Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
File:                     3230302e33332e38322e302f32342d3234203d3e2033353439.roa (raw, json)
Hash identifier:          6QtTxqEFcP45RYUqC20Wxjhu4sCpOYLLUyH5090A9Lc=
Subject key identifier:   2C:82:C5:0B:76:C9:27:76:04:52:F3:4D:A2:FC:53:68:C6:BF:78:29
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       3AA3937CB7A94CE905BFE480691224548D7569CF
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:37:05 +0000
ROA not before:           Tue 04 Feb 2025 18:32:05 +0000
ROA not after:            Tue 03 Feb 2026 18:37:05 +0000
asID:                     3549
IP address blocks:        200.33.82.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a3:93:7c:b7:a9:4c:e9:05:bf:e4:80:69:12:24:54:8d:75:69:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Feb  4 18:32:05 2025 GMT
            Not After : Feb  3 18:37:05 2026 GMT
        Subject: CN=2C82C50B76C927760452F34DA2FC5368C6BF7829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:41:09:71:86:ce:05:0f:60:60:cb:f0:09:
                    31:83:07:3b:e5:11:89:ea:78:f2:e5:49:f3:2c:03:
                    27:2b:fd:c2:1f:f0:de:f9:a1:05:7a:e1:aa:92:9a:
                    97:fd:d2:3b:e6:e3:08:80:b3:df:32:32:93:24:6a:
                    e0:19:7b:9b:19:ae:d5:a0:a4:cc:02:ce:26:26:a2:
                    21:76:b0:f3:8f:5a:50:a4:0e:2f:c1:7f:42:4c:b5:
                    10:01:31:fc:ca:ea:cb:e5:d4:70:6d:61:93:fa:b7:
                    5c:98:db:ef:e1:98:57:d0:cd:31:57:71:d2:82:95:
                    6a:c3:5a:21:66:fb:c4:07:d9:8a:d7:39:8f:64:3d:
                    c5:f3:f2:77:25:61:5a:06:0a:79:8f:07:91:0a:13:
                    c1:5f:65:26:04:2b:8c:05:9b:64:eb:ec:78:a2:2b:
                    ca:95:6d:8d:2e:ef:06:a2:f8:5f:2a:f6:40:37:37:
                    36:8e:51:2c:f6:3e:82:b5:8b:15:dd:57:3f:1b:20:
                    6d:f4:ef:6c:3f:e2:4e:57:4d:5f:c2:86:8f:30:2b:
                    04:e6:0b:e1:d5:80:0d:56:46:84:dc:3b:2d:81:f2:
                    fd:77:43:12:68:93:b1:89:79:e9:ec:20:c3:3a:29:
                    48:0a:b9:b6:48:9f:ae:52:75:76:d4:9d:d8:a7:92:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:82:C5:0B:76:C9:27:76:04:52:F3:4D:A2:FC:53:68:C6:BF:78:29
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3230302e33332e38322e302f32342d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:a8:9f:e1:5d:95:95:fa:89:04:10:6c:b0:42:09:a2:16:b3:
         3d:31:6a:ab:fb:03:33:cf:d4:41:17:6f:30:4f:08:2e:ae:b3:
         9a:ce:e4:dc:2b:ae:ca:32:d6:64:f6:10:8c:d2:97:cd:fb:71:
         8a:ff:7f:0f:ea:c0:d0:84:ef:97:3b:19:ab:f8:ee:68:03:d9:
         ba:2a:93:f5:77:cf:33:e6:a9:86:07:0a:78:8f:e9:6f:60:4e:
         89:59:2c:c1:79:30:23:51:9e:61:79:9e:4a:63:ab:06:dc:ed:
         54:5a:b1:04:f3:9b:b7:00:e3:e7:fc:dd:d0:1f:31:d6:f3:8d:
         60:26:28:0d:66:82:0b:25:2f:9f:bf:6a:c7:cd:c8:81:d8:33:
         c5:7b:ef:07:a7:cd:59:df:9c:21:19:d7:d2:a6:8a:23:dc:b9:
         68:0c:cb:03:fa:3b:81:ee:fd:ca:67:bf:7b:58:db:e9:bb:0f:
         b3:f4:ad:29:f4:d3:a9:b2:d8:ff:f9:0a:e5:4c:11:15:3c:72:
         06:9f:ec:82:98:7f:34:8a:52:5d:b4:b1:16:34:54:6f:a2:eb:
         c5:de:a0:bc:f3:65:97:3f:41:54:f4:b9:ce:75:08:f9:5c:94:
         25:a4:4d:56:5e:bf:6d:e9:92:ba:bf:5d:23:46:3e:93:5b:64:
         9d:c3:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:38 2025 by rpki-client