Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e31342e38302e302f32342d3234203d3e203130373738.roa
File:                     3230302e31342e38302e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          79j5/jSB7ymE9JY2YhpkVqeVwqYANmaG/GwBYkBv6K0=
Subject key identifier:   F7:C3:C0:B1:FF:99:DB:F0:CD:94:50:4A:67:BC:77:CE:54:B1:D6:B1
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       419B3B5C8A528423544C931C0DA761D125942EAF
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e31342e38302e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 04 Feb 2025 20:03:38 +0000
ROA not before:           Tue 04 Feb 2025 19:58:38 +0000
ROA not after:            Tue 03 Feb 2026 20:03:38 +0000
asID:                     10778
IP address blocks:        200.14.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:3b:5c:8a:52:84:23:54:4c:93:1c:0d:a7:61:d1:25:94:2e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:38 2025 GMT
            Not After : Feb  3 20:03:38 2026 GMT
        Subject: CN=F7C3C0B1FF99DBF0CD94504A67BC77CE54B1D6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:67:d3:29:7d:58:89:05:5e:2c:a9:9e:f6:
                    6c:9c:7f:ba:b8:25:b8:d4:d0:2a:a6:50:0d:78:10:
                    46:c3:0b:68:b3:2c:22:90:e9:e1:ce:af:d4:a1:cc:
                    08:47:75:d4:62:66:e2:a4:69:0b:68:3c:91:c1:98:
                    83:19:97:2e:77:1a:26:4b:49:76:c5:e5:38:bf:6f:
                    30:1f:74:7a:a4:6c:6f:81:ae:2d:cf:9b:4d:8b:c2:
                    05:6b:aa:a2:a6:8c:98:5d:ce:52:ef:88:34:36:b0:
                    ec:b3:4f:6d:a1:ec:75:2b:f0:8c:db:f3:c6:3d:5f:
                    03:df:e7:31:dd:3b:65:3b:cc:f3:08:78:18:9a:de:
                    2f:a5:24:ef:6b:4d:5d:2c:30:e5:2a:10:8e:b6:6a:
                    0b:17:03:8f:e0:83:a0:2b:3c:da:14:d2:0c:d6:96:
                    57:c2:8a:8e:4d:e6:fb:8d:e1:1d:ab:10:bb:4b:7a:
                    15:9c:ea:74:23:6d:a7:87:a4:1d:6c:9c:9e:b4:8e:
                    b7:f4:07:a6:74:50:32:fe:ac:9d:6e:1c:9b:d5:05:
                    0b:32:3c:9c:29:79:74:49:27:99:dc:82:95:f0:df:
                    7d:85:92:ba:2c:35:7e:ec:27:da:67:8a:92:1a:d9:
                    bf:3e:49:f6:86:e1:9d:47:41:68:30:86:ad:1a:86:
                    ab:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C3:C0:B1:FF:99:DB:F0:CD:94:50:4A:67:BC:77:CE:54:B1:D6:B1
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e31342e38302e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:55:40:a1:cb:76:4c:23:98:8d:d3:81:cc:d6:f0:2e:58:a9:
         7e:64:99:5c:6b:d4:fd:f8:4c:f4:35:12:61:de:6a:23:fc:a0:
         50:1f:f9:07:cb:8f:6d:4e:8d:f2:65:70:7a:85:24:20:18:a8:
         b0:af:a4:d1:35:dd:54:29:9c:4c:de:0e:d7:ad:02:8b:82:3c:
         a0:fe:a1:b6:bc:c4:56:26:a0:b5:8b:1b:7a:5a:a8:42:c0:ee:
         66:11:c8:28:d9:e0:20:5a:5a:03:da:f4:7a:9e:50:0d:73:14:
         c1:9a:b7:25:9a:de:b8:e9:34:0c:13:cd:d1:d4:3f:44:bb:f1:
         28:4d:07:15:6d:59:75:40:af:3b:c2:96:f2:9a:73:9a:85:1d:
         37:0a:77:6a:76:5a:d3:15:ff:d5:ca:62:37:78:18:c8:7b:08:
         4b:2f:1c:4b:77:47:e0:39:97:69:db:d0:21:67:29:18:57:b7:
         79:2f:8a:ee:03:29:f1:ed:13:73:46:18:c9:e4:ba:ba:7a:b4:
         72:7d:d0:7f:86:c0:53:81:c5:28:63:2d:86:cf:03:af:de:a1:
         01:88:ee:b5:34:2b:24:2b:0b:39:c5:ee:97:70:04:1a:f7:84:
         a7:ab:af:8c:44:6f:91:df:62:97:7b:58:6d:90:0e:1c:8d:81:
         e2:1b:db:ef
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQZs7XIpShCNUTJMcDadh0SWULq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzhaFw0yNjAyMDMyMDAzMzhaMDMxMTAvBgNV
BAMTKEY3QzNDMEIxRkY5OURCRjBDRDk0NTA0QTY3QkM3N0NFNTRCMUQ2QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+8mfTKX1YiQVeLKme9mycf7q4
JbjU0CqmUA14EEbDC2izLCKQ6eHOr9ShzAhHddRiZuKkaQtoPJHBmIMZly53GiZL
SXbF5Ti/bzAfdHqkbG+Bri3Pm02LwgVrqqKmjJhdzlLviDQ2sOyzT22h7HUr8Izb
88Y9XwPf5zHdO2U7zPMIeBia3i+lJO9rTV0sMOUqEI62agsXA4/gg6ArPNoU0gzW
llfCio5N5vuN4R2rELtLehWc6nQjbaeHpB1snJ60jrf0B6Z0UDL+rJ1uHJvVBQsy
PJwpeXRJJ5ncgpXw332FkrosNX7sJ9pnipIa2b8+SfaG4Z1HQWgwhq0ahqtZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU98PAsf+Z2/DNlFBKZ7x3zlSx1rEwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzEzNDJlMzgzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzAzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDlAwDQYJ
KoZIhvcNAQELBQADggEBAH5VQKHLdkwjmI3TgczW8C5YqX5kmVxr1P34TPQ1EmHe
aiP8oFAf+QfLj21OjfJlcHqFJCAYqLCvpNE13VQpnEzeDtetAouCPKD+oba8xFYm
oLWLG3paqELA7mYRyCjZ4CBaWgPa9HqeUA1zFMGatyWa3rjpNAwTzdHUP0S78ShN
BxVtWXVArzvClvKac5qFHTcKd2p2WtMV/9XKYjd4GMh7CEsvHEt3R+A5l2nb0CFn
KRhXt3kviu4DKfHtE3NGGMnkurp6tHJ90H+GwFOBxShjLYbPA6/eoQGI7rU0KyQr
CznF7pdwBBr3hKerr4xEb5HfYpd7WG2QDhyNgeIb2+8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:47 2025 by rpki-client