Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa
File:                     3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa (raw, json)
Hash identifier:          /yPORSBuMvVmlS4mMiL4UqAQmvJrnP3obTL7V8SKQlQ=
Subject key identifier:   A5:BA:B3:0D:7C:23:B5:55:CF:69:36:DD:AC:A8:E5:9B:FF:D0:C6:36
Certificate issuer:       /CN=E05464F45EEB0ED0894BBD64663203701E769A12
Certificate serial:       101F7E0CD7C867AD7C19B619A524016D962E09AB
Authority key identifier: E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa
Signing time:             Tue 04 Feb 2025 19:58:43 +0000
ROA not before:           Tue 04 Feb 2025 19:53:43 +0000
ROA not after:            Tue 03 Feb 2026 19:58:43 +0000
asID:                     26505
IP address blocks:        200.124.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:1f:7e:0c:d7:c8:67:ad:7c:19:b6:19:a5:24:01:6d:96:2e:09:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E05464F45EEB0ED0894BBD64663203701E769A12
        Validity
            Not Before: Feb  4 19:53:43 2025 GMT
            Not After : Feb  3 19:58:43 2026 GMT
        Subject: CN=A5BAB30D7C23B555CF6936DDACA8E59BFFD0C636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:87:67:0e:23:90:5a:ec:82:e8:95:e8:73:
                    c6:84:82:c2:d0:48:cf:0c:24:fd:7c:92:8d:98:6c:
                    e9:cd:d3:f6:5e:2d:20:84:01:f3:3c:68:0d:c5:c1:
                    89:61:16:79:e9:d0:46:ea:f7:2a:1d:9b:69:e7:8d:
                    e1:86:a9:99:7e:a3:df:15:96:13:ee:04:04:a8:08:
                    89:51:83:d0:81:5c:65:c6:62:c5:d6:08:2d:9f:c2:
                    3d:de:e2:b6:3a:96:31:d3:1d:02:46:53:e6:b0:06:
                    25:4b:1c:23:35:f8:37:b2:87:4e:bf:47:42:aa:80:
                    73:60:b6:31:d4:40:29:8c:77:fa:9b:6f:c6:a4:0a:
                    1e:a6:94:a6:ea:ca:01:32:97:9a:5c:7b:0a:60:bc:
                    fe:a7:37:70:24:03:e1:53:82:3a:b6:e8:0c:12:58:
                    85:82:29:58:be:80:4b:fe:36:d0:a9:dd:c6:e5:a6:
                    e8:dc:14:06:4e:80:26:11:48:40:59:b1:f7:f7:02:
                    ff:a3:07:71:52:85:25:45:e8:81:72:27:0c:98:07:
                    e2:93:b2:a0:0d:1a:6e:94:8e:aa:a4:6e:e4:70:44:
                    30:d3:69:2b:d7:9c:d4:d8:da:23:ac:74:f6:34:82:
                    22:1a:55:f6:8b:2f:a2:f5:85:01:70:10:54:0c:48:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BA:B3:0D:7C:23:B5:55:CF:69:36:DD:AC:A8:E5:9B:FF:D0:C6:36
            X509v3 Authority Key Identifier:
                keyid:E0:54:64:F4:5E:EB:0E:D0:89:4B:BD:64:66:32:03:70:1E:76:9A:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/E05464F45EEB0ED0894BBD64663203701E769A12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E05464F45EEB0ED0894BBD64663203701E769A12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34CDFE72C276EC7AA199249231F0A452D9B4B5B1324A553C48107F66620D87D9/0/3230302e3132342e3134342e302f32302d3234203d3e203236353035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:62:21:93:67:1e:52:54:72:45:bd:a6:a4:43:e9:e7:95:f7:
         65:b7:64:42:db:78:72:13:a2:c2:6d:23:1c:31:1b:ee:6a:81:
         ad:08:a3:65:f9:f9:f6:f0:a2:08:6a:f8:b9:16:c0:21:5f:07:
         74:86:d2:fc:b6:fd:f8:9f:2e:d5:b7:5e:a6:63:98:fe:04:0e:
         82:59:e9:18:35:af:7e:e2:3c:b8:42:cf:ba:17:a6:eb:92:65:
         88:69:0b:7a:8a:f3:e3:9c:6c:1a:e2:ef:79:19:a6:22:45:ca:
         95:10:23:d3:e3:06:67:a5:88:5a:7f:d5:5b:25:9a:e4:02:c7:
         b1:0f:21:56:a6:e6:a4:4b:b9:e6:1d:8c:56:bb:0e:b5:5f:ae:
         85:6f:d6:ef:2d:49:c5:13:fe:df:04:25:7d:2b:bf:3b:ab:c1:
         79:7c:eb:46:4a:f4:20:6e:49:0b:0b:54:e8:7a:43:de:ca:55:
         93:7b:d2:27:3e:d4:b8:5c:6b:d5:97:5d:76:23:e4:c6:c3:58:
         19:ba:8b:19:4c:99:3d:e3:ef:d5:eb:61:9f:20:9e:16:e8:46:
         ad:b5:63:b7:ba:18:1f:01:29:f4:db:7e:17:5f:78:b9:67:49:
         98:1c:0f:97:37:8b:d0:08:24:7d:c8:37:21:09:c9:b2:1a:88:
         b2:07:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:17:29 2025 by rpki-client