Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234332e302f32342d3234203d3e203330313333.roa
File:                     3230302e39332e3234332e302f32342d3234203d3e203330313333.roa (raw, json)
Hash identifier:          xEh6jydU484p3rplHCRGwojTiw919wUFol5eL8P9sBA=
Subject key identifier:   CB:50:B8:B4:58:EF:6F:9B:BC:2B:64:4A:D0:21:2D:C6:E5:93:5D:86
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       56B7B942CA8B1B86C82C909D398EFE4CAB573A56
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234332e302f32342d3234203d3e203330313333.roa
Signing time:             Tue 04 Feb 2025 18:04:35 +0000
ROA not before:           Tue 04 Feb 2025 17:59:35 +0000
ROA not after:            Tue 03 Feb 2026 18:04:35 +0000
asID:                     30133
IP address blocks:        200.93.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b7:b9:42:ca:8b:1b:86:c8:2c:90:9d:39:8e:fe:4c:ab:57:3a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Feb  4 17:59:35 2025 GMT
            Not After : Feb  3 18:04:35 2026 GMT
        Subject: CN=CB50B8B458EF6F9BBC2B644AD0212DC6E5935D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:d4:49:bb:68:b8:3a:e7:37:45:44:03:0a:
                    c8:80:35:a1:88:6c:27:b0:cc:17:5d:fb:7e:ed:3a:
                    88:b2:1a:97:59:e9:22:8f:c0:61:ac:30:be:af:8b:
                    03:8c:66:95:39:9b:f0:2b:ef:7e:1f:9e:dc:82:fd:
                    2c:c8:f8:c7:24:65:02:66:25:36:c8:1d:50:9e:0c:
                    92:56:b3:ba:6a:d5:11:ec:2d:d6:3e:07:fc:c7:56:
                    8e:da:0a:37:db:12:1f:32:68:5b:b1:53:54:fb:63:
                    78:91:e4:26:b5:62:87:bd:09:14:71:32:97:a3:6f:
                    01:cd:a9:a6:c9:45:9b:e8:2a:01:eb:00:cd:9f:e5:
                    f0:41:70:6f:f3:25:f4:ad:7a:c2:6d:ed:ef:e9:ca:
                    82:c1:af:7a:11:95:1b:f5:90:7a:e3:08:15:1e:08:
                    69:a5:f8:80:97:6b:2c:6b:3b:a8:a4:45:cc:2a:2f:
                    0d:63:a2:04:6c:ab:15:ec:6e:28:54:d9:8a:0f:92:
                    83:fc:f9:34:e9:ae:d6:b9:55:16:ff:48:55:5b:2c:
                    83:39:c8:d9:af:2a:56:1b:27:59:3b:66:ac:19:ca:
                    93:a3:38:aa:f9:52:b1:54:38:e2:91:f5:17:c7:27:
                    96:93:72:46:fa:92:2e:73:ab:92:c2:a1:51:90:e8:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:50:B8:B4:58:EF:6F:9B:BC:2B:64:4A:D0:21:2D:C6:E5:93:5D:86
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234332e302f32342d3234203d3e203330313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0f:0a:96:bd:a6:4d:85:1a:4a:79:83:4b:e2:cb:bf:f4:8a:
         19:d7:c5:e9:04:6d:fc:4b:29:40:d2:f3:7e:32:06:67:a1:ee:
         1b:61:66:72:2f:24:52:80:45:0d:cb:e2:61:43:c5:97:46:62:
         e3:f8:00:6e:c8:3d:ff:8f:d1:69:83:29:de:76:ca:76:11:bb:
         5f:5f:3a:96:7d:01:30:84:27:37:2c:ae:f9:6f:83:52:74:85:
         64:e5:40:67:96:8f:62:36:e8:a5:82:48:23:af:c1:04:48:6c:
         99:51:df:18:77:95:a5:1c:7d:3e:04:04:da:67:f0:17:7d:26:
         72:38:55:6b:ff:c8:48:33:d8:a2:43:dc:18:21:68:89:74:d6:
         64:e3:1f:65:a0:60:b3:13:99:5f:03:d5:e6:57:92:36:da:ef:
         ee:a2:25:a9:5d:f8:68:c3:4e:c8:88:4d:50:90:bf:fd:f3:b8:
         1c:6d:a4:eb:6f:99:c9:9f:ed:e1:fe:22:c3:15:c2:b2:d3:5e:
         c7:1b:0a:c1:e7:6a:91:b9:69:db:7a:9b:3b:17:a0:7c:9c:fa:
         bd:7c:0a:e8:97:12:c8:2c:82:ae:4d:c8:8e:08:5c:85:01:33:
         40:20:d0:fa:14:6b:84:f3:46:55:4e:bc:c8:5e:c0:23:21:51:
         dc:18:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:07 2025 by rpki-client