Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231342e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3231342e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          RDLOIq6stK8yQgXZiitb3FMFnrun9HzPbd61hhzHnZg=
Subject key identifier:   7A:A7:E0:95:EA:F7:2B:86:A3:A0:5F:7E:C2:64:8C:6A:DE:0B:C1:E5
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       7574498B0079AC5FD8C6487D9427D75A93CE5EA5
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231342e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:35 +0000
ROA not before:           Tue 04 Feb 2025 19:58:35 +0000
ROA not after:            Tue 03 Feb 2026 20:03:35 +0000
asID:                     4995
IP address blocks:        200.2.214.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:74:49:8b:00:79:ac:5f:d8:c6:48:7d:94:27:d7:5a:93:ce:5e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:35 2025 GMT
            Not After : Feb  3 20:03:35 2026 GMT
        Subject: CN=7AA7E095EAF72B86A3A05F7EC2648C6ADE0BC1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:a1:15:05:09:36:f3:1a:16:63:44:ee:33:
                    94:da:4e:fb:cb:e5:c2:91:a3:9a:45:6f:43:ce:18:
                    b1:68:2f:09:ba:ca:2a:5e:03:6b:6c:aa:3d:16:2c:
                    c0:5c:41:6a:1c:62:32:a9:30:17:bd:b0:04:80:98:
                    bc:2c:b5:89:3b:02:a7:a4:89:dd:c2:3a:ab:9a:df:
                    34:ab:f1:7c:8f:e9:61:66:5f:9b:ea:89:9f:3b:c1:
                    70:23:8b:ac:5e:a5:fa:e2:03:49:2c:b4:f3:50:02:
                    5c:68:1c:68:f8:75:55:db:90:9f:2e:e6:50:b0:4a:
                    a2:f2:d4:fc:5a:d2:df:7e:94:70:db:3f:20:9d:c5:
                    2c:b1:3c:6c:c1:2c:7a:32:60:11:a6:dc:25:5a:21:
                    3b:0b:59:0a:33:67:16:2c:c6:ae:7d:8b:2e:9b:b9:
                    f3:af:2c:84:4d:36:ac:49:51:93:bc:2c:83:d3:22:
                    e1:b5:1d:e7:9e:be:93:b7:2c:bf:12:c5:01:47:6b:
                    8d:1d:14:03:2e:1a:b4:61:b9:6a:2d:78:f7:61:82:
                    67:a7:c9:4e:14:c6:94:db:e3:dd:39:ca:06:a6:aa:
                    4c:cf:71:88:33:9f:2d:41:d8:29:41:60:ee:90:6a:
                    72:3a:9d:2b:a6:df:98:68:de:fe:6b:f3:ac:3f:af:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A7:E0:95:EA:F7:2B:86:A3:A0:5F:7E:C2:64:8C:6A:DE:0B:C1:E5
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231342e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:5a:86:89:6d:45:17:8c:b7:f6:cd:df:e4:23:8c:7b:3c:4f:
         d0:f4:a3:fe:8d:2e:a4:e7:68:1c:29:d5:2c:7f:a4:c3:31:66:
         17:1b:4d:24:29:02:1a:72:10:80:75:da:27:80:58:fd:10:43:
         e9:f1:bd:ed:b5:8e:a5:e8:b5:a9:dd:cf:dc:4a:c2:ad:57:6a:
         dd:bb:a4:b1:8d:15:ba:55:39:0b:23:7a:83:7a:9b:d0:a9:5a:
         21:80:90:4a:a5:92:c6:1d:63:f9:2c:6d:72:fd:32:03:b8:aa:
         0c:bd:d4:01:19:c2:24:af:3f:4a:bf:15:dc:d0:1e:09:d5:8c:
         9e:50:35:84:b8:4b:fb:57:80:2f:88:c6:03:26:45:b9:8c:b9:
         1d:47:72:5f:3d:9f:28:97:04:ee:24:0a:56:5b:1d:55:ed:6c:
         af:5d:e6:83:55:d2:a3:d0:d4:33:a6:e7:a3:a4:6f:d5:c5:ec:
         ce:ee:99:b2:b1:e8:58:ba:38:dd:f5:65:3b:3d:64:55:71:b5:
         23:ba:52:e2:48:6b:cd:28:c2:17:a2:0d:68:39:2a:a5:4b:60:
         56:d1:35:f5:12:0f:42:32:fe:09:67:c9:db:51:5c:22:26:44:
         de:e5:b3:4c:80:7d:09:13:42:c1:85:3c:cb:16:5e:86:bd:0a:
         1d:e3:d7:99
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUdXRJiwB5rF/Yxkh9lCfXWpPOXqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzVaFw0yNjAyMDMyMDAzMzVaMDMxMTAvBgNV
BAMTKDdBQTdFMDk1RUFGNzJCODZBM0EwNUY3RUMyNjQ4QzZBREUwQkMxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzOqEVBQk28xoWY0TuM5TaTvvL
5cKRo5pFb0POGLFoLwm6yipeA2tsqj0WLMBcQWocYjKpMBe9sASAmLwstYk7Aqek
id3COqua3zSr8XyP6WFmX5vqiZ87wXAji6xepfriA0kstPNQAlxoHGj4dVXbkJ8u
5lCwSqLy1Pxa0t9+lHDbPyCdxSyxPGzBLHoyYBGm3CVaITsLWQozZxYsxq59iy6b
ufOvLIRNNqxJUZO8LIPTIuG1HeeevpO3LL8SxQFHa40dFAMuGrRhuWotePdhgmen
yU4UxpTb4905ygamqkzPcYgzny1B2ClBYO6QanI6nSum35ho3v5r86w/rymZAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUeqfgler3K4ajoF9+wmSMat4LweUwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIyZTMyMzEzNDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyALWMA0GCSqG
SIb3DQEBCwUAA4IBAQBTWoaJbUUXjLf2zd/kI4x7PE/Q9KP+jS6k52gcKdUsf6TD
MWYXG00kKQIachCAddongFj9EEPp8b3ttY6l6LWp3c/cSsKtV2rdu6SxjRW6VTkL
I3qDepvQqVohgJBKpZLGHWP5LG1y/TIDuKoMvdQBGcIkrz9KvxXc0B4J1YyeUDWE
uEv7V4AviMYDJkW5jLkdR3JfPZ8olwTuJApWWx1V7WyvXeaDVdKj0NQzpuejpG/V
xezO7pmysehYujjd9WU7PWRVcbUjulLiSGvNKMIXog1oOSqlS2BW0TX1Eg9CMv4J
Z8nbUVwiJkTe5bNMgH0JE0LBhTzLFl6GvQod49eZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client