Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e36392e39362e302f31392d3234203d3e203139343239.roa
File:                     3230302e36392e39362e302f31392d3234203d3e203139343239.roa (raw, json)
Hash identifier:          kbl5X8TiTaj6tdzMs6vmlcA6VqFNjKIO+q2K98q8gKM=
Subject key identifier:   35:89:65:D8:EB:51:60:51:73:91:B1:02:2A:AC:E0:B0:67:47:41:5F
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       483B720197CDB36CC5454D6124E55AA630FBD795
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e36392e39362e302f31392d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:53 +0000
ROA not before:           Tue 04 Feb 2025 18:12:53 +0000
ROA not after:            Tue 03 Feb 2026 18:17:53 +0000
asID:                     19429
IP address blocks:        200.69.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3b:72:01:97:cd:b3:6c:c5:45:4d:61:24:e5:5a:a6:30:fb:d7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:53 2025 GMT
            Not After : Feb  3 18:17:53 2026 GMT
        Subject: CN=358965D8EB5160517391B1022AACE0B06747415F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:fe:10:90:1d:2c:fd:84:8d:ea:45:f8:31:
                    ec:db:f0:bf:65:e0:4f:dc:13:f7:31:db:b6:b9:16:
                    7a:c8:53:b7:8d:d8:84:bb:8c:b7:47:8c:d5:04:61:
                    a5:c4:6a:6b:3d:5b:bc:47:37:ac:c1:f4:92:aa:ac:
                    44:c9:ac:a3:8b:99:e5:7c:b7:31:14:d4:08:44:71:
                    d7:df:af:b0:4a:29:33:1c:2a:a3:03:bb:59:ef:65:
                    75:bb:9e:eb:02:e2:41:60:ab:d0:00:b1:80:ce:d1:
                    3e:b7:9f:8b:0d:0f:7b:39:5b:a1:4f:90:5f:9d:fa:
                    27:4e:f6:23:8d:1d:80:7c:ff:48:34:26:4e:2b:f3:
                    83:8c:b0:bd:6a:96:1b:52:a7:61:e0:d0:94:f1:c8:
                    45:f2:2a:60:27:25:aa:61:66:da:12:74:3d:b6:96:
                    58:83:be:7a:99:f3:c6:9e:4f:4e:cb:e6:9d:7b:64:
                    da:99:aa:06:47:ce:28:75:8a:8f:83:78:85:de:c0:
                    e1:cf:73:ca:0d:75:e8:2d:13:b6:57:24:44:f7:8c:
                    aa:5c:68:7c:1b:13:4a:75:41:63:4b:6f:a2:3f:52:
                    b5:be:eb:b5:a6:93:da:7b:d8:d2:d9:ab:f2:09:7b:
                    27:6f:5c:47:13:66:01:a5:99:58:5d:42:b8:9f:86:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:65:D8:EB:51:60:51:73:91:B1:02:2A:AC:E0:B0:67:47:41:5F
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3230302e36392e39362e302f31392d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:00:10:fb:69:be:2a:eb:07:52:e3:64:91:db:4e:1e:56:ba:
         4f:8b:47:db:74:80:7a:b3:6c:74:5c:87:c1:a9:c8:ff:1a:4f:
         e2:81:95:fc:26:cb:47:99:5d:b6:42:6f:f8:0d:75:cf:96:b8:
         c5:f1:85:8f:60:46:c4:98:70:a7:93:72:01:ed:bd:f6:6d:1a:
         82:a0:49:2a:ef:7b:6b:04:b1:91:a8:31:0a:ce:16:e0:e3:78:
         dd:01:42:c5:53:e6:e6:5b:46:66:03:58:53:40:7a:ac:c6:13:
         47:97:0b:75:4c:5f:71:3e:1a:ca:c0:5f:86:ac:7b:ab:18:e2:
         d7:52:09:23:df:88:a8:2a:45:ff:08:9d:64:41:10:da:9b:24:
         21:75:c9:80:0e:dc:cb:11:7e:3e:5b:b3:81:a0:dc:23:59:6f:
         31:41:d3:fc:98:57:f5:5e:e5:29:fe:db:50:64:1f:c5:10:ae:
         6d:3d:f7:9b:fa:8b:52:22:02:98:9a:fc:f9:2c:1e:9d:a0:d6:
         8b:8c:e3:3a:13:8f:43:1b:68:3f:dc:40:bb:9b:b5:7b:fc:48:
         9c:ce:d6:f6:cd:7d:d1:0d:cc:05:f2:90:72:18:6f:85:04:74:
         43:9d:42:56:c0:7d:9b:00:39:f7:f3:12:b8:5d:94:2a:c6:4a:
         3a:ef:d7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:30 2025 by rpki-client