Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33382e302f32342d3234203d3e203231373536.roa
File:                     3230312e3233342e33382e302f32342d3234203d3e203231373536.roa (raw, json)
Hash identifier:          2A93iiDbmiIgsE/XeENCJxrKko6sWg3OaW87jriBn4g=
Subject key identifier:   90:93:3F:E6:A3:9C:83:54:0B:C2:40:3E:EB:34:C4:9E:01:F5:F6:51
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       1B25B72B2205CF2F9EC879588316D58D0C3049FF
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33382e302f32342d3234203d3e203231373536.roa
Signing time:             Tue 04 Feb 2025 18:41:48 +0000
ROA not before:           Tue 04 Feb 2025 18:36:48 +0000
ROA not after:            Tue 03 Feb 2026 18:41:48 +0000
asID:                     21756
IP address blocks:        201.234.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:25:b7:2b:22:05:cf:2f:9e:c8:79:58:83:16:d5:8d:0c:30:49:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:48 2025 GMT
            Not After : Feb  3 18:41:48 2026 GMT
        Subject: CN=90933FE6A39C83540BC2403EEB34C49E01F5F651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:62:9e:ac:54:ed:71:59:20:d5:79:13:2e:
                    ce:22:4a:7f:ee:01:4c:6e:fa:30:c2:a7:63:8b:91:
                    e6:ad:c6:4e:e4:2c:04:f5:65:a2:c8:db:f7:cf:9c:
                    32:e0:0a:f3:18:0a:bd:97:23:14:86:75:ce:b7:db:
                    99:b2:af:a7:f7:b6:86:a2:dd:f3:84:8b:49:ae:a3:
                    89:c4:58:fd:28:ae:c1:41:a8:04:06:7e:2d:9d:dc:
                    31:2d:8d:1b:ea:78:2b:ce:4e:07:4a:52:16:38:fa:
                    c9:95:da:7e:1d:b3:76:72:f6:ca:40:7a:19:2e:0d:
                    14:da:7d:95:12:fd:5f:74:fa:6b:bb:99:09:c3:89:
                    22:e7:b9:cb:99:a7:11:d2:2d:1a:18:d7:de:d0:58:
                    00:75:61:36:a1:c4:2b:9d:f1:70:ab:ea:93:9f:75:
                    ac:5f:fe:89:4a:f9:1b:37:f6:c3:cd:eb:20:2c:b6:
                    ad:28:8c:d4:f3:eb:b6:4c:0c:03:ae:56:4a:7b:91:
                    89:0f:68:12:80:ee:99:35:02:c5:31:bc:6e:12:7c:
                    9c:6f:84:8c:5b:7b:e4:c3:57:4b:fb:21:6e:92:90:
                    e6:f5:3a:0e:d3:af:92:c1:46:ed:b2:f9:46:cb:af:
                    c4:e2:b6:50:7f:be:4f:66:e5:b9:ef:a4:bb:1f:d8:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:93:3F:E6:A3:9C:83:54:0B:C2:40:3E:EB:34:C4:9E:01:F5:F6:51
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33382e302f32342d3234203d3e203231373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:2f:46:10:da:52:24:89:28:de:0f:1e:b4:86:97:57:02:
         25:57:3f:a0:07:99:ca:ea:08:15:89:9c:a2:ba:aa:8c:e3:38:
         2b:57:37:36:0c:85:a5:90:98:0d:a8:31:ca:ff:25:c6:68:26:
         19:49:61:4e:bc:9b:ac:14:04:54:3c:d0:85:8a:e0:e5:ca:6e:
         34:11:5c:7b:4c:34:e2:f6:32:87:8e:44:96:3b:06:65:19:93:
         fc:c5:e1:09:37:44:ad:ba:5a:df:ff:30:f8:89:b1:cd:47:33:
         a3:e1:bc:be:79:08:03:a7:8f:84:23:a3:cd:99:c9:f4:85:87:
         93:45:17:b9:cc:84:b6:a6:9c:96:02:f6:a7:0f:d0:df:4a:c0:
         bd:dc:80:81:e5:fc:ad:bc:aa:07:0c:2d:95:82:5e:8f:79:d3:
         2b:06:c4:05:b2:e7:a4:96:70:09:32:e3:0f:e0:a7:5a:98:bb:
         5d:4a:ec:10:04:e6:b1:b6:ce:aa:c2:c7:b3:5b:ff:d2:45:8b:
         6a:fe:b5:03:0b:1f:9e:d9:d7:a8:ea:ab:c5:36:7f:89:72:ab:
         00:0a:54:5d:71:67:ad:b2:7d:5d:ab:04:27:4f:4b:99:92:61:
         c0:0a:6d:2d:14:15:d8:b3:81:10:ff:8e:44:03:89:5c:21:d3:
         41:d1:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:38:47 2025 by rpki-client