Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa
File:                     3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa (raw, json)
Hash identifier:          3HqG3zFIdX466vSqGdFxQPYG5kt0Vlv4cBXjcO4k/rg=
Subject key identifier:   45:45:A6:91:F0:5E:DC:5D:2C:45:41:C6:BF:F6:3A:E5:56:52:3D:F7
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       544390A97C1C02BD84CB26BD066FCAE23A658F0E
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:41 +0000
ROA not before:           Tue 04 Feb 2025 18:02:41 +0000
ROA not after:            Tue 03 Feb 2026 18:07:41 +0000
asID:                     28114
IP address blocks:        200.114.120.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:43:90:a9:7c:1c:02:bd:84:cb:26:bd:06:6f:ca:e2:3a:65:8f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:41 2025 GMT
            Not After : Feb  3 18:07:41 2026 GMT
        Subject: CN=4545A691F05EDC5D2C4541C6BFF63AE556523DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:11:c0:b2:c3:2c:03:39:f4:e6:78:f7:c2:be:
                    ef:a1:1c:97:6a:90:14:de:49:e5:13:53:6a:db:7f:
                    52:e1:25:4d:9e:19:08:87:2d:19:58:aa:69:cd:7a:
                    ae:c3:84:b5:b0:85:78:ca:8c:b0:f9:c4:48:a8:75:
                    d9:e4:ef:59:b0:9a:8c:04:01:01:97:6c:26:e2:6b:
                    2c:3e:71:ce:0e:8c:51:d6:87:38:88:a7:84:6b:b3:
                    30:94:26:72:f0:35:75:01:43:17:ea:6a:df:8d:0c:
                    a0:cb:ef:e2:89:ee:8e:01:58:a1:6f:db:17:0a:4b:
                    0a:f0:22:d8:37:ae:2a:56:b6:71:91:ab:64:41:ad:
                    67:fd:9d:7e:c6:e5:88:c4:be:d3:88:c0:ac:a3:79:
                    3c:8c:e8:ff:af:04:35:f4:91:46:de:f2:72:cf:95:
                    bd:7f:c6:8b:34:92:bb:85:3c:60:ec:ef:b0:b2:d6:
                    fc:22:96:91:36:09:2e:c4:88:e8:43:ef:d0:eb:9c:
                    28:8c:ef:4d:fc:30:c4:49:7b:46:69:66:8b:68:f8:
                    d3:0a:f5:9e:28:58:f8:fa:d5:64:45:a0:37:f5:58:
                    ee:a8:e7:2e:d4:88:93:78:d7:2c:19:09:b7:e2:c1:
                    cb:05:bc:b9:50:86:33:86:6c:52:f2:58:40:63:96:
                    5e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:A6:91:F0:5E:DC:5D:2C:45:41:C6:BF:F6:3A:E5:56:52:3D:F7
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3230302e3131342e3132302e302f32312d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         71:7a:83:ad:64:5e:d2:79:58:5e:b1:c9:79:48:53:ce:04:e6:
         a3:92:9e:d2:1f:44:62:18:b1:d9:46:4c:d4:66:44:4c:2f:41:
         cf:3d:e4:18:05:03:33:cd:c1:d7:91:25:22:18:fe:55:cb:c5:
         56:a2:f2:66:34:07:7d:2e:41:ce:68:43:95:86:ba:83:db:68:
         ee:70:95:26:17:1f:e6:68:8b:4c:32:5f:03:50:c1:ef:4f:34:
         8b:98:5d:3c:9e:48:f3:58:ce:c9:17:2b:47:69:27:0d:b5:ae:
         58:31:f9:85:c2:7c:70:88:1c:30:bb:c1:34:4b:df:c7:62:f3:
         dd:73:66:0c:1a:be:14:99:74:b0:f8:e8:e5:9e:62:2e:b7:9a:
         42:7f:d3:3b:48:c8:bc:18:ab:b5:d2:d6:90:63:5e:59:0e:85:
         3d:ac:94:31:84:5f:60:73:2d:04:81:97:c7:d1:5e:42:69:64:
         69:5a:e6:fd:67:0a:a7:ea:1a:02:17:a1:ca:4b:95:eb:ee:6e:
         ed:e1:a7:a3:6a:3d:24:d1:9e:02:94:c1:09:fe:f0:71:3f:0f:
         f5:a4:66:86:43:9f:fc:e9:57:37:2c:74:e9:de:76:54:11:63:
         25:f2:e3:77:92:e4:ce:4b:a1:7d:11:b0:06:c8:8c:9a:7f:de:
         5b:e8:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:47 2025 by rpki-client