Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3139322e302f32342d3234203d3e2036343239.roa
File:                     3230302e31342e3139322e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          0YPtmQMDmxdRwwgABuq7MDR0g+XYV9ESY4kShBZx3yo=
Subject key identifier:   58:85:55:03:16:8C:AD:44:A6:98:66:03:C8:25:09:1A:35:BE:EF:92
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       2E55FC853389D4A24DCEB4F65D626182B3FB5F03
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3139322e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:17 +0000
ROA not before:           Tue 04 Feb 2025 18:38:17 +0000
ROA not after:            Tue 03 Feb 2026 18:43:17 +0000
asID:                     6429
IP address blocks:        200.14.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:fc:85:33:89:d4:a2:4d:ce:b4:f6:5d:62:61:82:b3:fb:5f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:17 2025 GMT
            Not After : Feb  3 18:43:17 2026 GMT
        Subject: CN=58855503168CAD44A6986603C825091A35BEEF92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:73:17:45:78:87:d0:2d:d7:59:23:4d:18:
                    ec:7e:be:1e:62:5f:ba:4a:68:8a:65:63:54:78:29:
                    75:3e:ca:c0:cf:1d:53:77:c2:98:ff:f1:f8:b2:37:
                    f7:2a:02:8c:2e:39:3d:09:01:fe:1f:bd:07:07:bb:
                    b2:cf:17:7f:c1:2f:24:5b:66:fb:76:db:c2:17:a2:
                    32:62:07:7d:a8:78:51:53:76:00:9b:46:ac:8e:dd:
                    90:03:3f:86:c3:8b:7f:1e:c6:92:01:63:63:3b:6d:
                    b0:a4:a3:3f:6f:d5:c9:c8:6d:8e:3e:88:d1:94:70:
                    7d:0e:86:55:d5:43:cc:08:08:cf:99:50:46:8f:24:
                    df:92:64:45:bd:bd:35:6d:ae:69:d4:31:97:36:71:
                    48:a3:aa:60:c6:97:90:26:8a:4e:9a:b5:df:da:a2:
                    f5:4c:08:f5:2e:08:ab:2e:98:f6:18:46:7a:7c:76:
                    c7:c9:b4:80:0f:6b:f2:e1:0b:4e:3e:03:17:94:38:
                    23:7e:ba:62:20:77:53:fd:5b:2b:72:8b:7c:56:e5:
                    2f:0d:68:7a:4d:ef:83:5c:89:4a:73:62:47:83:d7:
                    9b:4e:5a:77:d2:fd:fe:dc:17:77:bd:e1:e0:ba:39:
                    e4:f4:0c:93:50:c7:a4:dc:ea:12:bc:c6:bf:b6:84:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:85:55:03:16:8C:AD:44:A6:98:66:03:C8:25:09:1A:35:BE:EF:92
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3139322e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:11:a9:e2:a9:c4:9e:b5:5f:ad:ba:4c:08:89:2c:c8:93:b2:
         6f:48:fa:26:8e:67:39:41:5f:5a:de:0e:a1:65:34:d4:a3:d8:
         f6:93:7d:d0:80:6f:05:c9:a4:90:d6:41:8e:6f:6d:c2:e0:69:
         1f:e7:99:b2:50:3f:33:66:3e:3c:98:cd:90:9f:a6:52:47:8e:
         47:54:2c:5c:42:9c:86:ca:dc:d8:12:47:96:46:d5:77:11:c7:
         f2:e9:75:71:cc:0b:c0:3b:56:b3:14:72:c9:6e:9d:b4:54:f2:
         bc:51:61:19:62:f9:a6:2a:ed:62:b4:70:75:c3:22:a6:1b:46:
         ad:98:4d:f7:63:4d:23:b4:7a:5f:2b:9c:fd:5b:1a:10:fe:5a:
         20:46:c8:c9:a7:eb:40:7c:34:2a:13:1e:da:fd:59:38:1f:08:
         63:b2:56:c4:b8:a0:46:c8:14:d2:7b:9f:19:f5:12:cb:2d:03:
         60:b6:b6:23:ca:98:5c:a4:37:9f:cd:61:b9:0d:83:33:9c:7a:
         27:5b:a3:3a:64:92:3d:c2:1b:fe:4c:cc:18:2c:8c:f8:2d:1b:
         bf:6d:02:d6:f2:a1:28:90:98:2b:da:80:f1:12:c3:86:95:76:
         a3:53:86:ce:e3:ab:d8:04:a1:92:38:cd:77:4a:cb:b0:dc:f8:
         96:6e:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:57 2025 by rpki-client