Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231342e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3231342e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          1j/W8CFsr7XvjzTm8gPm18O5nmIXBHxkDE0fN50AY/k=
Subject key identifier:   9D:AF:9C:25:13:04:8D:19:10:B9:F8:1E:DB:E3:25:CB:04:32:C1:EB
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       742E91A011F5D5F14486AB3FC92B5D5627281916
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231342e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:08 +0000
ROA not before:           Tue 04 Feb 2025 18:38:08 +0000
ROA not after:            Tue 03 Feb 2026 18:43:08 +0000
asID:                     6429
IP address blocks:        200.14.214.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2e:91:a0:11:f5:d5:f1:44:86:ab:3f:c9:2b:5d:56:27:28:19:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:08 2025 GMT
            Not After : Feb  3 18:43:08 2026 GMT
        Subject: CN=9DAF9C2513048D1910B9F81EDBE325CB0432C1EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:b3:96:b5:57:d6:bc:6f:0f:db:1b:a1:04:
                    ae:8e:a5:8b:8c:ee:77:55:54:95:b5:b2:fe:0d:ad:
                    86:b0:a9:47:32:6c:89:b7:23:bf:4f:b2:4c:e1:fd:
                    32:0c:29:6f:89:20:12:ad:82:c1:c3:17:be:b5:87:
                    e8:a7:4f:02:f7:f9:89:9c:37:15:8c:08:18:47:05:
                    09:64:01:76:e8:26:46:5b:60:ba:5a:d6:3d:2b:f1:
                    ba:00:3d:23:c8:39:f9:76:c4:29:2f:b7:28:1a:60:
                    f2:d8:42:64:a8:d2:88:aa:89:dc:a1:fd:76:f5:03:
                    fb:b4:be:0a:04:dc:2a:bd:28:fe:7d:0b:f1:10:37:
                    a6:b6:39:a7:56:55:e5:28:0c:fc:0b:0d:cb:52:3a:
                    6f:6b:da:4c:4a:77:f6:6b:34:ae:98:69:1e:20:44:
                    90:08:48:ee:28:09:e4:3b:d8:9c:5d:ce:10:3a:d0:
                    56:83:21:c8:5c:07:98:13:e5:98:e7:9d:42:0e:bf:
                    dc:1b:b9:74:9c:3b:18:d3:a1:15:7c:4b:1b:63:05:
                    64:bb:de:c3:09:a7:62:4b:3c:20:21:62:a4:0d:38:
                    1a:d6:a9:c5:9a:44:4c:18:8b:b4:c4:1c:70:de:4c:
                    72:43:68:e1:cd:83:06:d8:cf:f5:48:dd:54:94:69:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AF:9C:25:13:04:8D:19:10:B9:F8:1E:DB:E3:25:CB:04:32:C1:EB
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3231342e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:f7:cd:80:29:7d:13:14:1d:68:ce:8a:96:d8:7f:80:04:
         22:c0:37:86:18:a4:18:27:a0:08:d4:26:3a:ed:74:28:2e:d3:
         d9:03:c2:42:26:c7:15:88:30:b8:ee:3c:c5:f6:6d:06:ad:f5:
         8d:d1:81:66:f9:ee:61:b1:37:6b:32:e8:56:ba:9d:dd:22:b2:
         06:1e:2f:df:cb:f9:69:03:c7:8e:06:a3:34:76:13:f9:81:36:
         af:45:78:9a:22:e6:be:56:38:ef:4b:b8:3a:07:78:fc:bf:95:
         4c:4f:6e:c0:d9:ca:4f:f3:76:af:e5:be:77:89:c2:d2:db:9c:
         68:49:7c:5a:b0:fc:a1:22:70:16:ae:83:a5:c9:7b:dd:d0:39:
         84:a6:37:ee:ca:9e:e8:14:e9:04:e0:f7:76:90:63:ce:4b:b4:
         65:65:eb:27:f0:bd:ed:f1:b4:cc:f4:5b:fb:53:7f:23:d3:76:
         b4:52:e0:46:8d:f6:e1:2c:f1:e7:a0:c4:43:89:15:5e:f3:68:
         37:e5:57:1e:0d:d2:6a:27:ee:2a:3d:01:8a:38:76:db:10:03:
         2c:14:36:91:b7:e4:0a:cd:37:c5:17:79:59:8d:01:bd:e9:e1:
         46:8f:4f:b8:ee:6f:df:c4:df:b5:9e:eb:20:47:ed:e7:c7:d0:
         8e:c9:a3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:05 2025 by rpki-client