Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e20323633373835.roa
File:                     3230302e3131352e31382e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          w91Hf7rk1z3Mc1agOCWLduzuqKeT/IhYiYvmb+38tRk=
Subject key identifier:   94:20:6B:98:26:21:89:5A:21:EC:A8:07:C7:D1:82:A7:8E:F4:61:81
Certificate issuer:       /CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
Certificate serial:       1EBD62323E4AFF05DB8A0ADB11EE4C5B591A2951
Authority key identifier: F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e20323633373835.roa
Signing time:             Tue 18 Feb 2025 05:30:00 +0000
ROA not before:           Tue 18 Feb 2025 05:25:00 +0000
ROA not after:            Tue 17 Feb 2026 05:30:00 +0000
asID:                     263785
IP address blocks:        200.115.18.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bd:62:32:3e:4a:ff:05:db:8a:0a:db:11:ee:4c:5b:59:1a:29:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D431735054D4CDE390B55F4A2B7D7C2CC39341
        Validity
            Not Before: Feb 18 05:25:00 2025 GMT
            Not After : Feb 17 05:30:00 2026 GMT
        Subject: CN=94206B982621895A21ECA807C7D182A78EF46181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:59:a2:70:76:ce:ac:c7:2e:02:c4:a0:e3:
                    5e:30:a7:7c:69:63:b8:52:6c:4a:77:2c:fd:5c:af:
                    30:34:62:ca:4b:ef:e8:d4:6f:8e:a1:f4:f3:c0:b0:
                    39:3b:92:32:74:f3:91:ef:d0:4f:78:10:e8:07:8d:
                    41:81:85:42:a9:a8:4a:3a:dd:2c:70:91:b9:52:04:
                    a9:b1:37:23:29:6f:ac:21:91:00:43:ed:db:8d:39:
                    57:c3:ad:43:bc:21:b2:45:d0:b1:0b:8a:10:80:39:
                    38:62:06:05:1e:e6:47:4b:c0:30:cd:87:dd:be:6e:
                    33:f0:29:85:f5:7a:a3:dd:d3:23:d9:32:17:1e:79:
                    4e:73:52:2b:4e:2f:b9:3a:3d:67:48:fb:59:53:91:
                    41:05:a2:a8:60:4d:f5:38:2c:6d:6b:7b:48:db:e0:
                    e4:08:a4:eb:6c:7e:68:11:32:f0:7d:63:7d:53:e3:
                    93:db:37:a8:6c:f4:24:5f:56:c8:08:85:6f:be:c7:
                    d9:e0:f4:eb:57:53:3b:d8:f5:9a:e0:85:99:64:86:
                    16:b9:63:7c:e4:05:85:da:0c:ab:49:74:36:4d:82:
                    cb:d9:8a:3d:f0:8c:d7:f4:dd:da:06:98:04:6b:10:
                    bb:39:4b:80:fc:91:87:b1:a0:9c:a3:cd:33:af:82:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:20:6B:98:26:21:89:5A:21:EC:A8:07:C7:D1:82:A7:8E:F4:61:81
            X509v3 Authority Key Identifier:
                keyid:F3:D4:31:73:50:54:D4:CD:E3:90:B5:5F:4A:2B:7D:7C:2C:C3:93:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3D431735054D4CDE390B55F4A2B7D7C2CC39341.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/187E1CE26803C01D7C4AB2168E2BCD72ACB58A685F3AFCB0FB75C19408B97DBA/0/3230302e3131352e31382e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:39:c8:2a:28:89:26:68:76:2b:20:e6:c1:5b:dc:34:df:
         01:84:8c:e2:d1:7b:ea:f1:a3:ec:3b:10:33:e8:d9:34:30:55:
         d4:29:75:a6:14:83:ec:64:87:d2:41:12:44:db:68:25:53:52:
         6f:c4:d7:a7:b2:c8:2a:1e:44:19:0f:75:65:c1:a6:ef:9c:20:
         6a:e3:a8:fb:55:c0:9c:e0:8c:37:75:48:a4:31:45:c2:21:fb:
         cd:8e:eb:6f:9d:8a:c1:b5:0c:6e:80:66:05:35:b2:6d:08:da:
         6b:39:fa:94:52:1a:49:23:40:a1:39:ba:4c:23:ab:e7:43:42:
         a3:e3:6f:04:77:39:cd:e1:4b:52:7f:9b:b8:ad:9b:9e:8f:1c:
         dd:44:d4:a9:36:f6:46:c9:c1:b0:91:c9:c6:35:d4:3f:02:fc:
         1c:3c:68:dd:e8:ec:d3:0b:d9:4c:28:76:d3:e4:86:e5:9b:06:
         05:0b:22:7a:d6:f5:ac:fd:23:7d:c5:a4:44:6f:45:ed:36:55:
         b2:7d:5a:4f:2d:63:7d:86:2a:6f:d6:ae:e8:f4:d6:43:8b:59:
         2b:21:b0:89:b9:f7:e6:db:03:a2:d2:7e:b3:da:93:2f:9f:8c:
         de:df:01:5d:57:cd:a5:6e:cb:1d:33:eb:83:a3:ff:2d:a8:e0:
         cd:cf:e5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:38:11 2025 by rpki-client