Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130372e302f32342d3234203d3e203237383233.roa
File:                     3230302e35382e3130372e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          89gxEbM4M876pzbeN7gyqLn6C8PmsvwArFskNJtfArc=
Subject key identifier:   85:6A:A0:C3:DD:9D:8B:F8:03:5C:B2:9D:19:69:EF:8E:55:F4:F2:00
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       399EEE8044D3E52DFC955B090CCE0695B05DF042
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130372e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 04 Feb 2025 18:08:29 +0000
ROA not before:           Tue 04 Feb 2025 18:03:29 +0000
ROA not after:            Tue 03 Feb 2026 18:08:29 +0000
asID:                     27823
IP address blocks:        200.58.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9e:ee:80:44:d3:e5:2d:fc:95:5b:09:0c:ce:06:95:b0:5d:f0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Feb  4 18:03:29 2025 GMT
            Not After : Feb  3 18:08:29 2026 GMT
        Subject: CN=856AA0C3DD9D8BF8035CB29D1969EF8E55F4F200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:a1:4c:20:8a:ca:e5:f2:7c:06:95:24:b1:
                    84:2d:bd:76:04:68:07:3d:49:0c:a0:97:be:1d:5b:
                    b7:f7:4b:c4:fe:8d:e2:b5:6b:54:37:76:a8:a6:10:
                    68:88:c1:10:ca:7c:0b:6a:f0:5c:3e:ff:b7:b7:d2:
                    b1:71:82:11:6d:99:bf:85:2f:65:28:a1:16:39:10:
                    09:02:38:45:b9:56:dd:2a:aa:3a:08:07:75:a1:99:
                    86:17:a1:42:b9:c8:17:e9:1e:49:c6:92:c0:7b:08:
                    16:26:fb:b5:90:00:88:a2:56:19:81:8f:48:a2:85:
                    ea:20:6d:cb:2d:86:e0:96:43:e9:fe:8b:de:3b:6e:
                    49:75:85:1c:80:3b:62:95:3c:a2:bd:ea:e3:1c:5a:
                    dd:41:b4:89:8c:8f:1f:3f:ce:17:be:ba:71:02:60:
                    17:18:70:1c:b4:78:32:9d:0a:64:9c:2c:2c:d9:be:
                    96:5c:48:bc:03:24:94:16:2a:9d:ff:56:d8:0b:28:
                    f0:ff:4b:94:93:1d:0a:85:ec:ff:ba:46:3f:fb:12:
                    b9:41:26:74:8d:f2:99:1a:73:0b:34:5f:40:00:92:
                    2f:62:43:03:2c:20:f2:dd:43:40:3e:08:33:f8:ba:
                    dd:43:8a:8c:c0:ee:05:ed:68:c3:86:ea:f4:50:fb:
                    20:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6A:A0:C3:DD:9D:8B:F8:03:5C:B2:9D:19:69:EF:8E:55:F4:F2:00
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3230302e35382e3130372e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:8b:ce:99:8b:57:16:c0:dc:49:d1:ef:5d:10:44:00:38:
         75:93:14:42:d6:ec:3e:d6:bf:0d:3b:4b:fd:a5:cb:a4:00:78:
         42:ce:38:09:84:ec:bf:44:cc:04:b6:a8:b1:93:4a:41:c0:01:
         21:e7:f1:4e:e5:ac:53:50:00:aa:76:65:a3:1d:d2:b7:81:27:
         b8:e4:3a:f1:3d:e3:8b:62:ab:5e:76:13:a5:1b:65:f5:55:09:
         32:b3:52:30:2a:95:f3:17:16:57:78:b2:e8:09:10:39:15:b6:
         8d:d6:6c:22:8f:97:68:5d:cf:e3:d9:67:0d:42:15:7a:cb:22:
         c0:b9:01:9e:8b:f7:84:d1:c0:20:1a:37:46:bb:97:07:1f:1a:
         8c:76:7d:07:2c:5a:26:2e:75:37:cd:10:fc:d8:b2:c8:67:30:
         de:b4:2d:1c:08:cb:62:c0:4c:7f:ab:13:c8:f1:42:f4:25:7d:
         7d:63:98:7c:20:2f:04:3d:2f:23:30:4a:bb:31:2e:7e:f7:ee:
         2a:94:6c:3d:77:ae:13:11:4a:4c:ad:41:4d:c2:55:5a:d7:4b:
         9d:0d:ce:c1:e1:94:cb:02:06:5e:78:8f:37:c9:3c:8e:2e:c3:
         81:fe:b2:2a:19:78:64:a8:89:a9:e2:4a:2a:ec:a5:f7:15:6d:
         58:b8:33:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:50:44 2025 by rpki-client