Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A96DEBD6B1A275413742DC6B9556158B56820DE97C8ADE5896E2A5E3A1CD553/0/3230302e362e382e302f32342d3234203d3e203238303036.roa
File:                     3230302e362e382e302f32342d3234203d3e203238303036.roa (raw, json)
Hash identifier:          9yxd5OwUWu+6+3bDwRxUUnKdnDKvpoFLX7QOQuokVfg=
Subject key identifier:   21:B5:6E:26:86:BF:3B:89:B9:68:CB:0B:12:EB:82:FF:C0:A3:15:9F
Certificate issuer:       /CN=979CD495C0BBB46F67D7DBEB05C3A82AC984BF6F
Certificate serial:       2832C4E8C899B4AE805E4E81B1734E9C7F56B909
Authority key identifier: 97:9C:D4:95:C0:BB:B4:6F:67:D7:DB:EB:05:C3:A8:2A:C9:84:BF:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979CD495C0BBB46F67D7DBEB05C3A82AC984BF6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A96DEBD6B1A275413742DC6B9556158B56820DE97C8ADE5896E2A5E3A1CD553/0/3230302e362e382e302f32342d3234203d3e203238303036.roa
Signing time:             Tue 04 Feb 2025 18:51:56 +0000
ROA not before:           Tue 04 Feb 2025 18:46:56 +0000
ROA not after:            Tue 03 Feb 2026 18:51:56 +0000
asID:                     28006
IP address blocks:        200.6.8.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:32:c4:e8:c8:99:b4:ae:80:5e:4e:81:b1:73:4e:9c:7f:56:b9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979CD495C0BBB46F67D7DBEB05C3A82AC984BF6F
        Validity
            Not Before: Feb  4 18:46:56 2025 GMT
            Not After : Feb  3 18:51:56 2026 GMT
        Subject: CN=21B56E2686BF3B89B968CB0B12EB82FFC0A3159F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:99:20:91:53:6b:2d:b5:08:94:46:7b:75:
                    9a:28:6a:36:57:64:19:da:7d:21:dd:db:43:ed:54:
                    ff:35:e3:09:8e:21:46:1f:40:89:6d:e6:e8:1e:9f:
                    48:98:76:59:fc:5f:b5:94:a6:3b:c0:35:48:c0:c2:
                    e8:0c:5e:5b:0e:d4:57:0e:da:f0:ce:b9:50:bf:f0:
                    07:47:1c:d8:7e:75:7e:3c:37:23:38:00:ec:8d:46:
                    19:34:a6:fb:73:4a:e5:5a:da:df:66:9b:58:ff:86:
                    f2:35:1c:bc:c6:4a:fc:26:38:2e:75:db:2c:01:d5:
                    45:67:01:26:fe:cd:df:be:e5:34:05:87:90:a2:a0:
                    5d:2d:5e:df:17:c1:59:ab:a9:2a:70:5f:6d:76:0f:
                    1d:b7:c1:16:09:99:d1:eb:5a:d0:9a:4e:4d:56:cc:
                    4f:38:2e:87:03:83:35:17:a5:38:51:a1:28:e2:ad:
                    ac:17:35:e9:37:fa:6c:b3:ad:0c:ce:39:3b:67:1f:
                    9d:b8:1f:a5:3f:52:c4:f3:46:b1:54:f1:32:6c:f2:
                    e0:12:1c:aa:e8:f4:76:45:76:75:07:05:36:f1:64:
                    05:fb:c6:6a:88:5a:b8:9d:ed:ef:91:64:91:92:c7:
                    d1:29:d9:5b:f5:56:37:8c:93:db:17:ef:f8:5c:7e:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:6E:26:86:BF:3B:89:B9:68:CB:0B:12:EB:82:FF:C0:A3:15:9F
            X509v3 Authority Key Identifier:
                keyid:97:9C:D4:95:C0:BB:B4:6F:67:D7:DB:EB:05:C3:A8:2A:C9:84:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A96DEBD6B1A275413742DC6B9556158B56820DE97C8ADE5896E2A5E3A1CD553/0/979CD495C0BBB46F67D7DBEB05C3A82AC984BF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979CD495C0BBB46F67D7DBEB05C3A82AC984BF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A96DEBD6B1A275413742DC6B9556158B56820DE97C8ADE5896E2A5E3A1CD553/0/3230302e362e382e302f32342d3234203d3e203238303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:50:f9:f6:4d:30:00:b6:91:55:01:71:9c:e9:e8:8b:9c:
         0b:16:c6:4f:1a:7a:06:87:68:87:26:b4:89:2c:e7:6d:00:f5:
         2e:52:1b:66:41:3e:3e:bb:a8:8d:0d:a8:47:74:fe:6d:c7:24:
         0e:01:6b:57:a3:3e:f8:76:4e:0e:5a:92:9c:04:2c:dc:46:4b:
         a6:9d:a3:80:30:bb:1f:95:91:6d:25:c9:5a:b2:77:5b:10:b6:
         f3:0c:45:a9:0f:d4:43:c6:53:b7:c5:7e:03:eb:f4:1b:30:20:
         91:53:3d:a9:34:c8:91:2c:cd:f6:52:82:69:55:52:64:71:cb:
         74:03:97:73:b7:ad:4d:8a:3e:19:c0:bc:58:a2:a0:9b:86:15:
         16:11:0e:c3:4e:08:1c:92:0b:bc:d5:2f:32:3b:0e:7c:7d:c2:
         c4:a2:83:e0:1e:4b:4f:52:fd:06:9c:04:5a:01:50:9a:1d:7a:
         4f:ab:09:c4:a4:25:25:cd:d1:c3:44:a5:ad:84:e7:65:35:74:
         45:9c:c8:37:a6:c2:2c:38:59:13:95:44:d3:5f:05:95:a1:a6:
         aa:f2:33:d6:cd:a9:d3:c2:9d:95:3c:24:d5:d0:b3:61:e0:4f:
         0b:06:29:bf:6c:40:92:de:b5:3c:f4:59:3d:c8:f7:f0:d6:59:
         de:9f:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:57 2025 by rpki-client