Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136302e302f32312d3234203d3e203136363239.roa
File:                     3230302e34322e3136302e302f32312d3234203d3e203136363239.roa (raw, json)
Hash identifier:          rxJ0hf6+6odUwZScja8mEgL82Od/uplSbMr+hzcT7iQ=
Subject key identifier:   BA:96:6A:56:C4:A4:58:54:4E:6E:50:BF:96:D2:8F:25:6F:55:98:2D
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       31CDAAAF5E8878190D5284DAE8038CFD123A0F4E
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136302e302f32312d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:01:01 +0000
ROA not before:           Tue 04 Feb 2025 19:56:01 +0000
ROA not after:            Tue 03 Feb 2026 20:01:01 +0000
asID:                     16629
IP address blocks:        200.42.160.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:aa:af:5e:88:78:19:0d:52:84:da:e8:03:8c:fd:12:3a:0f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:01 2025 GMT
            Not After : Feb  3 20:01:01 2026 GMT
        Subject: CN=BA966A56C4A458544E6E50BF96D28F256F55982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3c:a2:b8:ed:6b:0e:ec:a1:c6:49:20:1c:eb:
                    07:e9:2a:49:91:08:56:57:08:a8:4e:91:97:ea:6d:
                    25:62:6d:96:f3:6a:79:5d:b8:13:b7:f2:12:0d:41:
                    e6:01:d8:93:10:e3:a1:aa:a4:9a:06:c4:bc:20:1a:
                    8c:21:91:bc:e9:dc:3a:38:bf:d9:ca:bc:d0:5a:67:
                    74:a5:35:87:b8:46:cd:47:e8:ff:ee:60:91:eb:18:
                    1a:a7:b8:05:3c:f2:44:4a:39:ee:0d:e0:3b:26:0a:
                    64:3e:56:fd:8a:5f:61:51:09:2a:2b:66:35:6c:26:
                    e0:db:5b:08:f2:92:bf:29:86:ea:6b:74:20:2e:64:
                    39:05:16:a0:f7:cb:0c:4e:26:b1:26:f1:42:63:55:
                    17:af:af:76:64:0e:6a:bc:d2:3e:2a:0e:a1:9d:e0:
                    c7:32:d5:4c:5d:5f:bb:58:eb:b6:c9:12:2a:ce:b0:
                    da:d1:de:9c:d1:43:30:fa:aa:32:b3:a1:68:99:aa:
                    cd:4f:1a:ec:21:22:15:da:0c:b5:c1:6e:f5:9e:7e:
                    ae:46:dd:32:2d:6e:3a:3a:0b:e3:13:52:1b:01:a0:
                    a9:55:d6:85:2c:05:04:1a:59:17:05:ea:de:2e:88:
                    8a:07:18:c1:1e:62:dd:aa:6d:51:e6:cb:c7:a1:1d:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:96:6A:56:C4:A4:58:54:4E:6E:50:BF:96:D2:8F:25:6F:55:98:2D
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3136302e302f32312d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:53:2e:93:42:08:55:54:76:bd:8d:bf:c2:3b:ed:80:52:
         8f:19:b9:61:7c:bd:e7:d2:6d:5a:70:bf:ec:0a:6c:50:f9:7b:
         98:cf:ce:82:fb:c0:63:79:3b:eb:1a:83:55:17:ed:75:98:c9:
         54:7c:13:38:42:5d:b5:f9:08:a5:9b:cd:de:45:0d:af:a8:5e:
         54:b4:3b:8f:5c:98:82:04:0f:f1:e1:3b:9e:92:21:26:ae:36:
         71:07:50:70:fa:30:86:68:d6:c1:bf:d3:fc:d0:4b:c8:9c:52:
         58:51:e3:d8:8c:5c:f3:1b:6d:b9:cd:62:4a:8c:38:d0:17:25:
         c5:31:a1:bc:da:a8:b1:93:94:f2:22:0a:aa:bc:81:6e:86:e7:
         dd:1a:d8:a7:16:47:36:79:5a:c5:94:4f:c7:86:48:c6:40:62:
         e9:f3:7c:bb:26:9a:6b:74:db:77:71:dd:46:b2:1e:9d:b1:85:
         f7:8a:84:02:bb:3b:23:39:bc:ac:ec:de:9c:56:f9:a3:a4:51:
         15:fd:c7:a4:71:11:df:89:9d:79:73:48:da:c2:16:94:ff:16:
         a4:48:0f:a0:b6:e1:c5:78:59:c7:30:7d:61:28:27:bd:d1:77:
         9d:3a:ae:57:52:38:a4:b9:f1:52:d6:67:45:36:df:f6:f7:bd:
         6a:da:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:09 2025 by rpki-client