Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234372e302f32342d3234203d3e203631343437.roa
File:                     3230302e39332e3234372e302f32342d3234203d3e203631343437.roa (raw, json)
Hash identifier:          lqlA1/l0abi7646Uf5Z5i+ihbiBcLvc+bMmNtB23xz0=
Subject key identifier:   EB:ED:A6:DD:0A:A3:7C:63:CA:D7:87:58:F5:E4:19:D0:29:DC:1A:94
Certificate issuer:       /CN=24519FD36C740551C4C27EB1475374945FBAF364
Certificate serial:       749F8C3A5490B90F5D27AFBA2F87E5A5662EFE6F
Authority key identifier: 24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234372e302f32342d3234203d3e203631343437.roa
Signing time:             Tue 04 Feb 2025 18:04:37 +0000
ROA not before:           Tue 04 Feb 2025 17:59:37 +0000
ROA not after:            Tue 03 Feb 2026 18:04:37 +0000
asID:                     61447
IP address blocks:        200.93.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9f:8c:3a:54:90:b9:0f:5d:27:af:ba:2f:87:e5:a5:66:2e:fe:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24519FD36C740551C4C27EB1475374945FBAF364
        Validity
            Not Before: Feb  4 17:59:37 2025 GMT
            Not After : Feb  3 18:04:37 2026 GMT
        Subject: CN=EBEDA6DD0AA37C63CAD78758F5E419D029DC1A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:48:29:21:a9:90:67:a0:d9:98:83:48:98:2d:
                    13:12:87:6f:1b:8d:c7:9a:35:d3:cf:07:6f:ec:df:
                    82:8e:18:53:d3:4d:5c:6f:db:3a:cd:ca:ea:2e:9b:
                    e7:69:e3:ae:9b:51:10:4e:62:a0:3d:6a:4e:d1:b1:
                    73:dc:95:0b:22:d8:78:31:ab:a0:2d:82:d5:06:ca:
                    25:18:20:4f:29:1a:2d:bf:91:c6:94:32:91:de:ed:
                    88:38:e2:d0:89:59:f8:63:5f:4b:4c:fd:89:d9:7e:
                    4b:4e:5d:0d:2d:3f:ca:b9:67:74:74:dd:17:10:be:
                    34:c3:e6:59:51:2c:b1:fe:bb:9e:92:fc:82:92:e5:
                    15:14:02:00:a1:7f:61:1e:b9:8e:33:95:12:e9:ed:
                    1f:d4:5d:b2:27:9f:56:58:c5:3c:9f:31:ca:1a:45:
                    7c:e2:8a:24:df:7f:4f:41:e9:43:8b:87:5f:01:42:
                    ff:46:8e:91:73:97:77:06:31:6a:72:f7:00:8e:f5:
                    fd:06:e8:2b:b6:60:52:b3:f4:04:3c:ad:4e:49:04:
                    73:9f:85:a5:77:e0:59:f8:02:e7:d7:c7:c1:9f:2b:
                    ee:d4:24:d0:f8:cf:62:e7:6f:50:2c:c7:4d:7c:5f:
                    3a:a4:8e:c7:e8:ca:11:08:f6:e4:d2:0d:24:d6:3f:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:ED:A6:DD:0A:A3:7C:63:CA:D7:87:58:F5:E4:19:D0:29:DC:1A:94
            X509v3 Authority Key Identifier:
                keyid:24:51:9F:D3:6C:74:05:51:C4:C2:7E:B1:47:53:74:94:5F:BA:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/24519FD36C740551C4C27EB1475374945FBAF364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24519FD36C740551C4C27EB1475374945FBAF364.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C470FCBD96297FEF8B36235A881B33EEAC9C22699CEBBC34A3F7D44406AAD1/0/3230302e39332e3234372e302f32342d3234203d3e203631343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:be:2e:9e:eb:02:0f:bd:07:8d:34:33:74:90:3b:36:4c:c8:
         dd:24:bd:d8:d0:07:4d:22:a1:ba:f8:d0:31:ff:cf:6b:b9:be:
         76:8d:55:0b:01:44:24:09:88:b0:f2:96:41:e5:5b:8d:db:ab:
         fa:58:b7:cb:2d:7d:18:d6:28:44:ea:c2:c2:a0:e3:95:43:c0:
         ce:46:29:2e:e1:b6:ef:78:27:f2:d5:c9:af:37:2a:5a:d5:7e:
         8f:34:f0:bc:fc:a3:96:7a:ea:9c:ae:43:53:8d:7a:ab:f1:c3:
         2e:f2:1f:05:36:9e:59:e9:b6:cb:3f:2a:f4:d0:ab:14:9f:2c:
         a2:32:79:2c:b0:62:89:7d:c6:e5:81:af:9c:c0:55:36:16:cf:
         88:32:58:5d:aa:c3:98:8d:31:5e:2d:8a:f3:25:a1:64:b4:8c:
         b8:81:cc:15:b7:5a:f2:f7:f1:67:99:0e:ed:1e:88:ac:73:4b:
         61:ca:18:74:93:25:8c:51:4b:4c:e3:8f:36:8b:05:a1:00:66:
         30:ee:0a:95:e0:a2:f2:da:9b:26:79:33:a5:34:71:2f:c0:50:
         23:1b:d2:32:0c:21:49:6a:98:69:97:ad:e0:1d:3f:94:8e:cc:
         27:88:61:39:76:62:a6:82:3d:a2:00:cc:7c:a7:18:1a:40:09:
         99:56:a0:86
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdJ+MOlSQuQ9dJ6+6L4flpWYu/m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjQ1MTlGRDM2Qzc0MDU1MUM0QzI3RUIxNDc1Mzc0OTQ1
RkJBRjM2NDAeFw0yNTAyMDQxNzU5MzdaFw0yNjAyMDMxODA0MzdaMDMxMTAvBgNV
BAMTKEVCRURBNkREMEFBMzdDNjNDQUQ3ODc1OEY1RTQxOUQwMjlEQzFBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMSCkhqZBnoNmYg0iYLRMSh28b
jceaNdPPB2/s34KOGFPTTVxv2zrNyuoum+dp466bURBOYqA9ak7RsXPclQsi2Hgx
q6AtgtUGyiUYIE8pGi2/kcaUMpHe7Yg44tCJWfhjX0tM/YnZfktOXQ0tP8q5Z3R0
3RcQvjTD5llRLLH+u56S/IKS5RUUAgChf2EeuY4zlRLp7R/UXbInn1ZYxTyfMcoa
RXziiiTff09B6UOLh18BQv9GjpFzl3cGMWpy9wCO9f0G6Cu2YFKz9AQ8rU5JBHOf
haV34Fn4AufXx8GfK+7UJND4z2Lnb1Asx018XzqkjsfoyhEI9uTSDSTWP87PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU6+2m3QqjfGPK14dY9eQZ0CncGpQwHwYDVR0j
BBgwFoAUJFGf02x0BVHEwn6xR1N0lF+682QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNEM0NzBGQ0JEOTYyOTdGRUY4QjM2MjM1QTg4MUIzM0VF
QUM5QzIyNjk5Q0VCQkMzNEEzRjdENDQ0MDZBQUQxLzAvMjQ1MTlGRDM2Qzc0MDU1
MUM0QzI3RUIxNDc1Mzc0OTQ1RkJBRjM2NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNDUxOUZEMzZDNzQwNTUxQzRD
MjdFQjE0NzUzNzQ5NDVGQkFGMzY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjRDNDcwRkNCRDk2Mjk3RkVGOEIzNjIzNUE4ODFCMzNFRUFDOUMyMjY5
OUNFQkJDMzRBM0Y3RDQ0NDA2QUFEMS8wLzMyMzAzMDJlMzkzMzJlMzIzNDM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhd9zAN
BgkqhkiG9w0BAQsFAAOCAQEAL74unusCD70HjTQzdJA7NkzI3SS92NAHTSKhuvjQ
Mf/Pa7m+do1VCwFEJAmIsPKWQeVbjdur+li3yy19GNYoROrCwqDjlUPAzkYpLuG2
73gn8tXJrzcqWtV+jzTwvPyjlnrqnK5DU416q/HDLvIfBTaeWem2yz8q9NCrFJ8s
ojJ5LLBiiX3G5YGvnMBVNhbPiDJYXarDmI0xXi2K8yWhZLSMuIHMFbda8vfxZ5kO
7R6IrHNLYcoYdJMljFFLTOOPNosFoQBmMO4KleCi8tqbJnkzpTRxL8BQIxvSMgwh
SWqYaZet4B0/lI7MJ4hhOXZipoI9ogDMfKcYGkAJmVaghg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:36 2025 by rpki-client