Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38362e302f32342d3234203d3e203532333539.roa
File:                     3230302e3131352e38362e302f32342d3234203d3e203532333539.roa (raw, json)
Hash identifier:          SrP38ZLor4hZi+cG7OFaxUdxjAQd+2iHExPxpxig35Y=
Subject key identifier:   2F:6B:3E:74:DE:92:68:88:B6:DE:2A:F1:D8:A8:45:96:CB:A4:AD:10
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       51681939377AC46EAED7A0C15802F7A1108DA06E
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38362e302f32342d3234203d3e203532333539.roa
Signing time:             Tue 04 Feb 2025 18:35:19 +0000
ROA not before:           Tue 04 Feb 2025 18:30:19 +0000
ROA not after:            Tue 03 Feb 2026 18:35:19 +0000
asID:                     52359
IP address blocks:        200.115.86.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:19:39:37:7a:c4:6e:ae:d7:a0:c1:58:02:f7:a1:10:8d:a0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:19 2025 GMT
            Not After : Feb  3 18:35:19 2026 GMT
        Subject: CN=2F6B3E74DE926888B6DE2AF1D8A84596CBA4AD10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:75:41:6c:85:1c:86:2f:f3:5b:d8:ac:78:
                    8c:f1:f0:40:67:7e:d1:90:71:1d:32:ef:08:ea:36:
                    8e:58:27:c6:f1:1a:90:31:cb:58:58:e9:d2:be:e1:
                    7b:f4:68:a2:03:1e:98:a3:73:0f:b5:39:96:ec:8e:
                    c5:a9:0f:a2:c9:45:57:c2:75:a3:5e:34:5b:60:43:
                    4f:eb:e6:39:bc:de:b1:b1:5d:0a:a0:43:b1:6c:01:
                    32:2e:50:0f:31:1e:57:8e:fa:c1:23:85:83:1c:78:
                    a8:f1:eb:2d:16:3c:b0:7e:f0:eb:71:32:1b:95:d9:
                    5a:be:5b:3e:8a:77:67:9c:5e:e6:61:50:8f:cd:ac:
                    de:a9:96:9a:92:57:39:8d:c7:53:90:dc:5e:0d:4f:
                    70:40:10:1a:3d:cf:40:67:1d:7d:48:6a:65:3e:54:
                    65:0a:64:ef:2c:ba:04:38:5f:e4:82:73:65:60:11:
                    2e:1c:df:f1:ac:06:e2:25:6a:6b:41:be:ce:a5:87:
                    79:fc:e0:c2:18:4f:2d:9e:78:4d:cf:f5:da:e7:32:
                    75:7c:3a:f9:80:6c:19:91:be:22:8b:51:cd:ea:d6:
                    4b:67:d7:02:54:e3:f2:ef:3d:4e:86:d6:c7:60:32:
                    d4:d1:05:13:c3:88:de:cf:2f:cb:dd:79:b0:10:b3:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:3E:74:DE:92:68:88:B6:DE:2A:F1:D8:A8:45:96:CB:A4:AD:10
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e38362e302f32342d3234203d3e203532333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:a7:69:3d:40:ec:bd:8a:5a:8d:7d:e5:b2:c4:bd:f1:23:76:
         f1:d0:4b:0a:2b:fe:1d:4a:c1:02:65:25:e9:16:55:bc:72:21:
         bf:b6:8b:9c:38:2d:58:41:e7:70:4b:85:b0:90:25:a1:97:a5:
         59:c8:23:b2:67:f1:f6:32:66:b8:48:df:1c:14:13:1b:01:db:
         b3:d1:6e:d3:34:d4:a4:b9:f6:b5:9e:b0:05:45:2b:ef:2b:75:
         67:1c:54:0b:e9:e0:75:e6:ac:f6:c6:52:d2:3c:e0:d0:3c:af:
         e7:b4:7b:25:f1:b6:5a:6a:5f:58:d0:0c:2f:70:8e:57:85:a0:
         55:31:7c:e9:e0:b6:90:f4:1a:f9:c6:fe:44:c4:4b:8f:86:a1:
         a8:64:d6:15:55:38:21:df:69:c6:50:6f:1a:b1:81:ab:d0:eb:
         bf:4d:c3:2a:d8:02:38:6a:ab:46:7b:bc:79:68:29:0b:ff:df:
         ff:94:5a:20:aa:2a:17:50:d6:d6:d3:60:a4:71:55:ca:62:72:
         e1:09:8a:10:89:f7:2a:ce:7b:08:67:b8:5d:ad:8e:16:0f:eb:
         1a:7f:0e:98:df:8e:9f:9a:99:78:a8:5a:56:98:4c:4c:22:eb:
         36:92:2e:69:fb:41:c8:e1:00:9f:c3:39:f4:30:e4:47:e6:01:
         05:d6:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:07 2025 by rpki-client