Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3230302e39312e34382e302f32312d3234203d3e203238303233.roa
File:                     3230302e39312e34382e302f32312d3234203d3e203238303233.roa (raw, json)
Hash identifier:          UJ8mUV6+1qlKZQ8cRUNhpvzINyYR5oSqxWQdl6XsBKo=
Subject key identifier:   9F:2C:1B:E7:CE:FC:AE:9F:AF:EB:2E:75:24:FC:A5:89:D5:08:A1:1F
Certificate issuer:       /CN=8495817D6FBA8603C95099E0CF88C4791923C301
Certificate serial:       6532BC3C02E8C799DAA750329D801596C92B4BD2
Authority key identifier: 84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3230302e39312e34382e302f32312d3234203d3e203238303233.roa
Signing time:             Tue 04 Feb 2025 18:23:59 +0000
ROA not before:           Tue 04 Feb 2025 18:18:59 +0000
ROA not after:            Tue 03 Feb 2026 18:23:59 +0000
asID:                     28023
IP address blocks:        200.91.48.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:32:bc:3c:02:e8:c7:99:da:a7:50:32:9d:80:15:96:c9:2b:4b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8495817D6FBA8603C95099E0CF88C4791923C301
        Validity
            Not Before: Feb  4 18:18:59 2025 GMT
            Not After : Feb  3 18:23:59 2026 GMT
        Subject: CN=9F2C1BE7CEFCAE9FAFEB2E7524FCA589D508A11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:40:d9:16:c7:9d:18:f8:1f:e5:3f:66:61:
                    15:80:c6:1a:64:16:2b:f7:e3:88:2a:e2:35:a0:be:
                    7f:5d:de:79:1c:3c:e1:13:3b:0a:2b:39:0a:26:13:
                    b4:38:52:ab:b0:b9:32:f3:52:54:11:c1:ff:02:d4:
                    b2:5a:a4:1c:1d:1d:e3:1a:18:61:54:1d:6e:ff:21:
                    67:e1:7f:5d:91:ad:69:08:94:e5:f9:35:42:9b:38:
                    4e:6e:e0:be:5a:76:be:1d:b8:e2:e9:54:95:3f:e7:
                    c0:f2:d2:81:57:ae:8b:e3:bb:48:33:e9:81:ab:6b:
                    75:52:9c:b4:b0:99:99:9d:77:ed:85:8b:56:86:15:
                    61:16:5f:fd:a7:be:02:0e:cc:66:ee:77:26:91:bb:
                    2a:10:c2:ad:74:d7:59:76:ce:08:e4:75:a2:87:1c:
                    8e:dd:20:94:b5:b6:06:1b:8b:7e:83:b2:44:79:46:
                    99:0d:b8:c3:26:18:87:b7:8d:a7:5c:7a:14:85:a9:
                    6d:0b:60:da:00:43:67:d1:95:e0:12:6d:40:d8:3d:
                    5e:2d:98:2a:d7:2b:03:e5:6b:c6:31:a6:36:57:78:
                    b1:24:9d:36:a1:1c:91:80:ed:dc:1d:16:69:71:7b:
                    69:74:87:79:29:0a:bd:11:4d:25:4d:db:8a:5e:4b:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2C:1B:E7:CE:FC:AE:9F:AF:EB:2E:75:24:FC:A5:89:D5:08:A1:1F
            X509v3 Authority Key Identifier:
                keyid:84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3230302e39312e34382e302f32312d3234203d3e203238303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:e1:75:09:8c:c0:83:72:7c:46:96:87:c5:c9:9e:33:b1:c8:
         52:47:57:03:ac:d1:99:a7:06:ff:f7:95:4e:0e:4b:29:48:12:
         2e:0d:63:55:7d:6c:5a:66:64:16:5a:77:b2:2c:41:8f:3a:91:
         cf:80:ff:7a:a7:61:8d:64:9d:c1:33:19:a8:5b:07:fd:5f:5e:
         9f:b8:1e:9e:9c:b8:fd:e4:9f:86:29:bf:bc:12:50:18:86:97:
         12:84:d8:d6:c4:7a:32:40:34:ba:ae:a6:a7:81:a7:e6:d0:b2:
         f7:3b:ad:c5:8b:82:bb:03:f7:70:ce:30:44:42:3b:77:a1:a3:
         d7:80:41:43:55:60:e4:c4:5b:10:43:e4:2a:78:28:1b:3c:b9:
         d0:b4:aa:bf:65:5b:f1:e8:e2:e2:bd:06:43:4b:79:63:12:12:
         59:f7:ff:96:22:0b:67:36:28:d2:62:73:8b:64:f3:8d:a4:3e:
         04:14:46:4e:00:02:f0:ea:7a:a0:d0:fa:3a:b2:80:3a:02:74:
         39:a6:d2:ce:f6:74:2c:b6:ef:b8:2f:64:6a:0d:0a:f4:b1:92:
         e3:a8:4a:c3:58:7b:bf:a2:60:16:0b:ef:e0:4d:e2:50:9c:07:
         a7:43:ad:c5:cf:e7:7c:ce:46:de:cd:5a:5f:0f:5e:d7:9b:1d:
         3b:1f:45:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:15 2025 by rpki-client