Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e35362e302f32342d3234203d3e203236363137.roa
File:                     3230302e31322e35362e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          uk69FQjuXCan6vZmKFTJYFfInKded5ezV0toqj7X60Q=
Subject key identifier:   48:BB:13:AE:F8:81:63:A8:00:3C:35:89:A5:8E:54:12:91:AF:0E:37
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       2B0F84886706B63E3E987328FBB2BBD124434BB1
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e35362e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:39 +0000
ROA not before:           Tue 04 Feb 2025 18:01:39 +0000
ROA not after:            Tue 03 Feb 2026 18:06:39 +0000
asID:                     26617
IP address blocks:        200.12.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0f:84:88:67:06:b6:3e:3e:98:73:28:fb:b2:bb:d1:24:43:4b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:39 2025 GMT
            Not After : Feb  3 18:06:39 2026 GMT
        Subject: CN=48BB13AEF88163A8003C3589A58E541291AF0E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:40:61:aa:65:b0:c4:33:ea:67:9d:31:c2:
                    23:fe:39:f2:22:2e:f7:44:bc:da:b5:e5:c6:48:ad:
                    a5:91:94:9c:0b:23:6c:c4:cd:d7:27:9b:9c:2f:1c:
                    8a:ab:d7:0c:a5:25:e3:a7:dd:a4:26:0f:16:38:f5:
                    67:11:00:a9:01:2b:58:30:d4:c4:de:d1:16:0e:be:
                    dc:01:4d:01:d4:cf:c8:8a:01:93:0c:2a:55:c9:03:
                    d7:c4:e3:07:08:27:22:93:36:7f:93:19:8c:f0:3a:
                    80:45:f7:7e:ee:39:c0:46:ce:40:1f:a0:32:be:a8:
                    54:80:9d:86:d2:ec:e7:8d:0c:d4:ff:3b:1c:80:66:
                    d6:3b:7b:56:a3:f4:89:7b:7a:51:33:d2:9b:ab:86:
                    dd:5b:22:da:20:a6:a9:19:e9:8d:fb:41:16:bf:73:
                    3a:78:aa:81:91:03:a2:c3:9e:c1:01:ed:27:05:d2:
                    23:a5:3e:fc:b3:f6:10:84:4e:74:18:2a:cf:39:d6:
                    3e:c3:6d:ea:fc:25:d0:93:be:5a:ef:17:a4:24:c7:
                    c5:98:4d:2f:27:ac:be:24:81:dd:06:a3:c6:d6:ae:
                    52:df:e3:56:1a:26:61:54:12:99:05:68:a1:61:b8:
                    ee:36:e6:66:a2:2b:17:53:79:d5:e6:b8:74:bd:f0:
                    19:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BB:13:AE:F8:81:63:A8:00:3C:35:89:A5:8E:54:12:91:AF:0E:37
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e35362e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:5d:25:d0:e8:48:57:2f:30:f8:af:75:8d:e5:ca:c0:2d:ce:
         b6:55:29:83:f2:d3:83:0a:7f:94:76:62:5e:78:20:3f:41:8b:
         30:9a:51:e7:61:b8:66:43:04:db:c0:4f:e4:b6:cd:48:da:10:
         15:60:46:12:a3:7a:70:3f:74:26:88:8f:a2:e7:9a:5b:0f:34:
         cf:0f:c6:e8:8d:c9:88:41:d4:67:4c:3c:7e:09:93:21:c2:ab:
         3e:42:25:62:cd:f8:6a:01:25:af:ba:34:12:24:2c:9a:68:47:
         b0:67:91:23:39:47:31:ef:54:ef:00:cc:69:36:0a:a6:1c:82:
         5c:b7:51:29:90:99:69:f9:19:01:b3:da:be:f7:ae:10:f7:a7:
         26:87:ae:23:2c:55:71:e3:4a:36:8c:6e:51:b0:ff:80:bc:5f:
         15:56:52:e9:88:9f:53:f4:11:8c:94:35:eb:10:a7:85:74:20:
         3d:26:86:0c:39:90:4f:ca:a9:eb:b5:aa:7a:23:2c:29:76:70:
         73:14:37:c3:e3:e3:87:20:06:77:e2:bd:fd:56:06:cf:01:82:
         cf:69:a1:66:01:e2:31:dc:f4:3a:3a:8a:b8:82:89:ed:52:2a:
         c4:d8:05:e3:4a:ab:9d:1f:cb:64:0f:4e:f7:0b:41:66:6c:aa:
         71:7b:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:13 2025 by rpki-client