Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          RHnO/qCt3JiibkIY6sipkTe/rxkmFDMymW+7+Mpu3sk=
Subject key identifier:   E2:CB:BD:AA:67:BE:87:14:2B:E6:2E:CB:61:B4:23:1C:57:86:D1:69
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       71A81B3D948DC20955E395F7F5464EA95DAB98B7
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:58 +0000
ROA not before:           Tue 04 Feb 2025 20:02:58 +0000
ROA not after:            Tue 03 Feb 2026 20:07:58 +0000
asID:                     13381
IP address blocks:        200.112.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a8:1b:3d:94:8d:c2:09:55:e3:95:f7:f5:46:4e:a9:5d:ab:98:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:58 2025 GMT
            Not After : Feb  3 20:07:58 2026 GMT
        Subject: CN=E2CBBDAA67BE87142BE62ECB61B4231C5786D169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:6f:31:03:70:65:12:97:1e:f4:32:74:d8:
                    97:65:e6:f7:d6:a0:0b:e8:f9:7c:e9:11:8c:6c:47:
                    55:c4:73:f0:88:e6:d8:ec:cc:e8:df:19:cd:44:0f:
                    5f:b6:97:86:b3:5b:3f:44:e8:6b:dd:b7:4b:5f:b5:
                    22:28:ad:95:77:89:e9:e4:2e:3f:49:d4:01:4d:d6:
                    b2:1a:b4:6c:ef:cc:2d:5a:26:66:8c:ff:ef:8d:7f:
                    32:20:f5:3d:f1:29:f5:50:23:c8:83:e9:3f:34:36:
                    13:fc:6e:3e:af:83:99:ae:9f:60:5a:3e:37:f7:98:
                    e9:62:ac:16:fb:65:b5:de:58:ca:a4:fb:aa:34:b7:
                    e7:11:db:f0:4b:57:50:e9:34:4f:d4:7d:f7:ea:db:
                    e3:f8:95:9f:51:b7:e3:cc:17:cc:29:18:cd:53:b9:
                    18:38:87:80:ed:dd:15:78:ce:09:c8:ee:62:07:df:
                    83:c9:67:32:f0:2c:dd:9e:9c:25:12:b8:ea:46:0d:
                    c9:9e:11:65:66:9e:a7:0a:9e:bc:41:90:b8:4a:be:
                    4a:82:e2:34:19:c7:8f:84:00:42:6f:55:bb:2f:9f:
                    68:6b:9c:68:9f:9a:92:b6:0f:fb:7a:28:e6:02:d1:
                    f3:79:60:c3:3c:cc:93:9f:f2:f5:04:52:1f:fc:5f:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CB:BD:AA:67:BE:87:14:2B:E6:2E:CB:61:B4:23:1C:57:86:D1:69
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234332e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:56:39:79:6b:ce:74:6b:ca:a0:28:fc:af:d0:68:d5:81:
         e6:58:ce:13:39:f6:43:9d:5c:ff:18:63:3b:dc:06:7f:cf:f1:
         49:d7:61:01:19:ca:31:b7:a5:dd:9b:98:0b:21:48:dd:5a:ee:
         7f:17:ec:77:34:98:ca:fd:5e:70:55:61:e6:2f:16:da:31:a8:
         db:ea:a9:63:00:32:0b:d4:a3:ab:90:40:66:4e:50:8b:43:20:
         ea:a6:06:4e:3b:b2:2c:ae:a3:bc:68:93:15:11:78:6e:f8:53:
         38:ad:27:cc:5c:00:1c:88:06:70:e4:27:cc:fa:a8:d2:8d:7c:
         c5:c4:da:a5:0d:e9:d4:6b:b1:84:a0:6d:74:26:3d:52:11:00:
         ac:68:88:0f:12:7c:6c:bd:0c:ac:17:75:a5:1d:a7:53:ea:bc:
         a5:97:aa:af:f1:84:37:f5:16:6b:24:ee:9b:3a:de:22:7c:4b:
         a8:c3:26:d8:6e:be:f9:52:be:16:72:1e:f6:02:8d:de:63:30:
         dd:8e:8b:fa:bd:64:c6:42:f0:23:30:44:41:e1:ab:ed:3c:53:
         47:15:46:3f:94:6a:22:84:17:a3:fc:95:4e:cc:36:fa:cf:85:
         84:00:85:15:1e:f0:62:c7:be:39:8d:12:19:04:a8:f7:8b:bf:
         02:14:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:10 2025 by rpki-client