Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          BPSrEg0BHMCGUuXaTY7FIlUk7RTAooEutZDW28OXVb4=
Subject key identifier:   6D:F0:B4:3A:FD:B5:D3:BD:A9:93:F2:6B:EE:F7:1E:4F:6E:1F:F3:41
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       38E59BFB775D51A2E17D7737B27B41BC99E0C921
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:51 +0000
ROA not before:           Tue 04 Feb 2025 20:02:51 +0000
ROA not after:            Tue 03 Feb 2026 20:07:51 +0000
asID:                     13381
IP address blocks:        200.112.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e5:9b:fb:77:5d:51:a2:e1:7d:77:37:b2:7b:41:bc:99:e0:c9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:51 2025 GMT
            Not After : Feb  3 20:07:51 2026 GMT
        Subject: CN=6DF0B43AFDB5D3BDA993F26BEEF71E4F6E1FF341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:97:56:88:44:79:4b:3f:66:7f:af:c4:92:
                    42:ec:45:4d:84:e9:f3:2e:0b:ac:47:5a:09:2e:11:
                    08:41:64:28:04:ec:78:89:fa:05:45:94:dc:d7:51:
                    b9:85:f2:7c:c0:d6:10:7e:05:2e:ad:3e:9d:71:af:
                    5a:31:60:78:66:9e:4e:4d:a6:f7:4a:c0:8f:c1:68:
                    f1:d0:9e:0c:90:44:74:a6:09:ab:30:e3:65:e8:88:
                    d3:77:35:c5:dd:b9:0d:ac:5c:43:b2:6a:73:e0:56:
                    71:31:d7:6c:e9:0d:86:23:a3:f2:8e:d5:6a:03:92:
                    ab:e8:58:fe:e0:e8:ae:0e:aa:24:2c:19:93:b3:23:
                    26:e0:15:2d:ca:97:8b:d2:2a:45:dc:99:02:df:e9:
                    d2:ae:dd:37:25:d6:e0:dc:ff:2b:32:ba:bb:08:b1:
                    a4:53:2f:28:77:b4:cb:5c:fa:22:50:3c:9e:c4:18:
                    63:dd:72:9c:78:70:39:35:12:cd:5a:cb:d7:a0:27:
                    ac:e8:95:31:5d:f0:16:c5:bd:96:2a:b5:b7:38:ea:
                    ca:61:12:07:a5:b5:cb:0c:83:e0:1f:a2:30:53:4f:
                    14:0c:db:6c:d5:60:06:06:12:4b:68:a4:db:d1:06:
                    be:85:8a:19:bb:a7:88:b5:b0:2d:38:62:a2:32:94:
                    e6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F0:B4:3A:FD:B5:D3:BD:A9:93:F2:6B:EE:F7:1E:4F:6E:1F:F3:41
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3234392e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:ea:0f:d9:8b:ff:ca:86:b2:0b:98:60:e1:01:24:05:d3:
         aa:ef:ad:4f:47:06:b0:ca:76:42:fd:a0:c3:09:ca:15:eb:d7:
         a3:16:46:9c:6b:43:b6:d1:eb:55:d6:a8:08:1a:a5:6c:26:11:
         8d:f1:ad:9b:e8:07:8d:00:2a:ba:08:7c:6b:ed:9b:da:86:1e:
         46:27:44:68:61:1f:66:0f:9a:80:9c:fd:c2:49:b8:47:93:b4:
         7a:44:b7:09:24:e9:21:9a:ce:6f:f8:93:33:88:82:04:4e:45:
         d5:75:88:e5:8c:ec:ab:8e:18:28:d3:e2:3c:d5:88:e0:4e:21:
         3d:a1:83:49:39:53:f2:23:b1:c3:ed:a6:54:c0:e5:58:cb:06:
         5e:2d:7a:e9:05:8e:39:87:c8:50:aa:d3:6f:4e:24:ce:e2:ed:
         56:c2:46:ae:05:f4:fa:90:bf:5c:41:ad:4c:cf:fd:90:68:99:
         26:ba:c4:d8:3a:78:cc:1e:d0:38:19:2f:ff:75:c9:ca:cd:54:
         c2:1b:c1:05:ef:b4:ff:40:1f:a1:2b:87:9f:54:83:5b:59:a5:
         87:cf:77:df:70:2c:14:54:ac:4e:59:5f:d6:13:2c:1a:f1:4a:
         a2:06:d6:be:74:3c:f3:e0:e6:5c:7c:d8:f4:a0:61:c5:5f:ca:
         07:ad:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:24 2025 by rpki-client