Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36322e302f32332d3234203d3e203233323433.roa
File:                     3230302e31322e36322e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          MIACZa+30hnYB2b+jTvXnOl4d7kqGxywEd2vgCnZPbs=
Subject key identifier:   2B:4B:F2:BD:57:36:8A:D9:5F:E9:37:90:DE:8E:7E:D6:69:84:80:6D
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       3F48658F8B08C1602728CCDC7B1B28AEED94E626
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36322e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:06:36 +0000
ROA not before:           Tue 04 Feb 2025 18:01:36 +0000
ROA not after:            Tue 03 Feb 2026 18:06:36 +0000
asID:                     23243
IP address blocks:        200.12.62.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:48:65:8f:8b:08:c1:60:27:28:cc:dc:7b:1b:28:ae:ed:94:e6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:36 2025 GMT
            Not After : Feb  3 18:06:36 2026 GMT
        Subject: CN=2B4BF2BD57368AD95FE93790DE8E7ED66984806D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:2e:3e:9f:cb:28:69:ab:c5:6b:18:c3:10:
                    66:fb:5c:7b:e3:e7:1f:6a:df:f1:c7:72:68:27:95:
                    1a:20:c8:53:3b:3f:50:98:c0:ab:22:08:26:20:df:
                    c1:bc:f1:5b:28:24:ca:e3:ac:14:42:64:eb:22:ad:
                    96:a7:51:85:c5:7a:d3:dc:60:4b:81:9f:92:71:8d:
                    d0:98:09:84:73:51:c1:b4:ea:4b:cb:3d:0c:ff:8d:
                    bd:b3:90:fb:53:48:6e:4a:2d:59:a7:e7:16:0a:e9:
                    0f:2b:75:ad:81:35:71:fa:af:86:50:80:b5:98:f2:
                    e1:f8:50:87:3f:62:b6:7d:c5:bc:9c:ed:32:b0:bb:
                    83:ab:b4:d6:42:13:a3:60:42:7c:11:34:b2:c7:43:
                    d6:61:66:7c:fa:fe:50:bf:a8:fe:be:bc:b4:29:bb:
                    44:45:ed:4f:47:a8:f6:56:49:f7:ac:fb:d2:21:e1:
                    e0:37:4a:be:21:91:71:68:72:3c:44:80:2d:52:8a:
                    27:72:39:93:f2:e9:6e:80:dd:07:93:83:99:29:cb:
                    6f:01:d6:38:5a:78:4e:0a:56:e7:cf:70:ea:e6:32:
                    c4:ae:48:82:7b:a0:37:b0:1e:45:ed:1d:83:9e:ed:
                    35:28:af:82:ec:fa:61:2b:bc:92:ee:a2:15:a8:6c:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4B:F2:BD:57:36:8A:D9:5F:E9:37:90:DE:8E:7E:D6:69:84:80:6D
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e36322e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:f7:97:15:4c:52:7b:e1:7e:c1:c3:67:98:81:69:73:5d:70:
         06:d0:26:3d:fc:72:1e:9b:85:2c:cb:5d:2a:25:30:06:f7:cb:
         df:08:77:2a:f6:2e:66:12:d9:1b:08:3a:4e:09:b7:7d:5a:5b:
         8c:34:85:22:df:8d:f3:7b:84:2a:98:4d:86:c3:be:98:65:97:
         ef:16:25:93:97:f6:77:97:b9:35:9e:9c:2a:44:55:a9:d3:07:
         56:e8:d1:db:48:bf:40:b7:db:ee:d7:96:fa:f4:24:cd:50:dd:
         bf:8e:2b:a6:bc:66:43:c5:22:5e:ca:2d:43:9f:c8:11:03:ab:
         3c:f2:be:f5:fc:98:54:ce:21:5a:e4:5c:f3:70:79:45:56:db:
         38:43:ea:04:10:d4:14:fc:2b:53:56:2c:86:cb:d6:c5:f6:29:
         1d:73:4d:7a:b3:46:f8:0c:0a:17:7d:e8:7b:9b:c5:6f:06:05:
         e8:55:ec:2c:02:5a:66:75:77:9f:cb:7c:ea:8e:be:46:92:56:
         31:b0:85:3e:31:9a:c5:c2:c1:81:19:3b:33:d3:06:ae:87:ef:
         d8:68:13:6d:f2:a7:38:8d:5f:b1:ca:fb:b5:9a:01:5b:aa:23:
         79:bf:55:fe:e8:5a:68:9e:30:4e:ff:46:3d:b1:10:ca:ed:5f:
         7a:c4:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:14 2025 by rpki-client