Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e392e302f32342d3234203d3e2034393935.roa
File:                     3230302e32392e392e302f32342d3234203d3e2034393935.roa (raw, json)
Hash identifier:          06jquJJuhdXZYytfk95JhZjvoReLKmoYgR+03ddST30=
Subject key identifier:   A3:2E:78:89:24:21:3E:5D:7E:06:08:5E:9F:A1:42:42:3F:8F:77:C5
Certificate issuer:       /CN=979E05FFEED48A9692454F668B83D49714C9FE39
Certificate serial:       294DA8E849FDF6E3FB99FCA893B3054C1434A539
Authority key identifier: 97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e392e302f32342d3234203d3e2034393935.roa
Signing time:             Tue 04 Feb 2025 20:03:35 +0000
ROA not before:           Tue 04 Feb 2025 19:58:35 +0000
ROA not after:            Tue 03 Feb 2026 20:03:35 +0000
asID:                     4995
IP address blocks:        200.29.9.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4d:a8:e8:49:fd:f6:e3:fb:99:fc:a8:93:b3:05:4c:14:34:a5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979E05FFEED48A9692454F668B83D49714C9FE39
        Validity
            Not Before: Feb  4 19:58:35 2025 GMT
            Not After : Feb  3 20:03:35 2026 GMT
        Subject: CN=A32E788924213E5D7E06085E9FA142423F8F77C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:56:8c:ca:b9:af:7c:e9:d2:eb:ee:23:75:
                    6d:93:66:d9:14:b9:12:fa:22:d1:d6:1e:a7:f3:33:
                    66:3d:6f:74:85:38:e9:5b:e4:a7:e3:2c:a5:62:97:
                    31:00:35:9e:e9:f1:61:25:8d:2e:49:be:35:f4:8f:
                    41:1e:08:7d:ab:b5:0d:12:a3:c3:65:26:b3:1a:fb:
                    94:1a:3a:f9:21:44:88:50:19:91:cb:30:8a:f1:24:
                    f6:05:ac:ca:c1:62:42:17:df:72:76:bb:3d:ef:64:
                    d8:b8:2f:ed:5c:6d:96:0b:3f:5a:14:48:cc:bf:93:
                    1a:48:9b:6b:ea:a4:89:58:3e:c2:91:44:10:16:6b:
                    9e:ad:43:9d:d0:04:38:8e:40:92:ce:b1:24:8f:b8:
                    c5:58:0f:a8:ee:30:bc:be:47:cc:1c:61:49:82:2f:
                    1e:b3:ae:bc:e4:98:3a:45:d1:99:09:a9:f6:45:df:
                    75:eb:ae:69:21:3f:eb:64:59:e4:87:2e:83:22:29:
                    c1:08:b4:be:eb:09:56:e7:f3:93:7d:61:60:07:0e:
                    44:d1:1f:3a:ee:3c:91:ca:0a:01:df:07:2a:ff:9e:
                    13:61:1a:5e:26:c9:d7:a6:ad:5b:c3:85:6b:53:d7:
                    34:15:0c:b8:48:3b:bd:f8:0b:cf:b8:7e:4d:43:7a:
                    59:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2E:78:89:24:21:3E:5D:7E:06:08:5E:9F:A1:42:42:3F:8F:77:C5
            X509v3 Authority Key Identifier:
                keyid:97:9E:05:FF:EE:D4:8A:96:92:45:4F:66:8B:83:D4:97:14:C9:FE:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/979E05FFEED48A9692454F668B83D49714C9FE39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/979E05FFEED48A9692454F668B83D49714C9FE39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2CCF978DE00466A1F41A9C761AEB2577E55690B00C4B3DDF339A23B95B311B93/0/3230302e32392e392e302f32342d3234203d3e2034393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:d2:0d:3c:27:ae:e3:1d:22:b7:d8:b6:ce:38:28:17:81:10:
         2c:f6:e2:fd:aa:37:be:9f:ce:9c:fc:4e:00:71:f3:d1:fc:5b:
         58:2c:e3:bc:21:fa:c4:75:1c:48:be:de:7b:98:be:00:b7:fa:
         4b:8a:aa:4d:a2:da:88:da:55:86:04:e8:c2:57:9d:d9:ea:57:
         0d:50:15:fc:4d:24:e1:53:7a:9c:5e:1c:a0:4a:c4:c3:80:93:
         0d:f3:a4:1f:db:fd:12:51:f3:07:19:9c:b2:88:39:84:db:77:
         ea:4d:eb:ec:30:37:6c:db:53:e5:0c:c5:d3:8e:75:37:10:39:
         5a:97:fd:47:a9:49:28:ab:9b:8c:b5:a0:75:2a:77:5b:99:6a:
         49:8a:90:ff:a4:c6:dd:d4:0b:3b:04:13:d8:dd:aa:84:4c:1b:
         b8:a4:04:f7:65:b8:f7:82:e0:f6:29:0c:69:97:4a:7b:6c:48:
         8b:4a:71:6c:e2:6e:41:71:a7:7c:e3:1b:79:54:b7:6e:47:ae:
         f0:9c:ad:9a:cb:c5:06:67:a2:da:82:2c:6c:c3:06:f1:e3:f0:
         22:c4:d6:da:31:9b:39:41:8e:60:4a:ad:ad:a1:03:00:7e:a9:
         9f:38:25:b4:d1:ee:58:34:80:0d:22:72:ae:63:d9:30:6a:c2:
         6f:17:6a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:54 2025 by rpki-client