Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa
File:                     3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          SkJcrIYrdpO6iHYP8JI9ZPZOheAoxAtTo9L3ZfN4PII=
Subject key identifier:   92:B0:61:5E:9C:57:FF:0C:3A:D4:90:1C:D9:80:5B:2A:61:D0:3B:BC
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       73299F6D0431BDB81EEA80677994BFF9D7143672
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 20:02:06 +0000
ROA not before:           Tue 04 Feb 2025 19:57:06 +0000
ROA not after:            Tue 03 Feb 2026 20:02:06 +0000
asID:                     23383
IP address blocks:        200.106.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:29:9f:6d:04:31:bd:b8:1e:ea:80:67:79:94:bf:f9:d7:14:36:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:06 2025 GMT
            Not After : Feb  3 20:02:06 2026 GMT
        Subject: CN=92B0615E9C57FF0C3AD4901CD9805B2A61D03BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a0:e5:cc:48:dd:18:58:da:b2:3e:c8:b7:17:
                    3a:07:a4:95:6e:10:1e:81:7d:02:3c:7d:7e:20:3a:
                    a4:c8:2a:36:cc:a3:85:d2:0c:7d:34:71:72:a4:62:
                    41:4e:b7:44:5b:d0:78:a1:24:ae:1a:51:fd:73:3d:
                    00:f7:02:c9:66:db:bd:b4:d0:f3:f7:5f:bf:cf:54:
                    a9:ab:12:7f:2c:ef:02:30:26:6c:a6:74:49:4a:e5:
                    fc:ab:25:e9:91:e9:8e:17:82:8c:77:84:82:ea:34:
                    29:27:f9:8a:f5:a9:3f:ea:20:c7:83:71:c5:bf:fa:
                    62:5c:3d:8e:af:ec:0e:92:91:d7:a5:ed:ab:8f:35:
                    31:89:6c:6c:c6:43:eb:27:d5:9d:bf:9d:4e:e9:8f:
                    72:83:20:25:35:78:a3:93:81:36:f9:4c:52:b0:0f:
                    34:f2:34:97:c2:e8:32:e9:72:2a:ec:26:83:7b:99:
                    b5:4b:4a:b5:28:c7:00:7c:94:44:cd:46:8f:a9:5a:
                    89:e7:7c:bb:8e:8d:1c:19:73:78:3f:1d:c0:81:68:
                    7c:b1:d5:59:55:5f:a3:0e:51:f0:e7:58:34:02:3d:
                    0b:0d:69:66:25:1b:59:6c:f4:ab:f0:0f:4b:03:03:
                    5d:71:b9:45:d0:8e:7b:27:09:e6:79:5b:99:2b:73:
                    28:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B0:61:5E:9C:57:FF:0C:3A:D4:90:1C:D9:80:5B:2A:61:D0:3B:BC
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e3130362e3232372e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:42:ee:57:51:f2:b8:7f:b1:f7:67:fd:e8:db:0d:91:cf:14:
         fb:ac:1a:8a:fc:04:43:1e:be:70:f4:96:e2:7e:03:8b:2e:93:
         53:ae:da:58:f6:09:60:5c:78:6c:dd:d1:7a:5e:99:23:54:b2:
         56:17:60:c2:98:50:0c:d5:1a:a2:a4:42:67:00:e5:e5:ab:80:
         bb:d8:9f:dc:8c:49:bf:23:5c:92:29:63:0c:3c:2d:35:09:c0:
         18:f6:98:85:42:b8:8c:fd:af:7e:6e:0d:db:29:11:9c:0f:f0:
         83:76:c0:18:98:bc:b6:50:b4:b8:53:a7:70:b1:17:1b:a3:2d:
         94:b8:3d:53:f8:b5:a7:1d:06:db:fd:16:4d:9c:e2:e9:a5:71:
         7b:b9:af:4e:7d:ca:1c:8c:92:5a:a1:bb:48:29:7f:c0:d8:cb:
         40:e5:55:34:99:f6:13:c1:10:62:45:12:57:5f:c8:1e:e9:93:
         7f:2d:b7:47:d1:b3:36:c8:fe:4c:93:d5:dc:92:ce:ae:aa:6f:
         96:4e:4f:68:d6:3c:43:6c:6f:a3:3d:a2:18:65:b0:19:1e:b7:
         59:e6:1b:a9:4f:c8:b5:c5:13:61:1d:44:88:e3:7d:e7:2c:55:
         05:d4:74:15:e1:0c:63:04:b8:f6:8b:0e:de:15:ea:49:c0:3b:
         f3:8e:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:18:05 2025 by rpki-client