Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138312e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3138312e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          N+lHh8NH5Lkwy4iBICBsAOh+B3akfANncm1sCRndoEw=
Subject key identifier:   8D:DF:1E:79:E4:80:17:C6:BC:92:ED:FD:44:E2:AD:73:38:A4:79:A9
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       2871FF401F49E19E94AD323EE0719C487C2AD993
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138312e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:31:56 +0000
ROA not before:           Tue 04 Feb 2025 18:26:56 +0000
ROA not after:            Tue 03 Feb 2026 18:31:56 +0000
asID:                     15311
IP address blocks:        200.54.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:71:ff:40:1f:49:e1:9e:94:ad:32:3e:e0:71:9c:48:7c:2a:d9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:26:56 2025 GMT
            Not After : Feb  3 18:31:56 2026 GMT
        Subject: CN=8DDF1E79E48017C6BC92EDFD44E2AD7338A479A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:31:5f:41:5f:8d:08:1b:8d:e8:54:67:b8:
                    37:6b:e3:9f:a3:8d:e4:52:d2:f1:e6:cf:d3:6b:3c:
                    71:d8:0c:49:19:bd:da:7b:9f:d5:aa:3d:f4:ee:1c:
                    75:c7:0c:88:23:ce:a1:b1:a0:c7:91:8b:b6:52:09:
                    74:0c:eb:63:27:23:2c:32:09:7d:06:d5:7b:73:30:
                    90:c7:39:1c:50:9a:9d:8c:88:4f:f1:65:e5:e7:58:
                    60:98:d0:f8:c4:9c:40:4e:42:39:39:5c:90:09:15:
                    bd:11:55:47:22:4b:9e:63:ba:fb:d9:b1:e9:93:91:
                    16:e8:b2:8d:ea:a7:04:21:24:ed:86:8d:c2:40:f6:
                    ce:b2:16:d8:4a:4a:65:51:e6:43:72:22:8f:98:36:
                    63:d5:04:f9:14:71:bc:83:19:fd:4f:c8:e2:09:09:
                    ca:2b:c8:18:69:40:16:98:4a:c4:40:47:70:fd:18:
                    17:b7:b3:67:9d:73:a2:4f:75:d8:ec:ed:69:cf:3a:
                    e9:e7:f5:16:44:a3:04:dd:81:d8:ec:1c:b7:c6:6e:
                    ab:0e:86:79:57:3f:34:8d:bc:36:26:d2:e8:23:55:
                    1e:ac:c0:a8:ab:46:f6:7e:a9:30:b1:3c:e1:a7:e2:
                    25:ce:5b:d9:ad:26:8b:e9:56:bc:c8:0d:77:5e:42:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DF:1E:79:E4:80:17:C6:BC:92:ED:FD:44:E2:AD:73:38:A4:79:A9
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138312e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:1e:d5:69:bd:ec:d9:54:fd:3f:46:67:1e:e5:ff:86:94:e3:
         53:6c:90:da:22:4f:e7:8d:2c:f5:29:bc:f0:b7:e8:c3:55:97:
         ec:e4:4b:3a:8a:fa:6c:c8:18:b7:d0:74:ff:db:e0:63:24:0f:
         76:60:eb:41:29:08:5c:8e:0a:15:60:b0:15:5b:7d:69:13:39:
         81:5d:42:6a:76:38:28:5f:12:ce:8f:2e:22:6b:21:3e:bf:02:
         17:a0:c6:0e:d1:93:ba:af:99:a1:28:2e:12:63:ee:b8:b7:0d:
         46:ff:dc:00:ed:da:58:91:6f:f2:ec:8f:11:4f:03:e0:65:2b:
         38:0f:d0:57:c4:fd:ad:fc:6d:0e:db:b2:ed:2c:51:46:c6:af:
         14:68:ce:b2:40:82:ae:ca:3c:45:15:c8:8e:d8:01:65:23:60:
         22:0f:ad:25:7b:9b:66:2e:50:55:74:8a:28:4e:53:7d:49:95:
         15:54:d4:e9:eb:69:57:82:37:24:10:25:e5:6d:36:cc:b2:c0:
         7d:2f:11:27:da:ae:6a:96:29:6d:5f:04:f1:35:b2:88:d0:64:
         71:ca:57:e4:ae:1b:6c:c5:39:e5:6d:9b:d1:9b:f4:44:9d:6d:
         78:85:01:ac:2d:17:e3:45:a2:56:ea:be:40:da:5b:29:21:52:
         1d:63:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:30 2025 by rpki-client