Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3230302e38392e38382e302f32312d3234203d3e203238303533.roa
File:                     3230302e38392e38382e302f32312d3234203d3e203238303533.roa (raw, json)
Hash identifier:          5SqVRtSLzeRsBqR8PjKZdQN4odC6S2SB5S20cr+VE1M=
Subject key identifier:   87:A4:84:82:94:1F:EE:12:D5:0C:49:60:68:E6:15:2C:A6:3A:B4:64
Certificate issuer:       /CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
Certificate serial:       3E464AC33F800B876C913EB3B87C5C0501DA05B5
Authority key identifier: 07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3230302e38392e38382e302f32312d3234203d3e203238303533.roa
Signing time:             Tue 04 Feb 2025 18:23:17 +0000
ROA not before:           Tue 04 Feb 2025 18:18:17 +0000
ROA not after:            Tue 03 Feb 2026 18:23:17 +0000
asID:                     28053
IP address blocks:        200.89.88.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:46:4a:c3:3f:80:0b:87:6c:91:3e:b3:b8:7c:5c:05:01:da:05:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0775F451BF69A7F4553954A7FE9AC42D41BFF9F2
        Validity
            Not Before: Feb  4 18:18:17 2025 GMT
            Not After : Feb  3 18:23:17 2026 GMT
        Subject: CN=87A48482941FEE12D50C496068E6152CA63AB464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7c:59:e1:1e:b3:c8:a2:ed:f6:68:e2:3d:a6:
                    62:a8:0e:83:0a:0f:0a:33:5d:4d:c9:2c:62:6e:c3:
                    37:68:7d:c1:19:e8:cb:37:cf:3a:f0:c9:3b:43:fd:
                    09:96:3d:c6:dc:42:36:6b:b4:4e:61:f1:87:f3:54:
                    6b:8f:70:cc:4c:b6:8b:5d:09:b0:86:37:6c:5a:3e:
                    a5:91:2e:d5:b6:31:e0:6d:a8:12:09:55:24:a7:96:
                    85:32:89:08:e3:98:bc:23:bb:31:5f:b5:c8:18:8c:
                    13:19:95:d3:53:60:1c:8a:91:15:c0:be:07:78:cc:
                    54:7e:73:c9:e3:d3:98:94:67:22:43:bf:9f:15:0c:
                    37:9b:ed:64:a7:21:71:18:c2:8b:f3:07:ac:0b:49:
                    18:07:6f:0b:22:f5:be:75:01:86:de:e8:bb:b3:90:
                    b3:8e:be:84:4f:17:49:80:33:ee:4d:ac:7f:18:aa:
                    cf:a1:2f:69:19:e4:47:b6:c6:be:05:38:21:7e:0a:
                    bf:ff:b4:0b:f9:96:22:83:de:2f:65:62:4c:e6:37:
                    7b:5b:ab:2a:46:5e:76:4b:d0:b7:40:d9:51:2f:1f:
                    c7:f6:1d:b0:50:33:8b:05:a0:dc:e2:bd:81:7d:33:
                    c4:f7:1d:8c:dc:cc:da:b1:41:7f:79:7b:bc:38:55:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A4:84:82:94:1F:EE:12:D5:0C:49:60:68:E6:15:2C:A6:3A:B4:64
            X509v3 Authority Key Identifier:
                keyid:07:75:F4:51:BF:69:A7:F4:55:39:54:A7:FE:9A:C4:2D:41:BF:F9:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0775F451BF69A7F4553954A7FE9AC42D41BFF9F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C76ACD238AB7208FCB8977276DA1BC02E543D274FB85D44A2348AC03AC2A770/0/3230302e38392e38382e302f32312d3234203d3e203238303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:37:0b:97:23:f6:55:44:6a:99:9b:b6:96:8b:38:02:0e:
         63:aa:df:8b:10:7b:de:97:84:f9:e0:c1:85:c4:45:bf:62:93:
         f5:e8:76:eb:01:63:1b:b5:1d:4c:38:45:a6:7c:42:9b:62:84:
         35:c1:6c:6d:27:8e:61:49:d7:1c:6d:ba:5b:9a:47:57:54:a8:
         c7:87:7c:d6:6f:c4:be:7f:4e:41:db:d8:b5:45:ed:78:59:b5:
         28:08:98:0c:3f:16:5e:07:f4:02:00:75:9f:7f:71:ac:0e:39:
         26:d7:98:03:62:03:2e:d8:6d:8d:ab:ba:b5:63:c1:5d:a7:94:
         d9:32:a6:01:d9:a1:b8:e9:f8:32:78:0f:b3:9c:e1:cd:f8:38:
         35:5c:b8:3b:8b:46:72:3f:31:df:05:c0:f0:a4:7b:a8:bb:2b:
         fe:ad:78:e6:73:52:b1:03:4a:fa:dd:c3:46:a6:cd:f7:14:31:
         11:ef:26:2e:2a:27:90:90:a5:b0:2e:93:63:bf:0b:80:f2:c7:
         68:f8:99:d8:fe:55:6c:01:2a:2d:a3:ca:bf:15:91:8f:a7:6f:
         db:1e:d0:35:61:dd:07:a5:df:4d:cf:7c:dc:9d:b4:33:82:f4:
         07:0c:01:f1:a7:95:e3:42:90:e1:e7:9c:e3:d1:93:6f:37:45:
         a5:0e:d6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:43 2025 by rpki-client