Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138342e302f32322d3234203d3e203135333131.roa
File:                     3230302e35342e3138342e302f32322d3234203d3e203135333131.roa (raw, json)
Hash identifier:          Q2wuEOOT9M/tmtR0OqEkK+9ZdVj1fk6V7pepN/upQmI=
Subject key identifier:   EA:C7:09:65:9A:A3:68:3A:E4:78:3F:D8:31:A2:EC:0F:24:BB:A6:6B
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       0FF6754E0511A58B8D8E44AA158FA8EA6A06B7A3
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138342e302f32322d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:03 +0000
ROA not before:           Tue 04 Feb 2025 18:27:03 +0000
ROA not after:            Tue 03 Feb 2026 18:32:03 +0000
asID:                     15311
IP address blocks:        200.54.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f6:75:4e:05:11:a5:8b:8d:8e:44:aa:15:8f:a8:ea:6a:06:b7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:03 2025 GMT
            Not After : Feb  3 18:32:03 2026 GMT
        Subject: CN=EAC709659AA3683AE4783FD831A2EC0F24BBA66B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:be:51:f3:ea:0d:f6:93:11:35:9e:04:62:
                    00:8e:e5:02:a3:cf:8e:a0:50:7e:f8:33:3f:2b:c2:
                    33:6b:91:a1:4a:d6:46:08:8b:0b:64:fe:07:bc:8c:
                    5d:3e:bc:38:01:9b:0e:b1:35:e6:d4:df:4c:a7:e0:
                    c9:ae:76:b4:51:fa:bb:7d:84:3c:cb:4f:41:84:b1:
                    6a:bd:5f:b4:f0:e6:df:db:4b:8c:b4:8e:fa:c2:ce:
                    f3:79:6e:b5:02:48:8c:72:29:e5:2d:d3:d2:eb:25:
                    5c:ad:49:0e:11:66:ae:36:12:fa:dc:23:71:ab:00:
                    a6:86:94:1c:e6:3f:90:10:13:02:36:b7:5d:fa:cb:
                    ba:a7:80:8e:9e:4b:79:a2:4c:c9:53:f0:e9:17:b1:
                    a7:66:1e:f1:c8:c6:c9:03:52:2c:f0:54:68:73:01:
                    d7:fc:d9:f6:ec:dc:c2:94:0d:99:72:d9:e4:60:59:
                    e5:bf:e7:48:54:f0:e9:24:9d:44:c4:60:b6:e1:ba:
                    5d:a2:38:e6:55:af:15:51:41:58:40:0a:67:56:a1:
                    4e:19:7a:9f:ce:6c:da:df:bb:d0:94:48:d0:5a:9b:
                    79:a8:b5:5d:62:ae:b5:94:b9:ff:0c:97:c2:88:2b:
                    b2:9a:33:6d:0d:f3:5b:1f:f5:d2:69:01:9e:01:f0:
                    78:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C7:09:65:9A:A3:68:3A:E4:78:3F:D8:31:A2:EC:0F:24:BB:A6:6B
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3138342e302f32322d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a2:e4:59:5d:84:c6:44:7f:40:9a:67:cd:ec:f0:26:5e:6f:
         33:32:8b:87:b0:9a:42:6b:e3:76:d5:87:54:3a:36:4a:e2:a4:
         f8:66:17:bc:0b:d5:12:06:f7:2c:e5:7f:1e:fc:54:85:d1:6b:
         5e:d1:2e:38:a6:f2:1f:1d:65:98:9f:69:77:95:ce:a0:e0:c6:
         f6:16:1c:3e:e4:f0:e8:f9:77:c8:7d:df:58:48:9e:9b:2f:57:
         aa:4d:79:0e:81:d2:ab:79:84:c2:44:73:50:ee:92:02:07:f2:
         46:ad:1a:f6:33:58:fd:08:9d:e3:c9:d3:08:77:7d:2c:31:7c:
         2d:f7:07:d7:02:c1:bd:e0:78:fe:9f:cc:3f:42:4b:e6:5a:f4:
         87:a5:f0:b3:e3:17:b4:f9:61:ee:7a:f1:e7:34:01:ef:35:66:
         92:d3:23:2a:50:7b:a9:e1:5e:77:8a:d0:54:97:27:00:6c:14:
         94:42:33:d8:83:7a:a4:a2:54:b5:fd:de:71:f9:c3:ad:80:a9:
         d7:19:a9:7c:91:0e:b6:cf:22:4e:16:15:65:3b:c7:49:74:27:
         da:a4:7d:09:1d:0e:a1:c6:ed:a5:92:f7:3f:5d:aa:10:aa:fb:
         b5:45:61:d8:fe:cd:4a:fb:73:83:4a:b7:da:b5:5c:9d:74:2e:
         73:21:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:18 2025 by rpki-client