Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234362e302f32342d3234203d3e203532323839.roa
File:                     3230302e39332e3234362e302f32342d3234203d3e203532323839.roa (raw, json)
Hash identifier:          DJ/I8Y7Zj/Y4J4UDEPUkj1nQjWhAFlZ3MQjSajfrVX0=
Subject key identifier:   DA:C3:40:07:AB:D2:91:BD:AA:2D:59:C5:9D:86:FC:4C:22:9B:5D:56
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       282EFDC87045D6844046B96C71191713F32A6110
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234362e302f32342d3234203d3e203532323839.roa
Signing time:             Tue 04 Feb 2025 18:04:34 +0000
ROA not before:           Tue 04 Feb 2025 17:59:34 +0000
ROA not after:            Tue 03 Feb 2026 18:04:34 +0000
asID:                     52289
IP address blocks:        200.93.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:fd:c8:70:45:d6:84:40:46:b9:6c:71:19:17:13:f3:2a:61:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Feb  4 17:59:34 2025 GMT
            Not After : Feb  3 18:04:34 2026 GMT
        Subject: CN=DAC34007ABD291BDAA2D59C59D86FC4C229B5D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:22:97:21:77:3e:3c:5a:bf:db:59:12:65:
                    14:db:f7:86:8a:a7:16:70:e2:fa:59:4e:04:01:5c:
                    e8:3a:67:53:c1:81:01:78:bf:7d:76:17:f3:9c:57:
                    29:5c:b9:91:70:e4:fd:35:5d:4e:2f:65:70:f3:13:
                    31:a8:25:70:dc:2a:f4:49:a3:06:01:bd:ea:59:29:
                    a5:09:eb:32:ae:37:13:b2:de:21:8c:65:78:e8:43:
                    9e:29:0b:ba:d6:b9:f7:f6:72:94:54:54:39:ad:9e:
                    b9:db:56:b5:66:8e:54:04:da:cf:12:df:d9:0f:c4:
                    4f:42:f2:aa:e7:94:dd:50:c6:e2:f9:8f:6f:24:f8:
                    86:f0:37:fe:6d:df:9e:90:8e:69:77:1b:48:6e:06:
                    d2:be:d7:00:9b:a6:34:a6:66:d7:14:32:56:a6:b5:
                    d4:6b:ce:83:64:fc:c4:b8:58:df:43:ad:17:70:ea:
                    35:35:f9:da:9c:04:ee:e8:03:54:21:db:aa:fa:9b:
                    e2:a3:72:e3:7a:5e:e1:19:53:2c:a2:29:30:31:02:
                    8e:02:0a:20:03:0d:8f:28:d1:7e:9a:a0:37:30:a8:
                    13:ff:1a:5a:ef:94:a8:3d:4e:c5:ae:e4:d5:b2:4f:
                    37:9b:0d:e8:06:6c:db:c9:ba:c6:ae:fc:d9:0b:e5:
                    fd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:40:07:AB:D2:91:BD:AA:2D:59:C5:9D:86:FC:4C:22:9B:5D:56
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234362e302f32342d3234203d3e203532323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:cb:5e:f4:1b:2f:4a:a2:39:4a:56:43:f5:2c:d1:2a:f3:
         65:d4:23:9d:cb:46:75:75:2a:76:07:9c:59:c4:5a:e2:0d:d2:
         3f:dd:86:83:a4:08:db:5a:ab:05:f8:62:e3:df:d9:73:6c:16:
         e3:6f:48:f1:f3:48:23:2a:f5:48:f2:de:c5:d0:94:6b:3e:b7:
         7f:e8:ee:bf:1d:cb:28:ad:50:a7:80:0d:ac:75:f5:9d:08:57:
         e1:e3:ba:70:cb:bc:37:0d:42:4d:50:1e:a3:cf:a0:9c:72:db:
         76:79:0a:3c:1d:18:a5:3f:85:4f:69:5f:96:50:73:72:80:f2:
         a9:5b:1d:f3:a6:6c:e7:3a:6f:19:5b:22:30:d6:ba:ac:14:16:
         b8:e9:80:a0:aa:77:ce:6b:29:09:32:4d:3e:76:9d:39:86:60:
         34:34:82:a2:8f:fb:61:5e:fe:6d:83:0d:f7:f4:0a:8b:ef:60:
         8d:de:d7:a9:4d:ec:1d:9f:bf:0e:c3:e6:4c:db:27:6c:13:a7:
         61:f8:6d:66:e3:38:76:f1:48:15:75:85:f1:f3:20:80:21:1b:
         7d:47:bd:91:3c:a1:74:a5:4b:3f:e1:42:60:61:1b:4c:a9:f1:
         1a:09:3d:bf:c4:69:e1:39:56:7c:1a:55:31:44:b9:b9:59:b5:
         45:e1:f3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:06 2025 by rpki-client