Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3232342e302f31392d3234203d3e203130373738.roa
File:                     3230302e322e3232342e302f31392d3234203d3e203130373738.roa (raw, json)
Hash identifier:          TNJdW/xWMU8vKifSOdQZ5LLGgsxBmXv9CT/Bcon42l8=
Subject key identifier:   3A:1A:8C:28:09:9D:DE:80:FE:7A:18:E3:D0:7A:50:AC:9E:10:26:F9
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       26B1C0D42BD410C9C95CEA2583D1E846AB7D6346
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3232342e302f31392d3234203d3e203130373738.roa
Signing time:             Tue 04 Feb 2025 20:03:34 +0000
ROA not before:           Tue 04 Feb 2025 19:58:34 +0000
ROA not after:            Tue 03 Feb 2026 20:03:34 +0000
asID:                     10778
IP address blocks:        200.2.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b1:c0:d4:2b:d4:10:c9:c9:5c:ea:25:83:d1:e8:46:ab:7d:63:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:34 2025 GMT
            Not After : Feb  3 20:03:34 2026 GMT
        Subject: CN=3A1A8C28099DDE80FE7A18E3D07A50AC9E1026F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:df:0d:0d:7d:b1:34:2b:70:9e:02:ab:ad:
                    c7:93:1d:0c:a3:f4:f8:b5:f4:39:5d:82:07:e6:42:
                    74:e8:a4:58:93:2c:85:42:1d:68:c8:29:e4:e5:2a:
                    26:dd:0d:f7:70:9b:86:a2:3a:e5:b1:36:0c:1d:93:
                    fc:7b:93:4b:0b:c4:92:91:f9:89:92:2b:78:3a:24:
                    cb:17:9d:f8:40:cf:b3:16:90:cd:97:73:97:dd:9e:
                    95:1f:be:b1:b0:28:e7:d8:ef:f5:00:ac:3c:fa:b5:
                    d3:3c:14:d0:04:2f:de:d4:a9:2e:a5:2b:a9:12:8d:
                    1b:53:b8:7c:d0:96:bd:03:2d:c2:03:67:96:60:11:
                    42:be:64:cc:4b:18:a7:5a:85:47:ae:ce:b9:4e:3d:
                    19:2d:d9:59:3d:f2:07:c8:41:bf:43:27:27:0a:2e:
                    50:0e:c7:29:3d:0b:c6:80:c0:1f:11:2d:44:11:86:
                    b0:69:cd:00:13:93:14:3f:79:90:cf:43:42:aa:8b:
                    d4:fc:47:08:ab:bc:0d:60:b4:e3:89:e5:53:48:3b:
                    dc:8a:22:b3:75:85:a3:f3:13:4d:3c:90:39:f5:52:
                    54:cf:c8:fc:c6:8b:e3:e7:e9:8e:6d:ce:5e:40:03:
                    f1:e5:40:d6:8c:96:c4:ba:c8:5f:ae:74:8d:e3:65:
                    38:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1A:8C:28:09:9D:DE:80:FE:7A:18:E3:D0:7A:50:AC:9E:10:26:F9
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e322e3232342e302f31392d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:47:96:65:69:23:59:8a:72:a8:1a:84:3a:c5:f5:41:af:
         2c:cd:a0:06:5f:ba:13:f0:f4:8e:2c:53:a2:7f:d9:76:27:db:
         2f:91:8d:b4:e9:c2:b7:24:e6:06:04:1f:b9:a0:1f:01:41:32:
         42:95:36:35:7a:05:0b:bf:4a:f4:0c:0a:ff:17:c9:fe:3d:34:
         2b:b8:ec:9d:ed:08:19:69:89:cb:d1:d8:4b:0e:c5:04:ec:60:
         52:cc:da:47:a4:68:a6:cd:da:40:f4:a3:1e:13:04:36:14:59:
         ed:a8:48:77:bb:48:e9:70:59:68:07:b6:23:cb:15:64:f2:6d:
         be:14:d8:d9:85:9c:31:af:76:6d:8f:8e:dc:ae:e3:96:ba:7e:
         35:e4:80:75:51:23:a7:58:04:57:50:4f:12:ae:5d:9d:1e:e8:
         3e:aa:db:39:ad:39:8b:e5:61:88:3b:42:dd:cf:8a:30:7a:c0:
         c3:66:68:6c:25:53:4a:89:8c:3c:26:94:a4:d1:c7:6c:6b:74:
         37:93:9f:84:19:67:68:dd:dd:c5:64:09:eb:f0:5c:1f:14:f8:
         88:c3:06:57:2b:5e:48:30:d2:00:1d:c5:37:8f:c0:56:d2:4d:
         d4:47:02:f0:8a:1b:e5:e9:0a:b3:f2:ec:21:f1:7d:a2:c7:02:
         79:4c:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:56 2025 by rpki-client