Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e37362e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          RfUCIwMgYyNwA6LKshuVHkqT2wzFP05ll9aCj6kpcXM=
Subject key identifier:   CE:77:83:9D:5B:0F:84:22:39:03:21:7B:76:8A:F6:97:F2:33:F0:CF
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       6F786CD5EF304516FBF60042A4CFE765AB51291A
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:39 +0000
ROA not before:           Tue 04 Feb 2025 19:58:39 +0000
ROA not after:            Tue 03 Feb 2026 20:03:39 +0000
asID:                     4995
IP address blocks:        200.29.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:78:6c:d5:ef:30:45:16:fb:f6:00:42:a4:cf:e7:65:ab:51:29:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:39 2025 GMT
            Not After : Feb  3 20:03:39 2026 GMT
        Subject: CN=CE77839D5B0F84223903217B768AF697F233F0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:17:f3:00:77:8b:cd:11:7c:03:23:45:93:7a:
                    e5:6c:46:65:4e:2a:83:83:84:9a:ce:6a:dd:5c:cc:
                    fe:44:f7:4a:dc:91:28:4d:1d:b3:8d:78:0f:40:35:
                    d4:d8:07:52:5c:86:a2:83:b5:9d:7d:fc:52:36:11:
                    bf:88:2d:c7:e0:ff:1a:f3:d9:29:7a:c4:a2:70:a9:
                    50:c2:4a:72:0f:5a:ee:62:6c:36:49:c8:8d:e7:63:
                    81:aa:93:cc:1e:9b:6f:93:d9:f6:2e:e4:55:b1:ae:
                    a6:f4:29:0e:44:35:da:11:1f:eb:c6:92:a6:ec:c4:
                    28:16:25:5e:73:3c:42:32:b5:bf:bc:e7:24:04:e5:
                    92:13:4a:e7:b6:33:9c:29:2f:73:f0:e0:fb:fc:e6:
                    7d:66:69:8e:23:6d:52:36:cc:a6:40:aa:38:99:8d:
                    ee:bf:62:27:c3:44:1e:d9:13:87:1a:65:a1:35:c4:
                    25:7e:14:90:e4:ea:73:14:03:66:17:b6:10:f9:54:
                    96:49:32:bb:37:80:78:3b:7b:90:b4:66:07:96:ad:
                    cb:fa:7a:f0:76:51:22:db:ef:15:00:6a:6f:21:d2:
                    09:90:72:fd:a4:f3:b9:81:ae:25:bf:f2:54:2c:27:
                    7f:57:1d:b9:61:e4:7a:e6:53:3b:f0:84:0a:7a:11:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:77:83:9D:5B:0F:84:22:39:03:21:7B:76:8A:F6:97:F2:33:F0:CF
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e37362e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:c3:95:20:f0:89:51:f6:20:19:b1:1e:95:e0:d4:b2:ab:43:
         31:22:2b:ef:6e:e7:54:d4:a7:04:ad:c0:e4:94:ea:b3:04:9d:
         4c:75:66:21:7f:73:49:9c:91:b7:0c:f1:b6:75:a9:1b:fc:5d:
         0d:40:10:12:4f:84:75:4d:3e:2e:47:e3:9c:21:54:c0:79:80:
         27:ee:fa:51:19:64:e8:39:06:60:3c:95:0d:8d:a2:82:03:24:
         56:b3:28:c3:e4:9c:65:b2:6f:5b:05:44:a4:9e:9f:11:9a:4f:
         e2:51:6a:c5:18:6e:a9:cf:2e:90:9c:70:a8:e9:68:a7:95:2d:
         be:16:6d:44:31:9b:bf:fc:df:d0:7b:be:5d:08:cd:cb:6e:c8:
         e7:57:0c:ef:d3:39:39:c3:0e:ef:a8:9c:7b:57:c3:9b:a7:76:
         69:5c:c4:01:01:4a:9b:70:1c:9a:46:89:8a:8c:9b:49:42:d6:
         6c:c8:c2:13:24:b5:b1:e0:99:4c:27:d1:19:bd:a9:11:d7:0c:
         45:9c:8c:7f:2d:05:31:f3:77:c1:29:43:05:b2:19:f2:7f:eb:
         24:06:19:85:7f:f1:3e:ed:56:5d:d9:05:50:3b:e5:f8:53:39:
         73:1c:95:d7:57:50:78:23:53:f3:32:19:fa:f7:fe:9b:fe:78:
         b2:b3:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:10 2025 by rpki-client