Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138342e302f32322d3234203d3e203136363239.roa
File:                     3230302e34322e3138342e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          H5PoFijFL+PC5y+3ftOuaJhv657g/h/EiiTnOk6/Szk=
Subject key identifier:   E8:62:94:79:FA:55:44:FD:62:37:59:E3:80:05:2A:31:80:E8:AD:27
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       6BC18796639C7253FBD8616AF97ED0EA051E4469
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138342e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:50 +0000
ROA not before:           Tue 04 Feb 2025 19:55:50 +0000
ROA not after:            Tue 03 Feb 2026 20:00:50 +0000
asID:                     16629
IP address blocks:        200.42.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c1:87:96:63:9c:72:53:fb:d8:61:6a:f9:7e:d0:ea:05:1e:44:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:50 2025 GMT
            Not After : Feb  3 20:00:50 2026 GMT
        Subject: CN=E8629479FA5544FD623759E380052A3180E8AD27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:97:29:81:1b:d6:4a:8b:aa:8c:1c:e8:c3:89:
                    0d:00:1f:17:10:08:74:46:0e:c0:29:f8:a3:9f:09:
                    de:69:3c:ca:2b:49:af:e2:46:7a:47:e5:1b:81:a1:
                    06:50:31:b5:0a:d6:80:4f:b9:fc:85:ac:c3:b8:4c:
                    1c:08:67:3d:66:9c:1a:fb:84:b8:aa:9e:3b:91:81:
                    bb:98:56:2c:00:4e:e7:7f:60:da:bd:43:c6:32:78:
                    f3:66:74:32:4c:22:af:a7:2b:4f:53:37:f2:3c:aa:
                    31:c2:e8:f0:64:ff:94:c6:0a:1b:11:34:e9:be:3b:
                    b4:f3:d3:9a:e3:f3:3d:38:e5:55:1a:40:f2:3f:2a:
                    7a:fa:c0:b3:a3:e2:ca:c7:c9:fc:81:04:08:1d:1e:
                    56:42:9f:5d:d5:4e:f8:a5:b3:62:1c:1e:89:af:1d:
                    10:50:17:fd:46:ee:af:cc:80:f1:cb:c4:f2:5c:92:
                    1a:b1:9e:80:dc:c1:64:82:08:ef:12:96:62:3f:a0:
                    43:30:55:b3:99:f5:8a:8e:78:35:2f:86:61:1a:df:
                    d9:0a:28:a2:5c:77:ad:f7:fd:49:84:5b:36:cc:7f:
                    42:7f:d2:53:ed:99:51:bf:c8:cf:6a:7e:d1:f1:7b:
                    a3:c3:77:6f:8b:a3:fe:1e:4d:68:85:c5:4f:35:01:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:94:79:FA:55:44:FD:62:37:59:E3:80:05:2A:31:80:E8:AD:27
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138342e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:02:f0:f8:7e:69:35:48:94:33:8a:ca:a1:15:7d:68:a2:ba:
         2b:fc:5e:34:03:99:51:fd:ac:f8:1a:0a:f7:b4:4f:9d:06:1f:
         01:21:5e:a6:63:33:0b:c6:4d:bf:2b:02:11:d1:61:c6:41:93:
         d4:8a:c5:ba:c8:e2:54:e7:cf:84:dd:66:ea:db:3f:71:7c:f6:
         96:7e:e6:67:11:7d:34:9f:6a:81:8e:e0:25:ab:b2:29:9f:40:
         7c:c7:cb:fd:a6:99:54:4c:f9:d8:06:94:67:9c:60:3e:31:ce:
         09:60:5e:a6:f8:bb:e0:87:8a:8c:0c:ac:bb:64:87:88:64:0b:
         bb:92:c6:80:a3:28:89:5e:bf:3e:e0:33:70:70:ce:19:f4:5a:
         ce:f6:ec:97:cc:61:ba:6e:93:db:d0:5d:c0:8a:2f:68:af:ff:
         88:dc:e8:58:bb:0b:2a:cb:df:78:fb:19:d6:97:25:d3:c2:ae:
         d1:3e:c2:e3:10:2f:c3:b9:95:37:fc:6a:ba:92:24:d3:96:c5:
         53:5f:f3:a0:0e:7a:ad:e0:40:84:8f:ef:0d:54:92:75:a8:17:
         2a:65:9e:30:19:96:09:d3:ef:2b:62:ee:b0:41:0e:f0:ba:07:
         3d:9f:1e:6d:6f:3a:ee:b0:43:81:58:13:9a:f8:bc:29:6c:47:
         81:f8:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:25 2025 by rpki-client