Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34362e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e34362e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          jtrtBeZ413oqvW+n4kXPw91K8afgAUWBYFskmZeP6Zs=
Subject key identifier:   33:10:BC:0E:F9:CA:93:50:E6:74:E3:EA:76:DF:6B:77:D1:AC:60:5F
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       46AE2396DE29F9F9028D68CEA73F1A171BF46AB5
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34362e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:38 +0000
ROA not before:           Tue 04 Feb 2025 18:01:38 +0000
ROA not after:            Tue 03 Feb 2026 18:06:38 +0000
asID:                     26617
IP address blocks:        200.12.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ae:23:96:de:29:f9:f9:02:8d:68:ce:a7:3f:1a:17:1b:f4:6a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:38 2025 GMT
            Not After : Feb  3 18:06:38 2026 GMT
        Subject: CN=3310BC0EF9CA9350E674E3EA76DF6B77D1AC605F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:1b:6c:5a:d0:2f:a8:e3:4c:5a:10:f0:7b:
                    c6:cb:fc:37:18:5c:b0:45:81:07:81:b0:72:f2:cd:
                    71:11:35:32:dd:24:d0:db:5b:51:57:8d:93:3c:7c:
                    18:22:31:90:50:32:36:e1:0c:40:e4:4a:e3:44:8b:
                    2d:bb:e4:f0:89:9f:c6:35:8d:c9:ff:7e:d3:96:b6:
                    16:27:1a:22:e5:e8:6c:cd:ef:27:eb:1b:67:5a:47:
                    51:22:3f:4b:de:ca:84:de:2e:12:46:51:0f:ae:bf:
                    67:e5:e9:a9:2e:e9:90:ae:02:46:7b:ea:f0:b7:bc:
                    29:58:71:ba:aa:05:02:be:ac:ea:09:54:13:ff:1f:
                    2a:ea:3a:f2:d1:15:fe:a1:b1:36:88:be:80:aa:cf:
                    16:62:e3:f0:db:95:e7:2d:6b:93:0b:df:ad:77:aa:
                    c9:f6:f9:8d:86:be:83:cf:bb:a2:5d:c4:a2:10:3b:
                    df:0a:0e:44:0f:1b:61:32:b6:79:9d:3b:e6:88:95:
                    5e:86:55:f5:aa:69:4a:07:83:8e:61:bb:58:2c:53:
                    d6:c1:a2:0a:e5:6a:a9:86:02:f8:b5:a5:74:85:c8:
                    2e:39:3b:0d:9f:02:9d:e0:95:08:5c:31:b9:ac:bb:
                    47:b9:8d:d7:90:16:ae:de:7d:ca:c6:d9:52:08:76:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:BC:0E:F9:CA:93:50:E6:74:E3:EA:76:DF:6B:77:D1:AC:60:5F
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34362e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:11:32:81:c1:57:a7:6a:3a:9f:6c:99:a8:e0:23:df:1c:04:
         4e:64:61:47:67:f7:9b:fd:3a:a9:e9:cc:fd:45:05:14:9b:14:
         06:3f:f5:08:60:f8:dd:8b:1d:17:65:cd:41:1e:02:3e:11:d1:
         66:f0:88:fb:0f:e0:f4:0f:9e:1b:e4:95:2b:88:77:1a:b2:58:
         ea:f1:66:92:cd:32:da:cd:9a:cb:0c:d6:50:62:33:f8:0b:fd:
         ef:60:f8:1b:1d:4e:e3:f0:c4:0d:da:d2:40:9d:9b:69:e0:e7:
         c5:05:c9:fb:89:67:74:9b:5e:69:a4:f0:c8:b3:76:cf:78:17:
         45:2e:ff:8b:34:b7:0f:c5:c7:9f:73:ae:46:47:66:db:21:f7:
         78:19:1c:0a:26:6f:23:9b:0c:db:83:97:e2:ea:26:2c:5b:21:
         dd:69:ef:d5:66:90:28:33:52:74:17:2e:06:d9:f6:d9:02:e5:
         20:75:06:05:ba:b9:6c:f5:fe:be:4f:70:9d:12:4a:18:6b:a8:
         c9:43:74:e6:5c:44:58:b8:b4:ac:0e:43:a1:30:bd:10:14:28:
         db:eb:df:a8:ca:8c:a3:7a:75:06:ab:20:e4:f3:39:75:59:5b:
         e4:04:b1:97:ce:67:34:92:f1:21:c4:2c:cb:86:0a:c6:b3:a9:
         22:4e:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:09 2025 by rpki-client