Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa
File:                     3230302e302e32382e302f32322d3234203d3e203631343638.roa (raw, json)
Hash identifier:          eqQXLqo4N5T1YZFAPHgZrk3Q0erEd/FbSFbLrf/BSFo=
Subject key identifier:   01:1F:85:79:7B:4B:EC:67:13:8B:59:AA:74:C0:C8:43:E3:BC:FB:A6
Certificate issuer:       /CN=004C78F3729207534118FFE002E2186FC5375901
Certificate serial:       723DB3F8B56772DEC9AC82C47276210C626C48E7
Authority key identifier: 00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 20:02:32 +0000
ROA not before:           Tue 04 Feb 2025 19:57:32 +0000
ROA not after:            Tue 03 Feb 2026 20:02:32 +0000
asID:                     61468
IP address blocks:        200.0.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3d:b3:f8:b5:67:72:de:c9:ac:82:c4:72:76:21:0c:62:6c:48:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004C78F3729207534118FFE002E2186FC5375901
        Validity
            Not Before: Feb  4 19:57:32 2025 GMT
            Not After : Feb  3 20:02:32 2026 GMT
        Subject: CN=011F85797B4BEC67138B59AA74C0C843E3BCFBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:5e:bc:cf:df:c1:89:83:84:a5:cf:46:52:
                    97:ad:86:11:50:a2:06:f2:e1:da:d9:68:8f:32:cc:
                    9a:e5:3e:e2:97:85:b4:47:8e:35:30:c4:75:bb:ab:
                    74:04:5c:c5:e6:67:21:ce:b3:26:2f:09:97:d8:3a:
                    ee:3f:8c:5c:d7:02:5b:e9:34:fb:82:1e:6d:b0:df:
                    74:48:a0:c1:a3:ec:40:e7:70:9a:aa:db:26:87:0b:
                    17:70:8a:43:c5:4b:49:25:36:31:ef:4f:32:f6:c3:
                    61:e6:d8:3f:4e:a9:76:1f:a1:d5:76:7a:98:d6:42:
                    91:9b:a7:f4:33:db:2b:56:06:84:e9:13:ae:0a:c6:
                    da:0e:60:d5:8a:24:1a:33:3a:80:e8:07:63:5e:79:
                    53:cb:4c:8a:7d:33:64:e3:ca:c7:d0:ac:1c:07:f9:
                    d9:44:d0:bc:db:b6:41:62:1e:42:0e:ea:cd:db:b4:
                    b0:c3:5f:ed:9b:d4:58:d5:fb:fe:36:97:2d:f7:e0:
                    4c:3f:a7:4d:fb:35:99:ef:42:bf:ef:02:78:dd:71:
                    9d:d9:05:cf:a6:4e:e1:e5:7a:72:a5:88:51:cc:6e:
                    a7:62:86:09:6d:f7:d3:8f:3e:b1:e3:f3:65:6d:36:
                    44:15:af:53:3e:b5:66:1f:28:83:85:be:a9:d9:43:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1F:85:79:7B:4B:EC:67:13:8B:59:AA:74:C0:C8:43:E3:BC:FB:A6
            X509v3 Authority Key Identifier:
                keyid:00:4C:78:F3:72:92:07:53:41:18:FF:E0:02:E2:18:6F:C5:37:59:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/004C78F3729207534118FFE002E2186FC5375901.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004C78F3729207534118FFE002E2186FC5375901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2962DC2DCBE86602AE6A2E42393487E52AF5C6815D1236CAD110C8A6C878233D/0/3230302e302e32382e302f32322d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e5:04:c3:01:ca:5b:27:83:aa:7a:49:6b:24:15:19:fb:89:f1:
         32:42:c7:45:f4:df:50:a1:4f:c5:e3:8d:2f:80:d1:90:63:2e:
         27:a2:54:cb:38:26:c0:04:a3:84:37:a1:54:fe:d2:81:69:8b:
         6e:7e:4f:f7:3c:3b:0e:9b:e3:65:a0:56:09:79:11:e2:04:d9:
         37:ef:2a:67:2e:3a:96:8e:f7:d1:22:c8:ee:60:c3:30:54:5a:
         d8:6e:d3:e7:99:4b:4b:ff:0a:4e:62:f5:8c:20:39:8e:fb:30:
         49:9e:85:64:4f:d2:43:f3:17:a4:cc:6b:16:0a:bf:35:b5:e5:
         fd:27:d8:8b:51:4b:ea:f1:ee:cd:6a:e1:bc:70:b1:ea:71:99:
         5b:a2:42:3d:a5:3c:a3:ff:41:e3:dd:2f:45:68:f7:42:4c:83:
         71:8c:d8:43:ba:42:5b:51:4f:03:84:1b:0d:da:3a:2e:6f:d9:
         99:59:ee:08:42:01:78:3d:c9:75:7b:a0:20:63:af:a4:c6:ca:
         61:2e:37:23:df:3b:a9:46:5f:95:ea:e3:f1:5d:81:d8:8c:3b:
         65:d0:80:6e:1d:19:30:b1:e6:19:78:a6:f5:8c:3f:9b:2f:3f:
         26:68:76:54:cb:de:f8:e8:b3:f8:5e:e2:de:3e:8d:dc:dd:75:
         d0:04:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:17 2025 by rpki-client