Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3233352e302f32342d3234203d3e20323633373731.roa
File:                     3230312e3233342e3233352e302f32342d3234203d3e20323633373731.roa (raw, json)
Hash identifier:          f7/9DlErxyHldgeeA6CDAQcTpEKDzqT6ZMzOAfX/Sig=
Subject key identifier:   1C:AA:31:FA:74:6A:4E:85:F1:7A:55:3F:A2:BF:B9:B3:0C:9A:4D:16
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       0825126AE228B8BE89142D319BACF6006F9DCEC1
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3233352e302f32342d3234203d3e20323633373731.roa
Signing time:             Tue 04 Feb 2025 18:41:38 +0000
ROA not before:           Tue 04 Feb 2025 18:36:38 +0000
ROA not after:            Tue 03 Feb 2026 18:41:38 +0000
asID:                     263771
IP address blocks:        201.234.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:25:12:6a:e2:28:b8:be:89:14:2d:31:9b:ac:f6:00:6f:9d:ce:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:38 2025 GMT
            Not After : Feb  3 18:41:38 2026 GMT
        Subject: CN=1CAA31FA746A4E85F17A553FA2BFB9B30C9A4D16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:61:49:15:c1:54:4f:48:be:17:aa:5f:03:
                    bd:20:e7:6b:62:ca:1a:06:b1:b5:e0:01:18:31:8b:
                    58:1b:35:9d:a0:65:b6:1c:73:d3:e4:26:f7:40:2e:
                    d4:e5:39:7e:89:a7:37:90:33:3d:89:46:a8:40:65:
                    2e:1b:e3:cc:df:c9:2d:fc:24:a0:a3:74:79:11:42:
                    73:12:a5:6d:73:97:c8:bc:44:57:6b:5c:59:04:6c:
                    77:80:65:c3:fd:3d:f2:c3:79:a5:74:98:d0:94:ea:
                    ad:5c:d6:ed:8b:a1:24:95:f4:86:09:a2:81:7b:7a:
                    f8:e7:20:b7:af:4a:1c:a0:2c:3a:b6:3f:1b:11:ac:
                    0a:f8:b8:bd:b2:71:27:42:e0:5f:b2:59:d1:e0:8c:
                    9a:39:d8:a5:56:1f:ba:02:b5:b1:8d:d1:8f:bc:9a:
                    f0:70:a9:ef:68:a5:95:64:b2:ac:ba:ab:2f:97:f2:
                    85:00:44:6f:52:ad:35:12:2c:1c:55:67:40:4b:86:
                    dd:06:3c:2a:43:dd:84:c4:4f:bd:45:ab:15:07:85:
                    04:0a:bc:0c:e5:79:07:8c:67:8d:3e:a0:65:fa:70:
                    77:d5:97:91:26:12:4f:4d:60:37:14:22:4c:97:66:
                    35:da:6f:7d:b7:02:9c:dd:7f:d8:2f:7e:b9:0f:6a:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AA:31:FA:74:6A:4E:85:F1:7A:55:3F:A2:BF:B9:B3:0C:9A:4D:16
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e3233352e302f32342d3234203d3e20323633373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:2c:64:59:56:2d:35:9d:53:5a:97:82:38:e4:09:94:55:34:
         df:e2:83:9a:46:05:89:4b:b2:94:09:ca:6b:ab:61:0a:d6:5e:
         e7:54:23:f9:cf:95:d7:ed:09:9f:34:cc:e3:f3:2c:5c:6c:03:
         d4:94:8d:fd:6a:f5:31:25:e1:ce:b4:6a:ff:ea:1e:1b:4a:90:
         f3:64:15:62:ae:bf:8b:ca:d5:ec:1e:df:63:2f:19:4c:bc:2e:
         cb:dd:27:b5:dc:28:c6:95:d8:f0:13:67:35:1f:73:b7:3f:55:
         d0:7c:a0:1c:44:6a:1c:b8:ad:b1:db:13:5c:34:da:11:e0:40:
         ef:5b:b3:2c:ea:8e:ad:8a:c6:55:91:dc:c6:89:58:1b:30:00:
         83:2e:e0:ef:5e:6f:c2:33:11:60:ff:17:69:0f:ba:53:90:b3:
         e4:da:0d:36:e0:18:0d:0d:cd:28:33:bb:5b:25:65:98:99:8f:
         f4:7c:bd:b1:62:dd:8f:18:4f:d0:cb:0e:6c:a0:a2:fa:b4:15:
         df:85:3e:55:9e:04:a2:d9:35:4e:5d:3c:a3:81:f1:e2:c4:40:
         af:54:8f:38:68:a5:62:2e:96:22:93:14:60:07:f9:d7:b1:29:
         b8:47:e9:4e:8f:57:6e:7f:bd:9a:62:09:86:e3:a8:c2:2d:64:
         7f:2b:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:38:37 2025 by rpki-client