Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234302e302f32322d3234203d3e203132323532.roa
File:                     3230302e31342e3234302e302f32322d3234203d3e203132323532.roa (raw, json)
Hash identifier:          OLrMBkT40Sg5PiTYz1kLVAjFjCXm1bjzCn1NaU0QFzE=
Subject key identifier:   DD:61:20:EA:3F:3C:0E:42:7B:B2:35:D2:82:DD:A2:6D:3E:D5:01:DF
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       5B0E8C4DBD673E776B89A73CA763E8197E23DEF2
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234302e302f32322d3234203d3e203132323532.roa
Signing time:             Tue 04 Feb 2025 18:43:11 +0000
ROA not before:           Tue 04 Feb 2025 18:38:11 +0000
ROA not after:            Tue 03 Feb 2026 18:43:11 +0000
asID:                     12252
IP address blocks:        200.14.240.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:0e:8c:4d:bd:67:3e:77:6b:89:a7:3c:a7:63:e8:19:7e:23:de:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:11 2025 GMT
            Not After : Feb  3 18:43:11 2026 GMT
        Subject: CN=DD6120EA3F3C0E427BB235D282DDA26D3ED501DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:6e:89:fb:e1:a4:71:d0:ed:f8:81:79:1e:
                    97:1f:5d:77:44:b2:5f:3c:98:45:3d:9f:fd:57:46:
                    10:11:ae:d8:83:78:2b:80:0f:39:d6:bb:b2:4f:4d:
                    ed:a3:59:b2:f2:70:f9:de:26:ef:65:af:50:3a:7d:
                    c5:a5:43:30:6e:47:14:ae:6c:bc:59:d2:c7:9f:fb:
                    c2:67:e3:ff:04:83:e0:42:6f:6e:96:f7:a5:05:ff:
                    38:7f:64:df:d3:a6:69:1f:0f:a7:43:6a:00:9b:f6:
                    fe:fb:96:77:43:f4:9f:ca:67:70:b2:21:60:e1:b7:
                    38:03:ff:3e:dc:3b:36:14:ee:a9:29:13:2d:1d:ec:
                    1c:f2:f7:7c:64:3e:c1:65:3b:ec:4a:9d:9a:7d:d4:
                    e6:5d:9d:90:b8:f3:94:95:38:67:c9:92:8c:9c:20:
                    8c:e5:d3:40:94:8b:fc:e9:0c:7d:24:fd:8c:84:8b:
                    1e:ca:95:e4:90:c5:a3:de:e8:ae:f7:bd:53:a2:c4:
                    f8:34:6b:70:ea:af:aa:aa:0e:5c:b6:4d:4d:05:b4:
                    30:68:cf:c1:4f:82:36:b3:b3:ac:a7:b0:69:48:90:
                    e5:f7:d5:02:44:74:f1:7e:88:52:32:f1:bd:7f:43:
                    57:f2:fe:46:e3:d7:e5:ad:52:42:3c:5b:0b:9d:d3:
                    89:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:20:EA:3F:3C:0E:42:7B:B2:35:D2:82:DD:A2:6D:3E:D5:01:DF
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3234302e302f32322d3234203d3e203132323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:f5:6b:18:c9:98:20:78:14:a4:c7:81:c9:c5:ac:44:e8:
         6c:1e:e6:03:a2:5a:ff:91:51:7d:f7:62:3c:2a:a0:0f:4c:99:
         ca:53:e4:b1:be:64:1c:2a:d6:5b:ac:e3:ae:01:93:1e:44:42:
         8b:e5:2a:37:e2:4a:0f:3b:62:cf:f4:72:74:11:11:da:f8:1d:
         9c:ce:8d:e7:0f:57:68:a9:27:8c:9f:74:15:90:4f:75:90:76:
         6e:95:47:30:5c:3c:3a:48:f4:62:b5:fb:02:6a:09:b5:1f:0d:
         8e:20:ad:8c:88:f2:0d:d8:94:f3:24:88:cf:a0:15:2b:b2:3b:
         27:05:f4:cc:73:8d:f9:43:75:10:54:4e:e0:a9:9f:fb:63:8c:
         dd:a3:0c:6a:10:3e:49:11:f3:27:7c:1c:2e:f4:6b:18:d2:b6:
         77:ff:af:61:a9:9f:f6:74:12:35:72:c8:3a:12:19:ed:51:29:
         33:e4:ed:1b:0a:d0:12:5b:24:4b:ca:e2:83:60:c6:38:d8:3a:
         1e:78:97:7e:fc:34:83:90:28:51:b5:81:1f:bd:df:44:53:94:
         74:3d:31:91:a0:7f:96:22:8e:f1:cb:97:1f:8c:14:c4:f3:e8:
         69:d0:dd:d8:0d:de:49:48:86:e6:00:76:ad:7d:96:bc:92:56:
         b6:06:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:03 2025 by rpki-client