Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130382e302f32342d3234203d3e203532333130.roa
File:                     3230302e35342e3130382e302f32342d3234203d3e203532333130.roa (raw, json)
Hash identifier:          MWbmBRNyzowyHCO29bSaTihJav4VFyWOecbvYF+ZMNg=
Subject key identifier:   77:26:42:85:0E:02:6C:2C:D8:7F:18:C5:A2:31:CE:24:08:AD:B9:BE
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0B31FE0B6FE8A9FBAA4025FCADF20D607C0ABF64
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130382e302f32342d3234203d3e203532333130.roa
Signing time:             Tue 04 Feb 2025 18:32:05 +0000
ROA not before:           Tue 04 Feb 2025 18:27:05 +0000
ROA not after:            Tue 03 Feb 2026 18:32:05 +0000
asID:                     52310
IP address blocks:        200.54.108.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:31:fe:0b:6f:e8:a9:fb:aa:40:25:fc:ad:f2:0d:60:7c:0a:bf:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:05 2025 GMT
            Not After : Feb  3 18:32:05 2026 GMT
        Subject: CN=772642850E026C2CD87F18C5A231CE2408ADB9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:59:da:ef:ab:f7:ed:30:54:3a:d5:f7:9b:
                    62:3d:b2:d3:85:39:80:eb:09:d3:19:72:87:93:06:
                    54:08:35:e0:fc:07:d3:02:c6:c2:a1:3a:a6:61:78:
                    eb:68:76:df:2c:38:f9:cf:13:a9:7e:c9:30:c1:9d:
                    e9:ad:79:87:70:4a:99:6a:eb:66:92:34:de:e1:29:
                    11:3d:cf:0d:c0:a1:0b:71:c5:6c:67:b6:42:7d:18:
                    9c:ff:22:18:64:1d:81:55:78:26:2f:03:be:51:92:
                    b7:78:0a:e1:14:fb:b2:5a:2d:5b:63:f5:8d:73:d6:
                    ed:d6:ce:8a:0a:b9:ac:d3:a5:f3:2e:1c:3a:44:05:
                    fb:87:3d:c5:b6:d9:e0:92:88:1b:ef:1d:2d:b4:be:
                    e2:fc:08:0c:df:cc:80:fd:49:8e:33:a8:c8:da:3b:
                    1a:4f:13:ed:cf:1d:c5:31:db:47:ab:61:29:03:2c:
                    30:0e:e3:09:c3:43:99:f7:67:23:49:49:23:62:b7:
                    27:e2:47:d1:d4:8e:d7:eb:32:45:4c:02:a8:d3:05:
                    d1:29:70:92:88:f5:b3:43:0c:a1:5e:ef:41:7b:ee:
                    40:70:ea:17:6d:42:c5:c9:77:d5:24:cb:0f:8a:ed:
                    95:6a:77:1b:58:30:a7:5d:d0:d2:51:9a:27:18:a7:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:26:42:85:0E:02:6C:2C:D8:7F:18:C5:A2:31:CE:24:08:AD:B9:BE
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3130382e302f32342d3234203d3e203532333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a2:3c:ac:a8:48:a2:31:65:bb:68:bf:69:62:ff:30:06:37:
         b8:64:b0:cc:b3:73:55:0f:4f:b8:d0:75:e2:b1:b8:c7:ef:2c:
         88:a5:be:d9:6e:1b:85:5b:81:7c:5c:88:2d:45:5d:e5:93:38:
         8a:d6:df:93:21:19:70:e0:da:41:1f:45:2b:8f:d4:48:d6:91:
         8f:2f:73:34:9b:c1:cb:e7:56:7d:70:13:c4:d0:87:4a:47:c7:
         60:2b:3d:75:b2:22:0a:91:a7:0f:39:99:32:0f:75:ba:82:9b:
         3d:1c:63:bc:c5:b6:8c:c8:26:81:f6:a9:60:e9:62:06:f3:60:
         a7:97:0d:84:dd:17:58:67:63:38:d3:44:b1:2f:d4:0b:ce:9d:
         9f:ff:ee:53:2d:8d:e1:5c:d7:c5:6d:8d:eb:7d:cf:28:8c:7d:
         b8:38:2b:af:f9:ff:16:21:56:6e:ea:7d:2c:24:8b:07:9c:3d:
         ba:f5:9f:83:7b:2a:91:39:08:ce:ec:bc:a5:d1:9b:6c:c5:58:
         db:99:e5:53:e6:ea:e5:2a:11:1b:19:13:42:78:6b:5e:a9:6e:
         bf:a0:87:45:45:08:25:d8:20:3a:7a:f6:bd:07:35:af:bb:6e:
         fe:40:ef:02:3e:25:a2:f4:b9:30:56:5c:12:e0:6e:6e:70:0c:
         a4:9b:36:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:18:07 2025 by rpki-client