Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33362e302f32322d3234203d3e20323633363939.roa
File:                     3230302e3132332e33362e302f32322d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          F7BqgyAY0zyXnH/mqJ0+7APEvQcexVpH/z2LxSj7sJE=
Subject key identifier:   A2:62:87:54:AD:30:0E:8A:44:83:E7:BD:6C:F2:B3:BD:1B:C8:58:49
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       3C771FEFC5B2F5376EC66D53998246EB8C3881FD
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33362e302f32322d3234203d3e20323633363939.roa
Signing time:             Tue 04 Feb 2025 20:08:08 +0000
ROA not before:           Tue 04 Feb 2025 20:03:08 +0000
ROA not after:            Tue 03 Feb 2026 20:08:08 +0000
asID:                     263699
IP address blocks:        200.123.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:77:1f:ef:c5:b2:f5:37:6e:c6:6d:53:99:82:46:eb:8c:38:81:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:08 2025 GMT
            Not After : Feb  3 20:08:08 2026 GMT
        Subject: CN=A2628754AD300E8A4483E7BD6CF2B3BD1BC85849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:a6:95:52:05:dd:7f:ad:f6:44:76:a0:b7:
                    3c:9d:54:90:36:c4:31:4f:56:c5:7a:01:ea:b8:90:
                    12:56:5e:32:31:4d:b5:a4:77:ea:de:ce:c0:c0:a2:
                    3b:b3:b9:a5:53:95:11:93:73:1c:6f:46:d2:8b:46:
                    42:85:8e:72:45:a1:7e:35:ed:8d:8a:bb:03:20:fb:
                    20:4a:d0:6e:47:b6:87:8b:98:5a:a2:f3:b6:51:98:
                    2b:07:c1:62:40:8a:1d:74:27:20:eb:30:54:61:77:
                    95:05:5f:72:12:3a:cb:90:4d:e6:8b:bb:12:00:fa:
                    36:43:ce:aa:06:98:94:08:df:dd:04:1e:12:9a:66:
                    e6:77:72:38:0b:bb:28:df:d9:f2:7f:19:f4:58:ba:
                    89:a4:ef:24:99:e2:46:51:fc:72:cd:75:12:89:e8:
                    81:ef:d5:7c:9f:ec:8c:33:0d:5e:70:e7:61:c5:07:
                    57:ce:be:64:c1:25:5c:3c:2e:47:84:0e:8c:75:6e:
                    9c:8f:eb:5a:ff:07:09:af:3b:c9:5d:10:f8:ca:b2:
                    bd:39:fb:89:d0:da:06:38:8c:d1:0e:3b:fd:f1:fc:
                    c0:29:ed:60:ae:6f:a0:4a:bc:b0:b2:99:6e:c8:7c:
                    83:3e:4c:1e:60:5e:87:01:b8:41:37:70:52:70:ec:
                    ec:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:62:87:54:AD:30:0E:8A:44:83:E7:BD:6C:F2:B3:BD:1B:C8:58:49
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3230302e3132332e33362e302f32322d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:9b:0b:4f:5c:b9:93:cd:0e:8a:2e:3d:cc:c9:5a:2a:82:0f:
         e1:d3:0f:1c:4c:7c:2d:a3:1e:20:65:b7:4a:70:45:28:74:9a:
         48:8a:fa:40:69:eb:79:44:be:d9:76:02:96:51:bf:35:f6:eb:
         fd:bf:68:38:e6:39:75:1f:53:57:89:55:5d:45:52:d6:02:2e:
         c8:df:e9:2a:0c:77:7a:70:62:5b:8d:70:67:ce:4f:e2:bc:ee:
         5e:93:60:59:2c:f5:28:90:8d:c0:23:33:16:ec:10:77:15:34:
         9c:f3:7b:9c:81:f2:59:65:59:61:e6:0a:21:cb:fc:87:f0:94:
         a9:69:0e:1f:6f:db:64:7c:bf:9a:c7:b5:cf:b4:49:0a:8e:c8:
         b7:0c:10:ca:1e:50:61:a8:ce:00:29:d9:08:7c:23:65:db:51:
         42:8a:db:29:cc:1a:a6:b5:1f:dc:c1:56:15:e0:cc:45:5b:17:
         4d:8b:c4:91:bc:16:df:12:ca:c1:df:da:cb:23:70:c0:7c:a2:
         45:eb:38:8e:eb:bb:01:86:27:ac:ab:42:fb:c9:6b:81:00:ee:
         85:b7:30:0e:8d:19:05:fc:60:80:00:d7:cf:38:2c:08:77:54:
         fe:ce:48:dd:4d:fb:69:5f:6e:c8:9b:a8:83:8e:7e:48:e7:66:
         ab:83:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:43:40 2025 by rpki-client