Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231352e302f32342d3234203d3e2034393935.roa
File:                     3230302e322e3231352e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          9cXLAziB53xL4PHs9m1EnIUYX0pBwJO0mqhqVY4oYsY=
Subject key identifier:   63:B2:DC:0D:9D:75:07:54:9D:E7:42:57:B1:5B:79:0D:F5:A8:C1:4B
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       2AAEAA2638892179B6EB6A82A177FB5ECAA4F39B
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231352e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:35 +0000
ROA not before:           Tue 04 Feb 2025 19:58:35 +0000
ROA not after:            Tue 03 Feb 2026 20:03:35 +0000
asID:                     4995
IP address blocks:        200.2.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ae:aa:26:38:89:21:79:b6:eb:6a:82:a1:77:fb:5e:ca:a4:f3:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:35 2025 GMT
            Not After : Feb  3 20:03:35 2026 GMT
        Subject: CN=63B2DC0D9D7507549DE74257B15B790DF5A8C14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:50:1d:6e:2b:12:d4:73:f0:1b:a1:13:42:
                    47:09:a1:2d:9c:d9:f3:de:63:13:23:d7:f7:32:cc:
                    66:16:ae:56:b5:93:e7:f0:ce:06:f8:f5:7f:d3:24:
                    9f:ae:ee:c6:b3:4b:de:0a:d3:44:cf:75:57:1c:46:
                    8f:5e:39:99:82:e9:c8:fd:ee:6f:fb:51:b7:99:2f:
                    00:c0:a9:89:e7:c1:13:6b:77:a2:78:0c:8c:6f:5e:
                    a0:61:60:78:d0:0a:b3:63:a4:e5:77:4e:b5:b7:42:
                    6c:a5:e8:d1:8a:71:6c:36:55:31:11:e5:c1:4d:da:
                    7e:fb:2c:9f:c2:11:b6:ee:74:de:de:15:cb:21:16:
                    b5:42:2e:57:95:d9:bf:2c:a9:2d:b6:9e:04:28:11:
                    ba:3a:12:67:a6:7d:a4:56:d8:ba:f7:27:49:30:f1:
                    b6:ec:d0:5f:50:1e:96:7a:e8:64:fc:37:ff:9e:dc:
                    c0:fe:87:58:96:53:9d:fa:04:9d:f0:db:c5:03:e0:
                    16:cc:d0:81:8f:9d:04:a3:88:83:e5:cb:1b:7f:16:
                    ae:96:da:cc:8b:f4:6b:ff:28:19:b1:02:6b:09:09:
                    a1:21:a2:f5:c1:48:c5:36:a6:a4:82:c5:dd:f0:5d:
                    a7:06:f7:3d:de:08:27:3f:17:b4:b1:3f:85:9d:b0:
                    e9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B2:DC:0D:9D:75:07:54:9D:E7:42:57:B1:5B:79:0D:F5:A8:C1:4B
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3231352e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:a3:ba:5c:aa:0e:d7:87:34:05:12:ab:e5:3f:42:b0:13:
         26:a3:bb:e1:38:c0:3c:84:69:de:3a:ca:f5:59:12:de:13:13:
         d3:5b:92:75:a0:bf:7b:70:29:23:b8:d7:20:57:9d:53:69:33:
         18:47:8a:c4:3e:9b:63:48:6c:6b:01:52:a7:b4:21:35:4f:cd:
         f8:89:68:38:fa:30:03:0c:5e:f8:9e:61:09:91:2b:c1:cf:3a:
         63:34:d2:f3:34:fe:de:1b:7d:80:d8:aa:ee:50:e0:0a:e8:0c:
         6c:8a:b4:e4:12:0a:06:a4:34:57:41:e9:a8:59:e4:4f:7e:4c:
         0f:cf:dc:8e:7c:12:aa:d9:aa:22:5b:47:31:56:00:c8:46:ff:
         0e:b0:28:57:9e:1b:6a:00:fd:f2:c8:94:61:59:3a:d3:a2:3c:
         01:1b:5c:cc:c8:a5:bb:54:2e:16:80:43:1f:9f:6c:99:a7:67:
         3a:84:c0:c2:a4:10:f6:6c:43:73:22:51:fc:ca:20:57:59:9e:
         db:b3:b5:0b:95:33:70:cf:57:43:7e:8d:b9:20:7e:9a:f0:fd:
         ca:9f:83:76:c3:35:5c:0c:94:4c:cb:6c:e6:cb:9e:50:5f:83:
         3e:95:5c:97:08:e3:0a:d7:d2:24:1e:55:fd:27:aa:df:01:b7:
         87:ef:dc:86
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUKq6qJjiJIXm262qCoXf7Xsqk85swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzVaFw0yNjAyMDMyMDAzMzVaMDMxMTAvBgNV
BAMTKDYzQjJEQzBEOUQ3NTA3NTQ5REU3NDI1N0IxNUI3OTBERjVBOEMxNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZFAdbisS1HPwG6ETQkcJoS2c
2fPeYxMj1/cyzGYWrla1k+fwzgb49X/TJJ+u7sazS94K00TPdVccRo9eOZmC6cj9
7m/7UbeZLwDAqYnnwRNrd6J4DIxvXqBhYHjQCrNjpOV3TrW3Qmyl6NGKcWw2VTER
5cFN2n77LJ/CEbbudN7eFcshFrVCLleV2b8sqS22ngQoEbo6EmemfaRW2Lr3J0kw
8bbs0F9QHpZ66GT8N/+e3MD+h1iWU536BJ3w28UD4BbM0IGPnQSjiIPlyxt/Fq6W
2syL9Gv/KBmxAmsJCaEhovXBSMU2pqSCxd3wXacG9z3eCCc/F7SxP4WdsOmLAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUY7LcDZ11B1Sd50JXsVt5DfWowUswHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIyZTMyMzEzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyALXMA0GCSqG
SIb3DQEBCwUAA4IBAQCqKaO6XKoO14c0BRKr5T9CsBMmo7vhOMA8hGneOsr1WRLe
ExPTW5J1oL97cCkjuNcgV51TaTMYR4rEPptjSGxrAVKntCE1T834iWg4+jADDF74
nmEJkSvBzzpjNNLzNP7eG32A2KruUOAK6AxsirTkEgoGpDRXQemoWeRPfkwPz9yO
fBKq2aoiW0cxVgDIRv8OsChXnhtqAP3yyJRhWTrTojwBG1zMyKW7VC4WgEMfn2yZ
p2c6hMDCpBD2bENzIlH8yiBXWZ7bs7ULlTNwz1dDfo25IH6a8P3Kn4N2wzVcDJRM
y2zmy55QX4M+lVyXCOMK19IkHlX9J6rfAbeH79yG
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:10 2025 by rpki-client