Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa
File:                     3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          OCXvucJUamgeYWJihywhk2kXc1Q9gIMYCxLClqc917E=
Subject key identifier:   12:B7:3F:65:DD:D9:0E:F3:B7:A4:47:73:F8:7B:CC:1A:ED:60:55:FC
Certificate issuer:       /CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
Certificate serial:       44F7AD24653B79A64F3D6BA6BF382ADF09C0B75C
Authority key identifier: E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:26:17 +0000
ROA not before:           Tue 04 Feb 2025 18:21:17 +0000
ROA not after:            Tue 03 Feb 2026 18:26:17 +0000
asID:                     264744
IP address blocks:        200.107.248.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f7:ad:24:65:3b:79:a6:4f:3d:6b:a6:bf:38:2a:df:09:c0:b7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E80F49541A747B237BF5EEB2DE2B569B1FA07BF5
        Validity
            Not Before: Feb  4 18:21:17 2025 GMT
            Not After : Feb  3 18:26:17 2026 GMT
        Subject: CN=12B73F65DDD90EF3B7A44773F87BCC1AED6055FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:29:cb:60:8d:56:02:c0:3f:68:f0:3e:85:
                    55:18:af:c5:34:5b:90:0b:db:17:1b:ae:32:3f:30:
                    82:7e:57:cd:46:39:6d:5d:3a:8c:cb:49:a7:86:a8:
                    94:a3:2c:b3:4f:3a:e6:8f:c6:a5:e6:8f:7e:54:fe:
                    de:49:eb:b1:85:10:b0:43:06:6d:61:c9:8d:f2:31:
                    e7:a6:b2:91:1b:69:64:7c:98:51:ea:81:b9:83:8f:
                    62:c8:fb:60:fe:83:27:10:35:f6:ae:4c:d4:4e:ef:
                    a4:ed:1b:55:7e:27:67:f1:9a:4d:1a:55:bf:58:be:
                    5e:9d:7a:ed:aa:82:51:48:c5:cc:60:ca:09:c9:38:
                    d5:5c:13:cc:fd:c2:c8:d1:f3:df:e1:ee:b9:9a:05:
                    03:16:a6:d2:cb:1c:f7:6b:36:08:c8:fa:5f:6f:26:
                    aa:7c:76:25:0e:d5:a9:0f:a5:3d:fa:d3:62:3b:80:
                    a4:cf:d6:83:8c:55:1c:a8:9f:70:d0:21:cf:a0:33:
                    f8:76:68:5c:ea:ae:c0:6c:dc:14:45:dd:2c:81:c1:
                    81:30:5d:97:99:b2:a2:04:f4:cf:b9:6f:46:19:78:
                    c5:be:37:ac:fd:da:1e:c3:42:40:40:42:16:ed:75:
                    40:7b:38:cd:b7:80:2a:99:a1:01:04:22:46:ae:ee:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B7:3F:65:DD:D9:0E:F3:B7:A4:47:73:F8:7B:CC:1A:ED:60:55:FC
            X509v3 Authority Key Identifier:
                keyid:E8:0F:49:54:1A:74:7B:23:7B:F5:EE:B2:DE:2B:56:9B:1F:A0:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E80F49541A747B237BF5EEB2DE2B569B1FA07BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28DB874E46B4AFF5BBDD717DF1CD0136CBD606E49825EF11B1FF0029E0D566E2/0/3230302e3130372e3234382e302f32312d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.107.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:a0:43:ff:76:22:00:3f:ee:ad:8d:27:da:73:d8:7b:68:
         15:2f:2a:f4:2c:d6:76:ad:36:70:6d:e7:3b:0e:b0:0f:c9:b5:
         a3:c1:50:37:72:72:68:f1:69:c5:3b:05:7d:55:96:2a:de:f4:
         05:35:d2:ab:3c:e5:64:cf:39:0d:12:a7:3d:69:cb:c2:23:79:
         95:dc:df:af:59:d0:10:d7:5f:90:ce:75:13:19:b7:45:02:72:
         cd:7e:b4:7b:ec:eb:8f:33:d5:dc:26:1e:90:18:79:5a:c9:0d:
         b2:82:70:fe:70:c8:f5:ec:b9:a3:b7:f0:26:8f:e8:3e:2b:7d:
         06:f5:ce:14:4f:55:b6:dd:82:df:cc:87:52:b1:83:8c:38:d8:
         df:4f:e6:3a:25:a0:0a:66:d7:db:8b:d7:bc:44:94:ee:67:cf:
         40:74:91:a5:56:e2:a9:2c:f8:94:9d:3f:42:1a:31:fa:f1:8c:
         67:e4:fd:d6:67:e7:1a:bd:dd:5c:5b:3d:36:60:b5:a0:93:1e:
         df:29:10:00:45:73:75:0f:06:61:79:de:8e:a8:11:80:ab:e1:
         c7:72:d3:53:ac:08:8a:f4:a4:d0:b1:62:1f:8b:f3:f2:f2:9f:
         2e:61:08:2b:2d:8d:39:d1:f4:cd:d5:d7:11:c3:1d:9d:49:7d:
         bb:46:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client