Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa
File:                     3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa (raw, json)
Hash identifier:          M+VOB01XRZfhYtf7JkXz0ZezmxTgeKuV/1o3S1ArnbM=
Subject key identifier:   DA:E0:3B:4F:A2:2D:BC:49:AD:67:A2:9C:64:89:44:0D:B5:96:82:20
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       592F48A47180640F34CE5DE3C7C6CFF3C8D3AAF0
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa
Signing time:             Tue 04 Feb 2025 19:58:42 +0000
ROA not before:           Tue 04 Feb 2025 19:53:42 +0000
ROA not after:            Tue 03 Feb 2026 19:58:42 +0000
asID:                     26505
IP address blocks:        200.124.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2f:48:a4:71:80:64:0f:34:ce:5d:e3:c7:c6:cf:f3:c8:d3:aa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Feb  4 19:53:42 2025 GMT
            Not After : Feb  3 19:58:42 2026 GMT
        Subject: CN=DAE03B4FA22DBC49AD67A29C6489440DB5968220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0a:7b:85:80:ed:d3:b1:a3:98:30:29:e2:84:
                    40:cd:dd:e2:0c:53:e6:b4:bf:f0:e2:6d:82:12:9b:
                    e5:9a:49:b2:46:83:6f:f3:34:b1:c6:9f:fa:6d:b6:
                    26:36:10:06:16:8f:94:cb:46:14:b7:43:c3:ba:38:
                    67:ad:76:a2:9a:6e:62:f2:e4:f1:7c:fc:03:4a:ec:
                    73:8b:5a:13:6f:ef:5e:29:a3:dc:26:eb:86:89:d8:
                    8d:2f:0c:a3:54:6c:a2:4b:ee:b1:45:3a:ce:5a:d1:
                    51:94:73:c5:3a:32:c2:ee:da:b4:57:d8:46:52:ed:
                    fa:80:99:cb:a3:2b:06:40:87:75:10:ca:33:01:63:
                    c2:96:b7:95:67:84:70:2d:8e:a8:e5:f2:da:90:84:
                    2d:6f:a4:20:d6:4f:be:26:ef:78:0c:7b:f1:7f:fa:
                    16:53:91:5e:f1:54:f4:d8:f7:4d:5f:d9:37:32:28:
                    19:e1:b7:50:2b:19:36:93:cb:33:73:8f:ed:7c:4d:
                    0b:81:5d:28:d3:1f:26:cc:b8:19:a0:97:ed:2a:8b:
                    27:a5:4b:f1:f0:c5:83:34:98:74:06:67:8e:d7:21:
                    ad:ed:60:2e:1b:33:9e:56:aa:88:70:a9:49:73:b3:
                    a5:40:25:0d:ca:03:ca:c9:e6:ce:3f:ac:c4:2c:50:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E0:3B:4F:A2:2D:BC:49:AD:67:A2:9C:64:89:44:0D:B5:96:82:20
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3132382e302f32302d3234203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:33:ef:50:e6:ba:6e:7c:e8:d3:03:c7:b2:d4:c6:7d:f9:76:
         fc:8d:49:ab:63:ee:34:1f:e3:7f:95:e4:69:61:dc:28:e0:fe:
         44:cd:ed:18:2c:7d:6d:2a:72:8c:65:99:f0:3a:d8:60:f9:56:
         40:87:ab:bf:cb:74:b3:c3:05:7c:a2:f4:d3:0b:b7:dd:c6:76:
         9e:63:3d:82:49:50:89:a2:bd:04:82:09:4b:cc:12:6d:1f:44:
         43:6a:8a:67:dc:a7:20:37:d7:65:39:d7:f8:c3:7b:fa:ff:9f:
         f6:70:aa:ea:86:77:9e:34:66:99:1c:00:ca:32:6f:6d:9a:67:
         49:9b:ab:65:cf:ab:ee:21:f2:c8:64:f5:a9:75:35:80:f3:6e:
         a9:b8:da:cd:f3:a4:cc:8b:0c:8e:2e:2f:e2:45:1b:c3:5b:35:
         4f:4d:b7:74:ca:68:af:f9:00:f8:3b:d1:11:6d:30:29:d5:e9:
         cf:bb:c9:b0:f2:a5:0d:a1:66:14:89:ce:ab:f4:55:12:8d:32:
         7b:2d:44:fa:10:b1:35:95:28:6b:2e:60:66:79:16:16:6f:a0:
         d1:dd:70:e8:25:3a:50:ad:bc:97:57:5f:c3:a1:a0:b6:13:a5:
         3c:37:b2:b3:eb:cd:86:be:17:d3:a2:07:4d:49:39:00:67:f1:
         f9:02:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:03 2025 by rpki-client