Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa
File:                     3230302e31332e3138382e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          6VyPDYyt8CeP0JfLiPlbcVy0O363GIh8IOrkSHV1iMc=
Subject key identifier:   90:22:04:F2:C7:B7:60:9F:C8:D2:CE:B4:C6:D3:F1:C9:88:22:7F:AE
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       63C2356DF796E3000790F6D41CACA66F78D61243
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 20:02:17 +0000
ROA not before:           Tue 04 Feb 2025 19:57:17 +0000
ROA not after:            Tue 03 Feb 2026 20:02:17 +0000
asID:                     23383
IP address blocks:        200.13.188.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c2:35:6d:f7:96:e3:00:07:90:f6:d4:1c:ac:a6:6f:78:d6:12:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:17 2025 GMT
            Not After : Feb  3 20:02:17 2026 GMT
        Subject: CN=902204F2C7B7609FC8D2CEB4C6D3F1C988227FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:fb:1b:bb:00:49:de:76:42:e0:ae:5e:4f:
                    3e:4d:b2:d5:ae:1c:9f:bb:f9:9f:b5:2e:7d:34:77:
                    49:13:9f:17:c3:14:80:b2:e7:a9:61:2e:e2:e0:bc:
                    2b:cb:1e:d3:71:63:87:52:a0:f6:c6:16:42:e5:ee:
                    0e:e7:cd:40:49:27:fd:66:2d:e4:57:f3:d7:12:a4:
                    9d:af:0f:a6:d3:5a:85:2f:c4:a2:b0:9d:c2:45:49:
                    00:a3:9d:bf:4d:b4:c1:2b:2b:0c:41:ff:bb:9c:91:
                    a3:f5:e3:93:94:c8:01:7b:c0:31:ff:f5:5b:c7:8a:
                    b5:ff:f5:f7:ac:36:b7:78:62:07:c8:ff:86:ea:b0:
                    5a:1a:12:50:c7:51:f9:6c:8f:bc:df:f0:76:2c:09:
                    b5:15:1d:e8:a1:7c:ba:0c:fb:c0:b0:cc:02:06:0f:
                    c4:62:b5:46:17:e8:f7:fc:8a:74:f2:31:6e:de:b6:
                    e9:19:1f:d6:7b:2b:ad:f6:3c:c9:bc:c9:66:1a:b5:
                    f1:5a:5d:11:f9:cf:7b:c6:df:b1:d6:13:82:7e:af:
                    51:dc:cf:f9:ec:42:fb:b9:f4:2a:2c:d8:c0:2b:c8:
                    2f:b8:3f:e5:ee:c1:c2:81:78:d0:c1:b3:15:a8:09:
                    c6:71:2c:cb:e0:dc:eb:a7:19:5b:2f:f2:2f:d6:20:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:04:F2:C7:B7:60:9F:C8:D2:CE:B4:C6:D3:F1:C9:88:22:7F:AE
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3230302e31332e3138382e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f9:45:3e:98:15:85:c7:61:e8:d9:a1:68:99:56:88:39:9b:
         9b:ea:b9:c8:3d:cf:7a:01:20:4d:b7:92:f0:14:55:1b:ed:50:
         b1:fc:52:b2:1c:4b:dc:de:fb:9c:4e:13:51:0a:ef:a6:c6:03:
         30:91:82:8f:e6:66:cb:89:e1:04:a4:4e:40:18:df:d4:d4:ed:
         a6:ea:7f:f1:bd:09:17:ea:7a:e3:9d:e1:27:4d:b6:02:36:59:
         ba:ba:44:8c:74:f2:c3:fd:bb:85:c9:cf:32:e4:f7:08:13:e4:
         e8:02:73:e6:39:21:75:7f:7b:58:54:ae:11:c9:77:6d:c4:90:
         0b:d4:3a:88:53:cc:e6:53:2d:96:e4:fc:ab:49:03:f6:2b:8c:
         30:5e:40:ba:cc:d0:3a:af:01:41:13:05:1f:77:74:ff:a9:bf:
         b2:57:0f:3f:b9:b5:67:98:97:ee:40:45:e8:98:00:fc:06:6a:
         4a:dc:1f:7d:78:df:da:84:d9:28:51:9f:a7:b7:f7:d0:5e:4b:
         19:80:26:f2:d5:f2:55:68:c3:b4:a0:84:f2:be:83:b1:9a:a1:
         65:5c:21:db:7e:5c:14:f3:94:da:d6:1a:93:f9:cd:18:24:11:
         43:4b:4f:9f:6f:47:ca:d0:dc:3d:a2:18:fc:f7:5c:dd:44:ee:
         1c:56:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:03 2025 by rpki-client