Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131342e302f32342d3234203d3e203131333430.roa
File:                     3230302e35342e3131342e302f32342d3234203d3e203131333430.roa (raw, json)
Hash identifier:          pmMcBD4+b5obGxWaI6RTh/xRkwenjR3rn31LXFOlqcU=
Subject key identifier:   47:E5:83:7A:6E:79:D3:F0:B0:C4:D2:85:75:7C:AF:BF:E1:CB:69:A3
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       60A43FB69B75C7E54727F0142CC4F55C27435FDC
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131342e302f32342d3234203d3e203131333430.roa
Signing time:             Tue 04 Feb 2025 18:31:58 +0000
ROA not before:           Tue 04 Feb 2025 18:26:58 +0000
ROA not after:            Tue 03 Feb 2026 18:31:58 +0000
asID:                     11340
IP address blocks:        200.54.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:3f:b6:9b:75:c7:e5:47:27:f0:14:2c:c4:f5:5c:27:43:5f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:58 2025 GMT
            Not After : Feb  3 18:31:58 2026 GMT
        Subject: CN=47E5837A6E79D3F0B0C4D285757CAFBFE1CB69A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:72:95:cc:de:8c:6a:33:21:e1:46:e2:d8:
                    d0:b9:6e:3a:e1:b3:a6:2c:18:20:54:54:9f:cd:68:
                    c7:01:50:2f:43:95:ed:67:1e:07:0d:60:71:7b:9c:
                    37:d8:36:75:fe:73:c3:10:85:aa:de:09:25:41:1c:
                    b9:dd:d1:33:dd:68:d5:e3:0d:d5:6a:b7:7a:e5:44:
                    3c:da:4f:50:f2:70:25:9a:a1:a5:1d:85:72:95:90:
                    f9:f1:bf:f6:12:9c:7b:3f:50:25:0d:3a:49:1a:8c:
                    79:71:81:5f:82:de:ed:f7:db:a0:7e:f1:4a:a3:ef:
                    3f:5b:63:cc:c9:b9:c4:aa:6f:68:bf:c0:c1:61:d2:
                    20:71:fa:f8:e3:31:9f:e4:ed:7c:68:a7:d8:b0:c2:
                    26:67:5c:f4:f0:0b:f6:24:00:8b:be:72:67:e8:c6:
                    26:b8:02:2f:a8:27:fb:5a:6d:54:78:26:ed:b4:66:
                    68:43:4a:6c:d8:58:6e:19:1d:bb:7a:ca:e2:51:08:
                    6d:24:1a:46:fb:81:7c:d3:00:92:6a:d9:ab:61:19:
                    58:a3:d1:56:bb:e9:02:ec:50:7d:9b:9c:61:4b:7f:
                    76:63:f7:06:f9:c4:b0:e1:c4:49:35:cc:95:a0:c3:
                    87:cc:4a:69:01:95:6a:b9:0a:b7:0b:5b:61:c5:11:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:83:7A:6E:79:D3:F0:B0:C4:D2:85:75:7C:AF:BF:E1:CB:69:A3
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3131342e302f32342d3234203d3e203131333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:20:6c:41:f2:03:e5:20:9e:95:28:88:3f:e7:6e:a5:75:
         d2:0c:d4:70:01:e0:62:48:66:a5:f9:9b:bd:4c:bd:fa:13:65:
         cb:d7:1d:26:87:31:b6:65:b5:51:44:d4:4e:b1:6b:9a:17:f1:
         af:d9:65:84:84:17:f1:81:76:75:bb:82:49:b0:25:bf:b0:9e:
         ea:0c:c8:d2:28:ab:5b:8f:ba:db:9b:66:e8:37:8f:e8:53:70:
         7d:2c:b3:83:5d:f7:2e:c3:81:25:61:aa:ee:65:d7:3f:29:6b:
         7c:ab:b5:df:15:a1:a2:7d:a1:06:e3:62:e4:a9:fe:1e:90:d0:
         de:bf:b0:a5:bc:97:a8:0c:c8:d6:64:27:8b:b3:08:69:98:7d:
         48:b7:ed:b0:51:bc:72:10:f9:23:2c:0c:1a:9e:c3:e6:7d:23:
         b2:af:96:22:92:b5:b2:17:ab:01:e5:20:d9:e3:9d:b2:0a:08:
         a8:22:22:3e:5f:75:92:c4:8b:24:03:1d:03:d2:57:2d:16:4e:
         73:f6:d7:3b:ab:68:c2:ad:07:c7:66:21:0e:9c:4c:1e:52:0e:
         17:8c:62:11:86:46:8e:cf:b6:13:f1:bc:26:a1:d9:8f:0a:2c:
         80:b0:52:66:ff:78:b6:bf:30:e3:c2:59:64:26:6d:c6:23:81:
         ed:fa:d7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:43 2025 by rpki-client