Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39332e302f32342d3235203d3e203130363937.roa
File:                     3230312e3233342e39332e302f32342d3235203d3e203130363937.roa (raw, json)
Hash identifier:          muQZstYoOvXQNPqiql9uVipg7v4T5zhV4aoTAMH7Cww=
Subject key identifier:   4D:D0:7B:56:31:6E:5B:44:D4:53:3E:1B:B2:F8:C8:07:59:91:45:6F
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       374380FF35EE3C6F05F46F163DF0F1A7D4A74C34
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39332e302f32342d3235203d3e203130363937.roa
Signing time:             Tue 04 Feb 2025 18:41:44 +0000
ROA not before:           Tue 04 Feb 2025 18:36:44 +0000
ROA not after:            Tue 03 Feb 2026 18:41:44 +0000
asID:                     10697
IP address blocks:        201.234.93.0/24 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:43:80:ff:35:ee:3c:6f:05:f4:6f:16:3d:f0:f1:a7:d4:a7:4c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:44 2025 GMT
            Not After : Feb  3 18:41:44 2026 GMT
        Subject: CN=4DD07B56316E5B44D4533E1BB2F8C8075991456F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:34:99:d1:a9:3d:3c:33:4f:81:8a:cc:cd:
                    f4:7c:3e:36:65:0c:4c:2d:72:f6:0c:ac:03:a2:de:
                    01:24:73:ea:16:86:f3:f0:62:2e:92:3b:ce:95:30:
                    a4:e1:b8:89:38:f2:6a:1f:07:1b:8d:e0:9d:e5:a5:
                    0c:4f:4e:27:b4:d5:d6:ec:5d:c4:a6:60:71:e2:5b:
                    ee:e3:a5:22:95:c1:69:5b:66:67:cf:91:ae:17:78:
                    a0:ce:a7:6d:4b:34:a4:a3:64:14:41:32:d0:c9:a8:
                    6b:31:31:dd:af:ba:37:28:e0:e8:36:06:d3:b1:0e:
                    55:3b:5f:ff:74:44:e2:21:14:66:f3:1c:73:80:5b:
                    cd:16:e2:6c:88:29:61:26:c4:32:bf:4c:76:84:4c:
                    fc:3a:5e:50:b7:ef:33:d2:d4:92:d1:fd:9b:e6:8a:
                    77:c6:6e:ef:62:a8:a6:73:01:af:fe:30:87:57:31:
                    04:88:0a:6e:ea:a8:da:79:db:a7:28:bf:dc:d6:ae:
                    65:18:84:4d:11:7c:c1:d2:61:2d:39:ac:1d:48:f7:
                    c8:d6:7a:2c:f9:16:1a:46:40:86:81:70:33:99:46:
                    5b:58:98:53:a3:4b:25:11:12:c9:f4:c8:8e:69:19:
                    fb:27:c7:4e:ca:54:05:0a:f9:01:69:a4:0a:b0:3c:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D0:7B:56:31:6E:5B:44:D4:53:3E:1B:B2:F8:C8:07:59:91:45:6F
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e39332e302f32342d3235203d3e203130363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.234.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:34:b0:82:75:62:9b:2b:2b:59:8a:68:6a:a7:65:65:5f:
         83:85:2f:e2:e6:66:0b:c1:b7:aa:aa:2f:a7:a2:5c:aa:28:99:
         4c:b2:80:a7:fb:2d:2f:ff:80:ad:c2:9d:99:ec:d1:59:a3:9a:
         10:9d:f4:f7:02:53:18:39:65:1d:0a:7c:d1:f1:50:29:f5:08:
         20:02:4b:86:f3:92:00:37:bd:7d:70:b3:45:93:59:06:e8:10:
         ee:81:cf:b3:49:cf:b1:b2:8e:1a:e7:c7:07:7d:8f:00:aa:33:
         f7:5f:c1:62:8c:3c:b4:4c:29:2c:cb:51:f6:e7:84:ec:91:3e:
         d4:3d:bb:58:e2:01:f9:81:5f:e5:57:51:77:01:58:7a:83:8c:
         fe:f1:dd:d1:75:d9:6e:33:21:85:20:66:58:7a:5c:d9:53:96:
         d6:c5:5a:6b:79:0e:bd:86:01:ab:7c:9f:2d:5c:07:1a:9d:5f:
         80:71:64:4e:02:52:31:b4:3f:a9:96:46:88:99:a6:7f:1f:d8:
         b1:68:52:47:07:6a:27:d2:34:c9:3c:60:bd:28:56:14:2a:32:
         a6:37:21:4b:bc:ac:43:45:1f:d4:08:89:f9:ee:ed:6e:f9:bc:
         3f:08:2d:c9:b4:96:ef:ac:7c:b9:3e:32:12:2e:6d:b2:4f:84:
         eb:f6:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:14:27 2025 by rpki-client