Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3232362e302f32332d3234203d3e2036343239.roa
File:                     3230302e31342e3232362e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          XCqTxro0bY6Siy+WQhwb2eBlsg00aalUl1D+KnWx60A=
Subject key identifier:   A6:6C:FA:09:93:2C:E7:E1:22:EC:13:2E:A2:2E:79:4D:F0:55:B7:E0
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       3777EDE8312A0260A234BF08A48170BAC7009786
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3232362e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 18:43:18 +0000
ROA not before:           Tue 04 Feb 2025 18:38:18 +0000
ROA not after:            Tue 03 Feb 2026 18:43:18 +0000
asID:                     6429
IP address blocks:        200.14.226.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:77:ed:e8:31:2a:02:60:a2:34:bf:08:a4:81:70:ba:c7:00:97:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:18 2025 GMT
            Not After : Feb  3 18:43:18 2026 GMT
        Subject: CN=A66CFA09932CE7E122EC132EA22E794DF055B7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:12:d9:44:54:7d:a3:ec:09:1c:bb:45:d0:
                    f6:67:45:4a:cb:c1:f1:98:3e:f9:38:58:2b:97:43:
                    a0:6b:7d:12:bd:ad:be:f3:b0:38:f4:19:29:d0:93:
                    57:a8:56:a1:f8:89:31:2c:15:c9:90:66:4a:15:85:
                    1e:fb:12:e1:89:50:f1:d3:99:17:c6:83:73:26:af:
                    40:db:ec:f6:69:96:51:4c:7f:f5:63:48:04:8b:e1:
                    1f:53:9c:b9:65:30:c7:ac:b6:94:7a:0b:39:23:09:
                    81:ce:72:c2:01:1f:ac:fc:5a:6d:4b:b9:02:7d:48:
                    ef:71:4e:43:65:93:e2:9b:39:25:e9:a4:0f:e6:63:
                    31:98:de:74:d8:d4:2f:21:8e:f9:d4:6b:6f:58:ae:
                    be:fe:37:76:a6:f7:00:03:67:2f:93:c3:86:ac:6f:
                    7e:1b:b0:11:2c:d4:50:ec:78:d5:f8:1e:5c:05:75:
                    69:44:8d:34:07:f4:09:5d:8f:f2:40:d4:a9:55:64:
                    0a:11:6d:1a:e8:b6:35:b2:21:dc:ce:01:5c:27:53:
                    e8:47:5e:94:fd:d7:c7:f1:03:b9:37:96:a7:06:ef:
                    3c:cb:3b:80:b6:5a:d9:b7:ac:91:de:1b:cf:f4:53:
                    2e:24:32:1e:32:64:32:06:84:4a:30:f2:8a:db:ff:
                    c9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6C:FA:09:93:2C:E7:E1:22:EC:13:2E:A2:2E:79:4D:F0:55:B7:E0
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3232362e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:70:b9:8a:c1:d2:ef:a2:5d:a1:c5:32:99:15:fa:2a:ee:50:
         c5:66:a1:28:d3:48:64:eb:c6:be:dc:d9:e3:16:a1:fa:1c:df:
         4d:cb:58:77:a2:08:94:96:0c:2b:aa:c2:cc:f9:97:36:ac:a2:
         6d:34:00:f5:8f:5b:30:33:c1:19:b4:0f:88:ce:20:72:04:f4:
         33:a6:2e:90:a7:50:dc:db:ef:0c:6d:06:29:fb:d7:c5:a4:db:
         22:96:d9:0a:54:fd:c8:f6:c7:a2:3d:7c:bc:84:e4:26:25:c1:
         5e:fa:e9:2c:20:04:0a:73:ed:1b:b7:9c:b7:6f:30:95:52:21:
         d2:27:6d:55:75:00:7e:60:5a:03:86:06:ab:a9:69:9e:2b:d2:
         68:16:47:21:ac:e9:b2:48:67:a4:0d:1b:be:fe:77:c1:76:38:
         0c:47:41:61:40:32:97:11:4d:0b:72:56:74:e2:b4:71:ee:ae:
         46:f7:b8:b1:52:1f:48:fb:d7:f4:47:4d:e3:1c:bb:fe:8b:da:
         09:fe:99:cc:13:a3:b6:77:44:f3:fb:04:41:62:e6:3a:04:11:
         75:27:15:84:1b:e2:f9:0f:f0:99:50:56:b5:4c:85:ed:2b:9b:
         96:7d:d0:df:d3:1c:6a:6b:47:e9:1f:37:2c:0f:8e:35:4a:f9:
         39:be:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:25 2025 by rpki-client