Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235332e302f32342d3234203d3e203134303830.roa
File:                     3230302e31342e3235332e302f32342d3234203d3e203134303830.roa (raw, json)
Hash identifier:          cLsrRXfk7naub3iYsChvIENY9kBkCtNJWkCZzrVHhMo=
Subject key identifier:   79:78:3A:34:70:7D:FF:34:30:30:09:0A:10:A4:DC:F4:A6:B1:9D:2A
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       4FEE164C1F0542D59A6D443AEE5A686EB549A6D2
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235332e302f32342d3234203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:43:13 +0000
ROA not before:           Tue 04 Feb 2025 18:38:13 +0000
ROA not after:            Tue 03 Feb 2026 18:43:13 +0000
asID:                     14080
IP address blocks:        200.14.253.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ee:16:4c:1f:05:42:d5:9a:6d:44:3a:ee:5a:68:6e:b5:49:a6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:13 2025 GMT
            Not After : Feb  3 18:43:13 2026 GMT
        Subject: CN=79783A34707DFF343030090A10A4DCF4A6B19D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:d4:62:2a:5f:11:33:c3:ed:d5:7a:67:48:
                    fd:05:10:1b:ef:7b:2a:8f:e1:05:5f:d2:4d:5a:4b:
                    8b:9a:5e:7f:01:a8:21:d2:63:35:a3:6c:2d:95:86:
                    46:c2:e8:13:8c:d2:71:da:ba:25:3a:e0:f2:3b:be:
                    12:55:92:66:ec:c6:b6:58:66:3a:25:4c:d2:17:c3:
                    dd:f9:5f:50:8c:3b:4e:de:e8:80:94:22:d2:cb:54:
                    f5:20:d9:ba:29:46:eb:56:f8:79:dc:dc:2b:80:fb:
                    ad:f4:8a:36:76:73:b0:21:f1:3a:16:1b:a6:f1:b6:
                    06:49:38:41:a2:d0:91:83:d1:69:96:1b:e0:14:0c:
                    09:df:81:4d:55:5a:00:11:74:0b:03:4e:d9:dc:61:
                    66:75:bb:f9:fa:cf:69:28:3c:c0:ba:8c:23:13:4c:
                    a6:74:8b:4f:5e:98:95:c6:8a:7c:19:12:0e:c7:89:
                    22:11:da:96:0a:70:c0:84:27:7c:22:16:9a:00:aa:
                    c1:36:7e:cd:30:e6:0a:51:42:8e:97:b4:27:e9:fd:
                    53:7d:fa:4d:d3:00:db:c5:a8:4f:b5:18:36:b8:73:
                    6e:67:a8:d7:24:16:6b:4c:ac:65:d4:ea:fc:24:2c:
                    1a:c5:a3:e3:97:11:40:5f:08:44:f8:92:75:c5:42:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:78:3A:34:70:7D:FF:34:30:30:09:0A:10:A4:DC:F4:A6:B1:9D:2A
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e31342e3235332e302f32342d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:ef:cd:6b:9f:12:3e:04:92:c4:a7:72:13:5e:e6:ab:44:
         c8:e1:d7:39:52:bf:2e:63:dd:ec:ff:bb:9d:61:c4:8e:64:b1:
         54:62:4f:f7:59:cb:e4:cf:e0:19:2c:fd:81:da:dc:ce:58:c7:
         07:68:56:77:b3:0f:3e:d6:73:61:2b:a4:53:7f:a5:0e:6a:e2:
         4f:7b:7d:4e:d0:48:7f:7a:30:df:fe:24:8b:7e:8d:56:97:58:
         be:dc:d2:1a:18:1f:c6:9e:37:66:0e:76:ed:2e:14:e6:03:ac:
         a1:31:4a:38:30:4f:df:68:04:3c:3e:b6:81:b1:c3:65:92:68:
         60:08:a0:dc:25:7a:93:e8:c6:bd:2d:93:92:54:3c:0d:41:ab:
         73:57:2a:8d:78:e2:03:cc:33:ca:55:91:22:39:2a:de:3d:5d:
         22:7f:31:4f:14:b2:fc:8e:0b:d1:69:35:d0:f1:de:82:e3:12:
         67:4b:91:49:9a:37:98:b4:4b:56:66:bd:b4:7f:f7:30:73:ff:
         a3:70:73:97:2b:e9:df:59:a7:db:cb:84:06:fb:08:c1:62:b8:
         05:01:a6:a5:47:6a:08:07:18:3a:7a:dc:84:2a:c5:94:80:bd:
         ba:5e:83:95:10:9e:4d:b6:7b:26:7b:f8:d0:1a:bc:83:0a:c6:
         df:1d:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:57 2025 by rpki-client