Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e302e36302e302f32332d3233203d3e20323633383231.roa
File:                     3230302e302e36302e302f32332d3233203d3e20323633383231.roa (raw, json)
Hash identifier:          2OCHAUh3EQx3J0ByrLJcfZ5NDvOz0JxO9uvQSgaR80A=
Subject key identifier:   AA:06:9A:DD:43:DD:34:80:6F:FD:C6:01:D4:97:09:90:2A:D4:1C:B6
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       6B2799B8DFD2BA4B911676E0EDBDCFD3252784B3
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e302e36302e302f32332d3233203d3e20323633383231.roa
Signing time:             Tue 04 Feb 2025 18:39:20 +0000
ROA not before:           Tue 04 Feb 2025 18:34:20 +0000
ROA not after:            Tue 03 Feb 2026 18:39:20 +0000
asID:                     263821
IP address blocks:        200.0.60.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:27:99:b8:df:d2:ba:4b:91:16:76:e0:ed:bd:cf:d3:25:27:84:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Feb  4 18:34:20 2025 GMT
            Not After : Feb  3 18:39:20 2026 GMT
        Subject: CN=AA069ADD43DD34806FFDC601D49709902AD41CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ad:62:40:cf:a4:e7:a9:01:b4:25:0f:de:db:
                    6b:2a:c5:e8:e3:91:7d:ed:e8:68:f7:e2:48:ea:c6:
                    29:92:e1:fd:a3:e0:f1:6c:4f:40:0e:24:13:82:81:
                    ee:36:f0:65:b3:7c:55:f7:26:09:27:6d:12:cc:10:
                    a2:d4:be:94:c7:94:19:46:00:74:6f:c1:33:18:36:
                    40:8f:a3:b3:1f:42:10:7b:29:d5:b6:4e:91:c8:c8:
                    85:6e:ea:93:ea:2f:a3:eb:52:d5:9d:bc:41:e3:85:
                    d0:00:0b:0b:62:bf:11:05:49:9f:23:14:ca:09:f9:
                    08:88:7d:e3:0e:71:46:ae:70:bb:1d:8e:e7:ae:1b:
                    75:79:8c:4e:08:3d:7e:2e:22:78:b6:cb:49:ba:ed:
                    0a:d1:3c:fc:9a:3e:5e:9c:05:25:6a:ac:7c:cd:d4:
                    a8:f9:0d:7f:02:3b:46:37:dc:1f:d6:42:b0:48:e9:
                    d1:5d:5f:1b:ab:f3:16:4e:54:86:e6:d8:89:c8:2e:
                    85:ce:de:6f:fd:6e:a5:0c:33:49:2b:95:cc:20:8d:
                    8e:87:05:86:18:af:b6:50:ed:a6:98:e3:09:bb:da:
                    d0:cd:01:a5:53:d0:b8:71:e6:65:c9:b4:bc:ba:eb:
                    df:f0:65:65:46:f7:aa:f3:35:e4:73:04:7a:07:8b:
                    38:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:06:9A:DD:43:DD:34:80:6F:FD:C6:01:D4:97:09:90:2A:D4:1C:B6
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3230302e302e36302e302f32332d3233203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:d6:a9:47:f7:df:c1:f0:3f:72:90:bf:9a:67:18:4c:9c:c2:
         92:38:59:70:9d:1b:c7:53:00:85:94:40:0a:f9:54:8b:17:ee:
         db:e5:b2:02:5a:2c:9b:d3:30:24:12:59:d0:ff:c6:96:6d:05:
         bb:78:48:85:c2:a1:fc:bc:6c:f4:7a:8e:31:0a:75:36:37:ff:
         73:a6:4d:f0:55:63:4d:17:d2:ee:72:f4:cf:9d:6e:17:09:21:
         d8:2d:1c:7c:bf:f0:2f:4a:f1:6d:50:1a:67:31:24:22:45:3f:
         28:f5:2d:44:d7:d7:19:e6:75:b1:0f:75:f4:84:3e:04:3e:9b:
         d9:be:ef:ab:17:cc:58:dd:30:92:7d:34:c4:12:0d:44:69:d6:
         2f:b2:67:14:58:6e:6c:ff:7e:d0:d3:88:d4:0c:a4:5a:49:5a:
         66:d8:b1:65:63:17:ee:ef:9b:cd:14:f1:56:64:6e:c3:59:a9:
         f7:e6:fc:c1:7b:ee:7a:ea:5a:8c:14:c3:9e:26:f5:0e:36:23:
         96:91:33:70:32:80:cc:74:43:0e:56:7e:78:1f:d8:92:8d:4f:
         a1:ab:b1:ca:4a:74:6f:2d:7e:1f:e8:de:92:af:a9:b8:75:19:
         d1:42:2e:c0:04:ad:fc:23:fc:6a:fd:32:c7:06:e5:68:8c:67:
         d0:61:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:07 2025 by rpki-client