Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa
File:                     3230302e31342e38312e302f32342d3234203d3e20323730303133.roa (raw, json)
Hash identifier:          8Pn+YpOifYzii52fkHdQv658tyAfyWq0GrfOKz5lev8=
Subject key identifier:   48:5D:AD:F4:F9:60:A2:57:6A:5C:80:04:92:A7:8E:57:FB:7C:AE:6F
Certificate issuer:       /CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
Certificate serial:       553A9B56E330197F3D881E4FF799023BE6876087
Authority key identifier: AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa
Signing time:             Tue 04 Feb 2025 18:44:10 +0000
ROA not before:           Tue 04 Feb 2025 18:39:10 +0000
ROA not after:            Tue 03 Feb 2026 18:44:10 +0000
asID:                     270013
IP address blocks:        200.14.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3a:9b:56:e3:30:19:7f:3d:88:1e:4f:f7:99:02:3b:e6:87:60:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF206703EB403B90C2C766F1557E43A0F0AC3C11
        Validity
            Not Before: Feb  4 18:39:10 2025 GMT
            Not After : Feb  3 18:44:10 2026 GMT
        Subject: CN=485DADF4F960A2576A5C800492A78E57FB7CAE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:e9:ce:f0:d6:5c:d7:8c:19:76:50:5d:22:
                    c2:be:e2:53:cc:ca:6f:f8:e3:41:45:a5:60:2e:6b:
                    b6:f0:d5:1b:ef:e8:2e:bd:49:10:11:05:26:2b:65:
                    bd:f2:bf:03:61:0e:92:4e:0e:46:a2:47:09:5a:4e:
                    78:a4:78:d3:43:0e:2f:77:65:28:93:18:77:7b:7e:
                    d3:a4:6f:45:58:d3:de:8a:93:b7:37:53:8d:0a:f6:
                    d3:58:45:0b:05:7c:50:45:d5:d2:41:d4:cb:9d:d0:
                    e6:0a:e7:d3:45:b9:4c:81:14:65:0a:ba:de:7c:f5:
                    dc:3f:30:d2:dc:72:08:24:0f:47:cc:92:12:89:58:
                    38:64:4e:1e:9f:d8:04:1c:01:5e:eb:a2:8a:ac:66:
                    5a:2b:9c:d5:3b:ea:72:ac:2d:3c:92:0c:72:72:93:
                    6d:ce:78:bc:c1:09:c8:50:b5:23:74:6a:4f:0d:13:
                    58:a0:4f:8c:c6:af:a7:3e:e4:c7:c5:9a:cc:26:3f:
                    b2:ec:49:b9:07:2e:68:b1:03:6f:f7:36:15:ee:cb:
                    89:00:40:63:a4:16:53:4b:70:af:3d:3c:42:37:a6:
                    b3:14:bf:ea:c1:8d:43:27:87:f2:cd:cc:54:d7:31:
                    26:2b:54:3e:75:37:cf:57:7d:fd:c2:f4:1b:da:39:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:AD:F4:F9:60:A2:57:6A:5C:80:04:92:A7:8E:57:FB:7C:AE:6F
            X509v3 Authority Key Identifier:
                keyid:AF:20:67:03:EB:40:3B:90:C2:C7:66:F1:55:7E:43:A0:F0:AC:3C:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF206703EB403B90C2C766F1557E43A0F0AC3C11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/06E64E18233528A5D068C3F048C0B1888C5CFDAEB3647457AA1B09F1D3593827/0/3230302e31342e38312e302f32342d3234203d3e20323730303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:38:3a:15:57:a6:eb:13:be:25:ba:e4:b9:95:46:66:71:
         58:0e:7c:98:2d:c3:3d:45:8c:b6:28:2e:16:90:58:0e:07:bd:
         b7:92:6c:a4:d2:02:cb:8b:2b:fa:ba:5f:c2:5a:d3:8c:7a:05:
         23:4c:0a:8b:99:ec:8b:5f:da:c5:46:09:ad:cf:0f:55:b5:8a:
         17:3e:25:c5:5e:54:ad:2d:1e:cd:bd:66:a5:ab:ec:85:ed:70:
         32:ee:9e:87:7c:8a:be:a7:2b:59:f4:65:35:bd:30:ea:02:ac:
         0d:9a:a1:42:da:cb:90:f7:f4:3a:da:c2:0a:6e:5b:0f:1a:99:
         8c:2a:da:12:7d:d9:f3:7f:01:f6:ee:23:7e:9b:3b:b8:cb:92:
         46:5b:8b:e8:0a:3f:34:f2:d9:00:c8:7c:ad:b1:1e:03:da:fe:
         64:e5:7c:8c:3f:be:9c:61:cb:2f:8b:59:7b:20:5b:ce:34:5c:
         da:22:4f:bf:b4:09:04:3c:1f:35:21:0b:af:be:83:c0:25:17:
         e2:3f:24:a1:37:bf:05:be:6a:cd:40:c3:b2:33:48:ed:0c:6a:
         d3:80:4a:ce:a7:4c:e7:93:99:bb:e3:cd:2f:dd:69:48:56:cd:
         eb:3b:47:e0:4f:15:ef:1e:30:46:c6:ee:84:79:07:10:e6:94:
         b0:00:a4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:16 2025 by rpki-client