Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38332e302f32342d3234203d3e203532343034.roa
File:                     3230302e3131352e38332e302f32342d3234203d3e203532343034.roa (raw, json)
Hash identifier:          7AGHqSuFRuHnPAtB3hE8uoQYJcQ1Mk+w7zOvcHqTOQA=
Subject key identifier:   B7:61:E7:E7:A4:3A:91:8B:89:67:52:24:68:4D:95:A6:0A:E4:4D:01
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       498DB11ADD9090BD3FEA81F39FCF3E6AA75B504B
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38332e302f32342d3234203d3e203532343034.roa
Signing time:             Tue 04 Feb 2025 18:35:23 +0000
ROA not before:           Tue 04 Feb 2025 18:30:23 +0000
ROA not after:            Tue 03 Feb 2026 18:35:23 +0000
asID:                     52404
IP address blocks:        200.115.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8d:b1:1a:dd:90:90:bd:3f:ea:81:f3:9f:cf:3e:6a:a7:5b:50:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:23 2025 GMT
            Not After : Feb  3 18:35:23 2026 GMT
        Subject: CN=B761E7E7A43A918B89675224684D95A60AE44D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:aa:50:6e:d4:6b:a1:d0:82:6e:0b:7e:14:
                    ba:d6:27:6c:33:8b:c6:6e:10:df:d0:9b:c1:07:59:
                    ae:f3:ee:ea:42:e4:16:62:f6:a8:5c:d8:65:92:89:
                    eb:32:18:0c:59:e7:f1:fd:9e:75:d3:c3:98:46:b5:
                    52:a3:03:f7:31:92:75:37:26:50:6e:ac:4c:9c:85:
                    27:a3:8e:06:3c:92:56:8b:8f:07:e2:d4:e5:d9:9e:
                    c8:51:52:e1:42:3e:ba:6c:bc:f0:da:ea:82:52:0c:
                    25:73:b6:d9:51:c2:11:e5:a9:8c:28:46:b6:50:cd:
                    e2:16:c0:3d:7b:1e:a5:37:e8:17:57:b9:f1:bf:8b:
                    a4:fd:fa:5b:bc:93:16:62:15:d5:b3:cd:d8:a8:2d:
                    bb:7d:4f:55:f5:bb:d0:ad:b6:5b:4f:c5:6b:e6:d1:
                    c6:20:7b:91:95:af:2e:41:43:6a:72:56:26:45:79:
                    b5:74:d6:d8:5a:64:43:58:7e:d2:81:17:c2:8d:d0:
                    4d:db:06:23:41:b8:0d:2c:c8:08:c3:27:99:fb:09:
                    fc:36:f9:cc:99:9e:ed:e9:38:3c:26:c3:31:e6:eb:
                    0d:5c:99:32:18:b3:db:d3:54:ff:da:61:e7:48:7f:
                    31:02:8e:b6:c0:c8:ef:67:58:58:13:f6:d1:1d:0f:
                    aa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:E7:E7:A4:3A:91:8B:89:67:52:24:68:4D:95:A6:0A:E4:4D:01
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38332e302f32342d3234203d3e203532343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:b8:b3:be:e2:65:72:12:5a:a9:e0:a4:f0:7e:4f:03:e9:e5:
         29:ea:61:84:7b:62:8c:33:2f:4b:ee:87:86:7c:7b:6c:69:7f:
         f6:52:2a:ae:f7:d4:d0:f1:69:18:0b:72:bb:13:a7:23:01:02:
         61:f8:eb:45:7e:0e:d0:0a:74:bd:1d:50:e6:28:27:dc:be:ae:
         3c:2f:4f:1e:81:ad:d0:cd:74:5f:d4:d8:58:68:1a:55:d9:0e:
         d7:c1:68:b8:87:79:76:ec:41:da:ac:71:45:93:29:64:cc:98:
         e2:fe:6e:cb:44:c5:a9:ff:72:86:98:80:a7:cb:ed:2d:c0:9f:
         51:c0:b0:e7:e5:25:c8:d0:2b:96:05:2c:5c:df:da:40:ad:bb:
         ac:32:fe:b8:e1:2c:17:52:44:a6:f8:b6:1e:a8:21:ed:45:54:
         a9:f5:62:1f:e1:ca:e7:fc:05:63:8c:d4:fc:0d:9c:e1:46:48:
         ed:61:9e:14:23:9e:f3:8a:d7:a4:28:d7:c9:76:41:2d:39:99:
         49:80:07:b6:89:9a:35:1c:57:86:b7:1a:7b:e7:3f:c3:41:28:
         c2:5a:11:e0:57:62:30:84:d3:04:c3:84:6d:1f:1d:e9:84:54:
         45:cd:24:8b:d2:98:42:bd:0a:e3:a5:be:c4:56:0b:0f:26:4b:
         29:12:cf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:08 2025 by rpki-client