Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/3230302e32332e3230372e302f32342d3234203d3e20323634373932.roa
File:                     3230302e32332e3230372e302f32342d3234203d3e20323634373932.roa (raw, json)
Hash identifier:          EVGVAfXIY15/1T9mwilBmH8FjhxhvAiPGjOOakt87ks=
Subject key identifier:   6A:5A:92:99:32:0B:2E:3C:54:83:1A:58:BE:B7:46:64:0D:99:09:AD
Certificate issuer:       /CN=9F6C7DD1057AD10CAA135E569ABB064960324435
Certificate serial:       239070B6F718452D216F5ADCE83DBD93A678506C
Authority key identifier: 9F:6C:7D:D1:05:7A:D1:0C:AA:13:5E:56:9A:BB:06:49:60:32:44:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6C7DD1057AD10CAA135E569ABB064960324435.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/3230302e32332e3230372e302f32342d3234203d3e20323634373932.roa
Signing time:             Tue 04 Feb 2025 18:47:08 +0000
ROA not before:           Tue 04 Feb 2025 18:42:08 +0000
ROA not after:            Tue 03 Feb 2026 18:47:08 +0000
asID:                     264792
IP address blocks:        200.23.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:90:70:b6:f7:18:45:2d:21:6f:5a:dc:e8:3d:bd:93:a6:78:50:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6C7DD1057AD10CAA135E569ABB064960324435
        Validity
            Not Before: Feb  4 18:42:08 2025 GMT
            Not After : Feb  3 18:47:08 2026 GMT
        Subject: CN=6A5A9299320B2E3C54831A58BEB746640D9909AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:4e:f5:43:2f:27:26:ef:8b:71:4e:a5:e6:
                    ff:44:76:bf:3c:25:95:aa:ec:e8:e4:8a:e7:45:5f:
                    fa:4e:9a:9c:5e:01:56:b7:5c:ff:70:62:8b:3b:4c:
                    05:b7:64:b8:a7:74:e7:ba:ba:7d:95:a1:7c:b6:ab:
                    04:2e:e5:9d:5f:11:1b:c2:df:18:0e:ad:ba:bd:08:
                    2a:5c:9a:cc:d0:54:21:59:00:b7:f0:82:09:d0:65:
                    a6:bf:81:67:1d:78:84:6a:ee:50:37:99:69:f8:5a:
                    94:66:d9:c6:97:60:8c:d5:2e:d6:1d:17:5f:9b:2a:
                    1c:47:92:f0:93:11:83:02:b7:8c:b5:b2:ed:ad:0c:
                    fe:24:16:92:b3:b8:e5:79:e5:49:7c:83:26:85:cc:
                    e2:6b:fa:92:87:9d:7f:da:58:28:da:ad:e2:e9:7d:
                    7a:57:bd:46:99:5b:63:70:1b:7e:f1:e7:f8:41:ff:
                    27:b1:c0:fe:99:dc:ec:10:d2:3a:39:0b:4b:4d:e7:
                    f3:bb:20:c7:db:3d:5e:2d:fa:17:99:d7:74:67:0a:
                    29:b4:df:23:87:6c:5b:0c:40:3a:03:24:f5:ab:1d:
                    c0:56:d5:6f:67:88:1a:db:8c:10:63:8c:b9:c5:b8:
                    47:5d:4e:f5:15:3c:9e:df:8e:f4:14:98:3c:2e:ed:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:92:99:32:0B:2E:3C:54:83:1A:58:BE:B7:46:64:0D:99:09:AD
            X509v3 Authority Key Identifier:
                keyid:9F:6C:7D:D1:05:7A:D1:0C:AA:13:5E:56:9A:BB:06:49:60:32:44:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/9F6C7DD1057AD10CAA135E569ABB064960324435.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6C7DD1057AD10CAA135E569ABB064960324435.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A63DF28E001934210037888EC12E2C3C399521560819A4C018F1D689EDB228D/0/3230302e32332e3230372e302f32342d3234203d3e20323634373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:3e:4d:30:46:23:45:5c:63:a8:a5:22:59:66:87:40:04:
         2a:b9:c3:ec:1e:35:77:b4:7c:cc:52:d2:dd:30:cc:7a:57:6e:
         b1:1b:e0:20:3d:d8:94:71:e0:7a:27:3c:70:6b:18:03:d0:cb:
         d4:bc:ec:6f:1a:8d:cc:2a:4c:0c:c0:9c:31:af:4c:4a:16:36:
         3d:d1:51:9f:4d:4c:03:e1:4f:04:ac:aa:0e:92:ff:b0:6b:12:
         fb:20:d6:68:3c:78:c5:b0:cc:cb:9a:c2:e9:87:cd:6f:bf:39:
         5e:05:6a:23:26:ad:ae:a0:ae:bd:52:4d:fc:55:3e:02:18:0c:
         b6:9c:e6:c7:00:b7:7e:3a:7c:fa:b9:c5:77:6d:ad:16:ce:0f:
         78:d3:40:c9:bf:92:0b:ad:f5:0b:bd:82:47:5f:ba:85:22:8f:
         66:0b:e6:92:65:9b:46:e4:02:18:ef:60:0a:1a:df:aa:95:6f:
         e3:ed:99:a9:5e:7c:6c:b7:8e:83:56:66:41:58:b6:b5:85:40:
         aa:bc:82:a7:bc:82:10:ca:50:79:95:9d:97:bd:9a:0e:64:fc:
         10:78:57:d9:f3:9d:32:bb:3f:99:86:a8:9d:23:eb:58:3e:1d:
         65:2b:d5:39:b6:f9:f9:9d:88:b1:2e:06:1b:fd:e6:4b:d0:97:
         c5:9b:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:46 2025 by rpki-client