Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/3230302e31342e37392e302f32342d3234203d3e20323632313438.roa
File:                     3230302e31342e37392e302f32342d3234203d3e20323632313438.roa (raw, json)
Hash identifier:          o2fs+dJHfzfzObfbUUxbRU5BbARSpaPnTyr6czTkCMQ=
Subject key identifier:   6E:56:2C:91:63:09:DA:03:B0:05:F1:F5:A2:75:61:1B:18:CE:64:5A
Certificate issuer:       /CN=172F9FB27327C9B0586968A8311D612A6A2D1067
Certificate serial:       225A53218B8CF6EA733772F7D86B925332263C35
Authority key identifier: 17:2F:9F:B2:73:27:C9:B0:58:69:68:A8:31:1D:61:2A:6A:2D:10:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172F9FB27327C9B0586968A8311D612A6A2D1067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/3230302e31342e37392e302f32342d3234203d3e20323632313438.roa
Signing time:             Tue 04 Feb 2025 18:49:48 +0000
ROA not before:           Tue 04 Feb 2025 18:44:48 +0000
ROA not after:            Tue 03 Feb 2026 18:49:48 +0000
asID:                     262148
IP address blocks:        200.14.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5a:53:21:8b:8c:f6:ea:73:37:72:f7:d8:6b:92:53:32:26:3c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172F9FB27327C9B0586968A8311D612A6A2D1067
        Validity
            Not Before: Feb  4 18:44:48 2025 GMT
            Not After : Feb  3 18:49:48 2026 GMT
        Subject: CN=6E562C916309DA03B005F1F5A275611B18CE645A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:bd:3a:02:7e:a1:2a:68:9f:9c:4e:e4:c7:db:
                    89:b5:02:db:97:dd:20:88:50:4e:c2:bb:45:ec:7d:
                    c1:9b:75:ba:8f:2e:48:0c:70:9f:a8:70:94:9a:87:
                    1d:7a:cc:30:d0:61:ee:58:53:aa:36:9c:29:74:dc:
                    5e:73:3f:da:ef:2f:16:85:8d:b5:96:e8:c3:26:e3:
                    fe:e4:11:99:e4:ad:61:15:14:e0:8a:5e:08:54:93:
                    55:5d:d2:a4:d6:d3:29:7c:b1:de:a9:d8:74:6d:27:
                    80:ab:04:96:14:e1:93:3b:1c:f5:9e:47:8f:e9:44:
                    fc:0c:f6:55:a6:ec:69:dc:76:7e:f4:08:2a:6e:54:
                    e5:6a:d1:3e:03:36:9d:e7:80:8a:a5:99:71:a8:fa:
                    d2:db:f9:92:04:ed:f2:e5:f5:30:bb:32:3f:c6:a1:
                    9f:de:79:6a:d7:ec:26:84:ed:8f:64:57:74:9c:e4:
                    de:2e:52:53:12:96:a4:56:2c:78:2f:dd:5f:38:4f:
                    57:13:5e:69:74:9e:76:aa:2a:28:4b:98:72:5b:d6:
                    42:d8:42:90:6f:87:ef:31:52:a7:d9:31:2c:8d:49:
                    41:02:ce:a3:9e:4e:a2:9b:5d:2a:fa:db:43:e0:70:
                    5c:17:ac:f8:5c:a3:ed:ee:33:05:97:ac:78:dc:fe:
                    49:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:56:2C:91:63:09:DA:03:B0:05:F1:F5:A2:75:61:1B:18:CE:64:5A
            X509v3 Authority Key Identifier:
                keyid:17:2F:9F:B2:73:27:C9:B0:58:69:68:A8:31:1D:61:2A:6A:2D:10:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/172F9FB27327C9B0586968A8311D612A6A2D1067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172F9FB27327C9B0586968A8311D612A6A2D1067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1719EBF7768899A519FAD6C230D056F9D3024218947C7A987A093D2276883CB7/0/3230302e31342e37392e302f32342d3234203d3e20323632313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:58:3d:bc:75:21:da:e0:c6:bb:b2:74:44:a9:6c:ff:7f:88:
         c1:f5:18:b3:33:9d:a2:ba:30:b7:f1:40:99:fd:3a:4b:9e:89:
         40:8b:73:c2:f2:2e:02:d8:a9:cb:05:39:9f:ea:db:91:cc:9f:
         08:d6:32:19:c1:0e:a2:9b:c2:c9:65:24:c7:7d:9a:8c:f5:82:
         a2:9a:b7:6a:78:b8:93:92:61:45:05:0c:40:cf:71:b3:dc:64:
         6d:a4:bf:7a:bf:82:ff:52:93:30:51:af:b3:41:e8:14:0a:5d:
         1e:4d:42:cf:69:d6:d9:f9:4a:6d:96:24:f1:c3:8d:40:26:83:
         24:91:bd:32:55:4c:48:82:bf:cf:65:40:d2:3f:42:99:19:8b:
         ba:a4:ae:1f:fa:d4:6a:d1:68:54:9a:bd:13:6a:02:24:b2:35:
         9d:f9:00:71:a2:d3:76:4c:0d:41:eb:c7:d2:0d:ac:f9:e1:b7:
         b2:2f:4a:4a:f0:3b:24:bf:05:9a:37:52:9f:19:9d:cb:ae:40:
         a9:94:23:39:c2:ca:df:67:5d:c7:32:33:52:9b:87:c1:17:f5:
         f4:59:87:9c:47:8a:bb:b7:66:08:dc:62:24:ff:ea:3c:7e:08:
         f2:b5:6d:58:0f:24:b1:52:44:1b:9b:21:d6:4a:6a:e1:a7:08:
         84:f6:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:42 2025 by rpki-client