:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:22 2025 GMT
            Not After : Feb  3 18:41:22 2026 GMT
        Subject: CN=2F521D3E96CE028CD152E8980D5308EC1701FAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c4:af:e0:29:34:3d:ff:2e:ad:52:8f:ae:92:
                    42:2a:9c:35:38:f8:df:f4:81:12:f6:34:86:74:95:
                    ad:a3:36:bb:1e:85:c6:bb:6a:39:70:1a:f5:51:64:
                    5f:0b:1e:1e:29:64:4c:52:22:e5:5b:5e:82:36:eb:
                    8e:be:3c:7f:d8:f3:f0:94:9d:4e:66:53:71:ab:36:
                    63:07:a0:ee:7b:b7:d3:28:7c:4c:43:ce:8c:cc:24:
                    e6:96:89:e1:45:46:74:39:29:34:53:fe:75:95:27:
                    69:69:d6:2a:01:98:69:ff:5d:f3:29:25:ce:e9:bd:
                    d9:79:f3:7d:f2:e7:54:bf:59:f1:6a:26:0b:86:68:
                    0e:d2:7d:54:22:82:d4:16:bb:bc:12:bf:50:92:42:
                    de:2d:c2:66:3c:a7:0f:12:8a:c7:23:3d:54:a9:79:
                    1d:a9:b6:ed:f8:a2:86:08:4a:25:02:dc:8b:e0:30:
                    33:db:40:13:32:85:e7:73:d4:0c:2c:d0:1e:2a:51:
                    4e:d0:89:83:6d:61:84:91:ea:e3:84:36:36:9a:b9:
                    33:97:c7:0b:2a:d9:ef:38:11:95:5d:db:3c:44:65:
                    92:e7:28:8a:21:08:6a:77:b4:77:71:f1:bf:05:d6:
                    6b:98:dc:7a:a8:66:ff:b5:86:d2:e5:25:3b:99:9e:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:52:1D:3E:96:CE:02:8C:D1:52:E8:98:0D:53:08:EC:17:01:FA:AE
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3138372e302f32342d3234203d3e203232363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:2b:1a:44:1f:13:04:9a:19:80:a8:04:cb:87:f6:3c:39:d5:
         ea:32:87:c8:ff:d8:2c:7a:05:19:57:2c:31:1f:ff:dd:96:32:
         27:30:c1:9f:80:69:78:2f:a8:44:65:8a:22:fd:79:8d:07:0c:
         25:09:28:14:9a:f3:d5:1c:76:bf:64:42:64:65:27:13:7e:1b:
         35:04:67:9b:b3:67:15:13:cf:2b:84:92:da:cf:8f:47:b2:58:
         df:2e:2e:72:fb:2f:ef:a2:ac:4c:85:70:89:de:0d:57:56:a0:
         a5:01:64:25:06:91:33:a4:9a:02:2c:36:1f:33:c7:68:b4:fa:
         be:0a:6b:ca:4d:62:62:86:3c:2a:0f:e4:1e:d2:4b:9b:26:6d:
         c7:22:8b:67:ea:1b:d9:5d:73:5b:b6:2f:8e:b1:d6:f8:ef:77:
         8a:10:59:64:02:3a:2f:48:0e:49:f4:87:5c:38:9d:cd:6e:0b:
         32:b2:3d:2e:52:95:4a:60:4e:27:c4:bf:86:ad:f6:7c:14:14:
         cb:91:fb:8d:d5:5f:85:ae:71:be:13:03:97:86:9a:99:82:b7:
         52:c3:b4:9a:bd:ba:b0:63:4b:ce:7e:f9:ad:bf:13:03:e6:78:
         9b:97:22:0a:f2:78:83:34:1b:7c:6a:0b:85:13:f1:71:25:47:
         75:04:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:34 2025 by rpki-client