Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39342e302f32332d3234203d3e203532333736.roa
File:                     3230302e3131352e39342e302f32332d3234203d3e203532333736.roa (raw, json)
Hash identifier:          1TTkmI2Gi9zWnLOYd0HWYZZyrSp9PSXRtBsQmaOEI/Q=
Subject key identifier:   77:A8:33:A1:59:38:90:11:62:FB:3E:0E:9F:65:F1:BC:04:E7:92:C9
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       1A6406FE746AB5634A3CE9AA06166F460416485A
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39342e302f32332d3234203d3e203532333736.roa
Signing time:             Tue 04 Feb 2025 18:35:07 +0000
ROA not before:           Tue 04 Feb 2025 18:30:07 +0000
ROA not after:            Tue 03 Feb 2026 18:35:07 +0000
asID:                     52376
IP address blocks:        200.115.94.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:64:06:fe:74:6a:b5:63:4a:3c:e9:aa:06:16:6f:46:04:16:48:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:07 2025 GMT
            Not After : Feb  3 18:35:07 2026 GMT
        Subject: CN=77A833A15938901162FB3E0E9F65F1BC04E792C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:9e:f8:c4:83:1b:9d:e1:f8:8a:72:0e:78:
                    78:26:ce:0a:16:25:66:05:5d:ff:95:5b:df:b2:7c:
                    7e:57:85:23:9a:4d:54:d3:c5:c4:8d:a4:16:c9:16:
                    0f:55:09:fd:2a:6f:34:e5:8e:2e:90:de:0d:4f:5b:
                    09:cf:83:1a:44:09:2e:17:3d:a6:56:2a:3f:94:7b:
                    b9:fb:74:7d:56:1e:e6:38:d7:48:b0:f5:ab:3a:41:
                    06:21:22:09:84:52:d6:1c:2e:3b:b8:09:2d:4c:70:
                    e7:f2:5d:64:b8:6b:d9:e5:4a:1a:b6:46:a3:db:d5:
                    49:26:5b:10:f9:b4:f1:0e:b3:e6:d1:28:97:50:20:
                    fe:dc:d8:af:8d:64:66:9f:9c:60:6f:da:76:1c:f4:
                    26:af:ea:b0:31:4e:14:c3:f3:94:c5:69:fb:46:41:
                    9b:1b:c6:a3:32:23:75:d8:ad:74:55:84:33:a8:2d:
                    b6:c8:84:7f:3f:d2:18:21:15:b3:da:f4:e4:59:33:
                    14:33:5d:df:4e:c3:8f:11:ce:e3:fe:16:a7:24:c8:
                    34:15:0c:1b:e5:47:09:42:00:51:b0:7b:cf:40:21:
                    b7:d6:72:5b:44:d0:f3:90:05:a5:ed:19:ef:80:38:
                    68:ce:88:de:7c:8c:13:84:69:7f:61:4e:24:8d:b8:
                    99:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A8:33:A1:59:38:90:11:62:FB:3E:0E:9F:65:F1:BC:04:E7:92:C9
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e3131352e39342e302f32332d3234203d3e203532333736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:81:4b:5d:9c:9d:79:e0:9b:9e:9e:bf:e7:34:fe:33:ab:2e:
         48:6f:30:74:66:80:14:54:07:12:1e:33:d1:c3:3a:3b:c9:fb:
         4a:e1:d1:6c:5c:82:6a:f8:38:d6:7a:b0:c5:be:ba:78:d0:c3:
         0a:cf:dc:22:fd:a8:29:75:37:7b:c0:98:15:e8:5b:27:f8:72:
         49:19:d0:d8:dd:3f:68:8f:3a:86:32:4f:71:98:33:d3:5b:fb:
         3e:80:5a:d3:cf:e2:ac:2c:75:6e:1f:5d:25:11:52:70:f3:71:
         ac:fa:10:ce:87:44:8e:5a:86:97:df:26:35:50:12:1b:23:98:
         ee:ec:3c:72:b1:df:09:1d:a7:60:b3:22:85:ae:54:64:cf:92:
         a0:a4:29:ab:9e:da:8f:92:70:51:33:0f:d7:a1:da:f6:b7:a5:
         b3:54:03:8a:54:6b:53:4c:50:65:7e:40:1c:7d:e3:5b:82:70:
         85:e2:8b:96:6c:63:2b:fc:be:8f:57:42:1f:5e:83:4b:29:6b:
         d2:c8:f5:36:c9:75:b7:d1:80:58:d9:db:01:31:84:1d:1a:af:
         1d:fa:80:ff:70:5e:6a:54:94:4b:a9:10:44:3d:5a:aa:a0:e4:
         ac:23:8f:dd:94:10:44:e2:59:61:a1:7c:e0:34:44:0c:8f:fc:
         30:1c:d3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:42 2025 by rpki-client