Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa
File:                     3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa (raw, json)
Hash identifier:          slVxT5pi6o9C6PiwsGoP71iwab2eh+BGOKfAkk75++s=
Subject key identifier:   8F:06:AA:00:CF:E1:02:65:ED:D3:BF:B8:C0:EA:50:3D:EB:8B:34:95
Certificate issuer:       /CN=3291970D27DCEFC28622665006BF41C08C701A3D
Certificate serial:       673882A5FA628E24E5F7701B9F52FF793E21357A
Authority key identifier: 32:91:97:0D:27:DC:EF:C2:86:22:66:50:06:BF:41:C0:8C:70:1A:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3291970D27DCEFC28622665006BF41C08C701A3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa
Signing time:             Tue 04 Feb 2025 18:31:52 +0000
ROA not before:           Tue 04 Feb 2025 18:26:52 +0000
ROA not after:            Tue 03 Feb 2026 18:31:52 +0000
asID:                     262200
IP address blocks:        200.124.120.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:38:82:a5:fa:62:8e:24:e5:f7:70:1b:9f:52:ff:79:3e:21:35:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3291970D27DCEFC28622665006BF41C08C701A3D
        Validity
            Not Before: Feb  4 18:26:52 2025 GMT
            Not After : Feb  3 18:31:52 2026 GMT
        Subject: CN=8F06AA00CFE10265EDD3BFB8C0EA503DEB8B3495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:b3:0e:b3:a3:98:4f:61:03:e5:2f:be:56:
                    93:2c:e7:2e:79:2e:35:36:b6:b5:49:6d:38:d9:6b:
                    77:ae:fb:28:24:cc:ce:35:8d:59:f8:dc:fe:56:df:
                    f4:d7:65:28:a1:02:db:d0:fb:8d:b7:de:77:67:b4:
                    dd:35:07:c5:c8:be:36:aa:54:1c:66:2c:78:c5:64:
                    77:26:7f:dc:89:28:40:bc:8c:cf:35:36:95:15:64:
                    2a:53:87:a0:2a:4b:c7:58:4b:6c:05:0b:f7:01:8d:
                    a1:d7:04:7c:f8:5d:62:9c:d5:43:1d:98:8a:9c:cc:
                    42:ca:db:d2:55:1e:3c:65:1a:72:12:7d:a7:ec:2c:
                    5c:dc:c3:22:db:18:e1:18:85:e4:d0:15:36:fb:cd:
                    6e:25:a9:6d:06:14:2b:56:ff:fb:43:e9:d3:47:26:
                    6e:3b:e8:b3:74:e4:e6:53:e1:6c:e6:6e:53:a2:29:
                    1c:bf:b8:a3:85:93:9e:a1:f7:b8:38:f0:76:00:43:
                    c1:ae:9e:c2:d4:27:a3:86:f4:52:26:cd:57:ab:b7:
                    da:18:0d:6b:b0:d9:7d:36:cf:8b:dc:9f:a8:f3:d9:
                    d2:c9:d6:2c:d5:38:95:77:b4:1f:f1:e9:9b:16:d9:
                    49:75:3c:98:08:eb:8a:98:95:2e:81:47:20:0b:2d:
                    96:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:06:AA:00:CF:E1:02:65:ED:D3:BF:B8:C0:EA:50:3D:EB:8B:34:95
            X509v3 Authority Key Identifier:
                keyid:32:91:97:0D:27:DC:EF:C2:86:22:66:50:06:BF:41:C0:8C:70:1A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3291970D27DCEFC28622665006BF41C08C701A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3291970D27DCEFC28622665006BF41C08C701A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/249073308BE1A8503164E122B07458428D8535C1FE7A0CE3815D95BC81FC3C8E/0/3230302e3132342e3132302e302f32342d3234203d3e20323632323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:24:2b:ed:4b:bf:51:89:12:31:be:a6:c8:fc:03:be:21:0a:
         5e:8f:f1:af:4e:e5:46:10:15:87:e3:a5:17:80:04:ef:fe:99:
         1b:ad:d5:82:14:4a:64:af:58:2a:f6:a3:91:e5:26:14:d7:cd:
         89:1e:c4:e8:8b:6a:df:a6:ad:05:3d:5b:06:4f:c1:36:4e:8f:
         2f:9f:87:b7:c9:1f:94:92:28:ad:79:02:52:0f:e5:c8:82:dc:
         fd:b8:a8:4d:c6:7b:91:61:70:a0:49:57:bf:85:1e:cf:b2:f3:
         3e:53:c4:6f:b8:09:2d:1c:3c:ac:04:35:8f:4a:e0:72:27:ea:
         51:7a:66:2a:75:cc:80:49:12:3f:54:6e:d7:88:1e:3d:94:3a:
         af:ca:f7:2f:b9:17:fa:f3:b8:1b:f7:5e:2a:24:f7:f3:7e:93:
         5b:79:2e:4f:78:4d:ee:af:8e:a4:96:63:11:f3:d1:8e:57:97:
         d0:59:18:83:f8:19:a1:0f:ce:fd:94:91:b4:f6:77:09:e1:d2:
         75:5c:89:50:c2:0e:f1:05:36:d4:47:d9:e0:aa:a5:32:cf:00:
         90:b2:7e:64:aa:90:a5:1d:ab:0f:66:fd:95:64:d0:10:4a:f5:
         44:57:ad:24:15:21:5b:4c:54:e4:6c:24:5a:be:a1:ea:ba:7e:
         ec:3f:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:15 2025 by rpki-client