Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3131352e302f32342d3234203d3e203237363738.roa
File:                     3230302e32372e3131352e302f32342d3234203d3e203237363738.roa (raw, json)
Hash identifier:          2o5NvdkzVFUt/1QQN009z3PuyNr9MVtyIwMhIVJAVY4=
Subject key identifier:   B7:A7:10:E5:E1:E1:C0:E6:D6:29:4E:BA:60:B1:6A:71:26:0A:90:41
Certificate issuer:       /CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
Certificate serial:       74C52309CDF9810D27724D66597EC403E8E3C3AB
Authority key identifier: CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3131352e302f32342d3234203d3e203237363738.roa
Signing time:             Tue 04 Feb 2025 18:43:18 +0000
ROA not before:           Tue 04 Feb 2025 18:38:18 +0000
ROA not after:            Tue 03 Feb 2026 18:43:18 +0000
asID:                     27678
IP address blocks:        200.27.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c5:23:09:cd:f9:81:0d:27:72:4d:66:59:7e:c4:03:e8:e3:c3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC3826EC9313209DAC612BC5F2610CB33D33D0E6
        Validity
            Not Before: Feb  4 18:38:18 2025 GMT
            Not After : Feb  3 18:43:18 2026 GMT
        Subject: CN=B7A710E5E1E1C0E6D6294EBA60B16A71260A9041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:d5:0c:b7:05:18:9d:15:a4:53:a3:e0:34:
                    d0:1b:a9:02:32:1d:60:79:4d:ee:08:71:25:62:13:
                    c3:d3:2c:9e:c6:c0:86:49:09:dd:72:72:71:c1:cf:
                    07:a4:42:4c:f4:a8:fd:94:49:f8:1b:77:27:6b:f9:
                    d4:1f:f9:38:f7:53:ba:72:55:75:0f:41:b7:92:d1:
                    0e:23:cb:e1:d0:0b:bb:d6:2d:ff:8d:44:1d:21:98:
                    bb:b8:22:b5:1e:46:f0:6f:b2:b7:69:0e:64:87:e2:
                    0f:a2:5b:e0:0c:c7:64:7b:69:0d:77:05:2a:fe:eb:
                    fb:d0:d2:6a:bf:8e:5e:31:9e:6c:04:74:13:ff:c9:
                    21:07:e5:73:a8:ad:4e:41:3b:c2:90:0c:f0:fa:8a:
                    18:de:a2:23:27:c0:7d:bc:4b:96:b7:04:00:40:c2:
                    63:f0:ae:99:35:6f:25:73:25:92:88:7a:7e:1e:8c:
                    f7:b9:28:37:be:70:b9:f7:39:70:1d:64:40:6f:5a:
                    ac:22:f8:87:31:38:e1:6c:ea:ca:aa:17:db:56:6d:
                    c7:7f:41:74:a9:9d:19:ed:91:32:2b:c6:5f:9a:50:
                    cf:71:c6:90:d9:e3:e4:dd:d8:6c:f4:a5:ed:10:42:
                    1d:61:ea:d0:dd:63:82:0d:2d:53:55:ba:3c:03:35:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:10:E5:E1:E1:C0:E6:D6:29:4E:BA:60:B1:6A:71:26:0A:90:41
            X509v3 Authority Key Identifier:
                keyid:CC:38:26:EC:93:13:20:9D:AC:61:2B:C5:F2:61:0C:B3:3D:33:D0:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC3826EC9313209DAC612BC5F2610CB33D33D0E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2446CADE6AE4A71BC6561A7FCA4FB412DA7C4F856E18E5C66DD3242C98F196B3/0/3230302e32372e3131352e302f32342d3234203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.27.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:90:ad:4e:42:12:bb:a1:07:a2:91:d1:68:e6:52:f9:94:bb:
         0a:a1:a4:5d:fc:00:c8:2b:9d:d0:66:e6:5a:aa:5c:43:73:3b:
         12:92:23:96:6f:cd:5e:bf:5a:bc:d5:f1:be:9a:5a:fb:4a:9b:
         06:7b:65:4a:9c:80:f6:33:da:e4:32:4a:7d:4e:a9:93:f5:59:
         5d:88:3f:bb:28:6e:28:02:5c:db:60:41:41:a9:75:bd:9d:8c:
         27:25:c3:34:9d:35:9a:1e:33:8b:9f:34:84:46:0b:c7:d2:79:
         76:56:4e:02:f2:37:76:69:fd:31:df:ff:42:82:68:e2:a8:a0:
         83:d0:07:58:aa:2e:ea:4a:48:45:d1:cb:f4:5b:bf:45:41:e7:
         a2:5c:96:be:91:2b:f1:95:8a:66:38:ef:a8:ce:17:e6:92:38:
         bc:f2:82:7a:06:a9:55:30:5d:2f:7a:cd:7a:7d:f6:c3:5b:32:
         8c:d4:42:2e:ba:fc:7d:af:17:45:5a:3b:60:b0:f8:15:9c:2e:
         9e:68:69:ae:8d:9b:5a:03:51:8b:58:f4:ce:03:f5:57:13:77:
         4d:92:c1:2f:1a:63:16:0e:b2:3a:f1:13:b3:9a:2e:53:29:66:
         df:c4:ed:3d:5f:36:bf:6a:58:80:af:60:c8:90:a6:0b:d6:e1:
         00:e5:80:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:00 2025 by rpki-client