Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e38322e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          yZP7nIc9OuOUyTR2yYo5ZC6joQBWKWpw0dFwoVPEt8o=
Subject key identifier:   0A:9B:66:32:94:65:D9:C4:B0:EC:1D:CB:77:3B:50:5A:9A:5D:17:87
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       09F3E636C43EB2531B8C5C86060D83F45B11649C
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:34 +0000
ROA not before:           Tue 04 Feb 2025 19:58:34 +0000
ROA not after:            Tue 03 Feb 2026 20:03:34 +0000
asID:                     4995
IP address blocks:        200.29.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f3:e6:36:c4:3e:b2:53:1b:8c:5c:86:06:0d:83:f4:5b:11:64:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:34 2025 GMT
            Not After : Feb  3 20:03:34 2026 GMT
        Subject: CN=0A9B66329465D9C4B0EC1DCB773B505A9A5D1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:6e:d3:2a:96:83:3d:ae:22:80:49:81:6b:
                    e6:de:6c:e8:49:54:72:57:6d:e0:0d:74:b6:50:c5:
                    65:a4:6e:05:72:5e:04:d7:a4:ed:0c:c1:c1:bd:e6:
                    94:10:d9:44:00:6c:75:63:d8:4e:79:cd:20:a2:c8:
                    81:ae:07:c3:cd:1d:bf:3d:53:f3:a4:a1:3e:16:1b:
                    93:34:c0:39:99:32:1b:de:48:3e:74:e4:69:bc:4c:
                    8e:a7:88:72:d5:ab:bd:01:66:3b:6e:fd:e7:2d:fe:
                    40:c1:d7:55:d6:84:23:f4:43:ab:89:68:93:1e:28:
                    39:75:b8:55:cf:09:5a:26:fe:db:4a:60:4e:c6:19:
                    19:a4:21:3b:77:b5:56:b5:63:48:8f:d9:ba:87:f6:
                    19:e0:86:7a:d9:e8:c8:24:f5:b2:92:14:b2:75:a7:
                    bf:55:27:19:9c:c7:db:d2:cc:63:50:04:9a:dc:c9:
                    7c:e5:32:eb:93:25:b7:2c:2b:0a:44:ff:36:c4:f1:
                    9d:60:63:8b:59:54:82:16:56:ac:e5:9b:12:e1:90:
                    6f:38:d1:38:67:47:f4:e7:5e:e7:46:4a:b6:55:d3:
                    ab:84:16:fd:e6:ad:86:d7:a7:c6:c1:51:ae:f7:aa:
                    08:f0:83:93:47:1d:cb:78:b9:f1:79:4f:b4:9b:e3:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9B:66:32:94:65:D9:C4:B0:EC:1D:CB:77:3B:50:5A:9A:5D:17:87
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e38322e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:51:63:bd:28:ff:ad:bb:05:5b:a8:c2:da:c0:43:d7:84:b4:
         9d:58:b2:1f:f0:fc:6a:f9:06:74:63:83:a3:9f:02:fa:45:62:
         01:9d:87:7d:21:91:4d:cb:e9:74:81:d1:df:48:57:5e:36:e5:
         d5:5e:97:21:20:c2:f3:b4:e7:8e:c8:b1:d0:02:a6:dd:5e:8d:
         ac:e6:16:4a:6d:da:b5:93:1b:c8:52:2b:f4:ca:0d:2b:d7:66:
         ae:9d:45:f1:8a:33:43:f4:43:fb:b9:3f:c4:3e:8f:1c:ec:1c:
         52:d0:40:71:17:b4:18:75:b4:09:52:b1:1a:3e:b7:37:6e:2c:
         f7:84:4c:fa:73:31:5a:91:6e:a2:69:8c:3b:dc:18:70:f3:e6:
         2a:c3:e4:b8:b9:ca:bc:ba:0f:ee:75:d3:e3:e7:9f:d6:b5:ac:
         de:52:b0:89:11:ad:74:e2:10:2e:59:1f:bf:2b:8a:71:4e:1c:
         1c:21:4b:ca:05:41:31:3f:d6:9b:52:c1:1e:8f:e4:15:b9:73:
         9c:e4:c5:b2:44:46:8e:05:89:43:43:e1:50:d7:6c:fd:9d:e5:
         1a:3f:f9:02:45:83:1f:e6:09:af:33:39:98:58:1c:be:8a:d7:
         8e:c5:ea:a0:c2:fd:2a:99:ae:17:0d:4e:44:6f:ba:d2:44:ee:
         af:09:af:b1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUCfPmNsQ+slMbjFyGBg2D9FsRZJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5RTA1RkZFRUQ0OEE5NjkyNDU0RjY2OEI4M0Q0OTcx
NEM5RkUzOTAeFw0yNTAyMDQxOTU4MzRaFw0yNjAyMDMyMDAzMzRaMDMxMTAvBgNV
BAMTKDBBOUI2NjMyOTQ2NUQ5QzRCMEVDMURDQjc3M0I1MDVBOUE1RDE3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyW7TKpaDPa4igEmBa+bebOhJ
VHJXbeANdLZQxWWkbgVyXgTXpO0MwcG95pQQ2UQAbHVj2E55zSCiyIGuB8PNHb89
U/OkoT4WG5M0wDmZMhveSD505Gm8TI6niHLVq70BZjtu/ect/kDB11XWhCP0Q6uJ
aJMeKDl1uFXPCVom/ttKYE7GGRmkITt3tVa1Y0iP2bqH9hnghnrZ6Mgk9bKSFLJ1
p79VJxmcx9vSzGNQBJrcyXzlMuuTJbcsKwpE/zbE8Z1gY4tZVIIWVqzlmxLhkG84
0ThnR/TnXudGSrZV06uEFv3mrYbXp8bBUa73qgjwg5NHHct4ufF5T7Sb45Y9AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUCptmMpRl2cSw7B3LdztQWppdF4cwHwYDVR0j
BBgwFoAUl54F/+7UipaSRU9mi4PUlxTJ/jkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQ0NGOTc4REUwMDQ2NkExRjQxQTlDNzYxQUVCMjU3N0U1
NTY5MEIwMEM0QjNEREYzMzlBMjNCOTVCMzExQjkzLzAvOTc5RTA1RkZFRUQ0OEE5
NjkyNDU0RjY2OEI4M0Q0OTcxNEM5RkUzOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzlFMDVGRkVFRDQ4QTk2OTI0
NTRGNjY4QjgzRDQ5NzE0QzlGRTM5LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkNDRjk3OERFMDA0NjZBMUY0MUE5Qzc2MUFFQjI1NzdFNTU2OTBCMDBD
NEIzRERGMzM5QTIzQjk1QjMxMUI5My8wLzMyMzAzMDJlMzIzOTJlMzgzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB1SMA0GCSqG
SIb3DQEBCwUAA4IBAQBxUWO9KP+tuwVbqMLawEPXhLSdWLIf8Pxq+QZ0Y4OjnwL6
RWIBnYd9IZFNy+l0gdHfSFdeNuXVXpchIMLztOeOyLHQAqbdXo2s5hZKbdq1kxvI
Uiv0yg0r12aunUXxijND9EP7uT/EPo8c7BxS0EBxF7QYdbQJUrEaPrc3biz3hEz6
czFakW6iaYw73Bhw8+Yqw+S4ucq8ug/uddPj55/WtazeUrCJEa104hAuWR+/K4px
ThwcIUvKBUExP9abUsEej+QVuXOc5MWyREaOBYlDQ+FQ12z9neUaP/kCRYMf5gmv
MzmYWBy+iteOxeqgwv0qma4XDU5Eb7rSRO6vCa+x
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client