Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237393437.roa
File:                     3230302e302e32382e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          xGTAfgDWrkwaBetBZqQ9Hxlt1MzP8/qw/WiI8p97tqY=
Subject key identifier:   A1:F8:3E:FC:DA:74:B1:A2:E3:24:C3:AC:6A:82:F5:9B:AE:4C:99:51
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       10192CD4508E07F55C6D00E93FAAB58D864A5529
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 20:02:31 +0000
ROA not before:           Tue 04 Feb 2025 19:57:31 +0000
ROA not after:            Tue 03 Feb 2026 20:02:31 +0000
asID:                     27947
IP address blocks:        200.0.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:19:2c:d4:50:8e:07:f5:5c:6d:00:e9:3f:aa:b5:8d:86:4a:55:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Feb  4 19:57:31 2025 GMT
            Not After : Feb  3 20:02:31 2026 GMT
        Subject: CN=A1F83EFCDA74B1A2E324C3AC6A82F59BAE4C9951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e2:7f:db:18:7f:41:52:b4:7a:4a:46:ed:0d:
                    c6:e9:44:4d:30:47:81:0e:24:59:18:14:79:57:63:
                    dc:34:28:37:98:55:97:b7:1b:af:ea:1d:ea:e2:3a:
                    b9:e7:e3:ca:fd:fb:7c:f5:aa:71:d7:7c:9d:ab:a7:
                    db:99:05:82:a7:9e:04:ed:ce:85:c4:68:66:54:e7:
                    05:a4:6c:f1:01:3d:1d:98:89:63:65:d8:08:ff:b5:
                    97:22:d3:92:66:39:40:a4:f6:7e:ed:42:9c:bf:e0:
                    eb:42:92:9a:b1:ca:b1:ea:aa:40:5f:18:04:42:51:
                    13:fe:ea:a6:01:e0:4e:68:5c:23:fd:f3:34:0a:8d:
                    90:f7:e4:58:0a:98:48:d9:4a:d3:07:2a:c0:0c:5e:
                    75:f7:4c:2f:25:ed:3f:bd:e6:67:01:f6:d7:25:7b:
                    08:d1:a8:8c:3f:21:ab:13:7b:2b:c9:6f:29:4c:5d:
                    46:74:02:51:ef:e6:df:10:e5:dd:40:20:ee:00:4d:
                    26:e2:7a:45:c8:2b:b4:85:52:98:f2:78:96:21:c3:
                    ea:20:d7:3e:1b:ed:02:fc:8d:d5:1c:fd:53:99:83:
                    c1:db:81:fb:dc:6f:fe:8d:e6:95:15:c9:68:32:ed:
                    c5:ac:f2:82:b6:69:63:9a:95:c3:8e:c7:1a:71:c7:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:3E:FC:DA:74:B1:A2:E3:24:C3:AC:6A:82:F5:9B:AE:4C:99:51
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:73:74:91:2f:a5:e2:59:94:15:16:e1:43:f1:bc:96:ce:a6:
         c9:75:ed:85:63:ba:97:75:07:61:a0:00:d4:91:01:33:ac:7c:
         bb:00:01:64:b8:d0:d6:63:c8:84:60:7b:b8:08:24:32:37:99:
         90:db:8c:14:a6:d5:69:62:7f:08:95:21:87:f3:1d:0e:94:d2:
         69:4c:0a:b0:97:c9:00:28:45:cb:e1:13:5e:7b:d9:28:8b:62:
         c7:38:b0:ac:7c:29:ee:a1:03:be:59:e5:87:13:00:7e:67:82:
         ad:39:b3:9d:dc:f6:e5:b9:de:bc:0d:bb:9e:6f:d4:92:c6:f0:
         41:cb:97:4c:09:20:f2:7f:a5:61:18:6a:3c:b0:c3:95:88:34:
         70:d3:68:04:b6:21:3a:e2:bb:6c:6d:73:8a:2b:1d:9b:7f:71:
         e7:63:1f:8a:61:c3:2a:6a:8a:f8:98:c4:d6:25:f7:f3:83:8c:
         c3:14:e9:45:31:1d:75:b4:67:61:c0:de:80:4b:fc:cd:da:c2:
         19:2b:80:19:c1:db:14:85:c7:91:f9:a5:3a:58:92:12:c7:63:
         f0:5b:86:4c:eb:73:ff:63:5a:c1:d3:c2:6d:cc:37:32:4a:97:
         6d:a2:ec:23:cb:3b:55:c9:96:49:78:3b:27:9e:4c:a2:31:0f:
         3d:23:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:15 2025 by rpki-client