Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e34382e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          2YUNLnD4ycW3i0fFvNoA727gZxF1t8ONhqmIubPppOE=
Subject key identifier:   D9:0D:98:36:0E:D9:D6:14:A5:D4:61:74:E1:CE:A5:75:5C:96:F1:BC
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       0DD83D29A28377A6AEC6125A2B2D397DA8F5554D
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:14 +0000
ROA not before:           Tue 04 Feb 2025 20:00:14 +0000
ROA not after:            Tue 03 Feb 2026 20:05:14 +0000
asID:                     6147
IP address blocks:        200.48.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d8:3d:29:a2:83:77:a6:ae:c6:12:5a:2b:2d:39:7d:a8:f5:55:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:14 2025 GMT
            Not After : Feb  3 20:05:14 2026 GMT
        Subject: CN=D90D98360ED9D614A5D46174E1CEA5755C96F1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:9d:c8:8b:91:cb:a6:ea:af:9d:b7:db:ed:
                    94:4d:83:e3:03:c8:c5:c8:27:ce:35:e1:e3:3a:1e:
                    35:9e:75:90:17:4d:c9:92:91:79:e0:7c:98:b5:c2:
                    cf:da:69:e2:dc:80:88:e0:d8:ce:fa:09:cd:49:e1:
                    98:d3:95:f2:74:1a:ba:58:ba:2e:34:c4:dc:65:95:
                    9b:52:6a:1f:e5:d9:da:74:18:ee:38:79:e8:5a:57:
                    30:d1:fa:cc:2e:6f:f4:0f:a5:8c:4c:fd:82:25:e5:
                    6b:df:44:15:a0:1f:ce:96:be:aa:e2:54:52:6b:59:
                    56:a7:90:84:cc:ea:14:1e:06:9f:22:78:c8:08:26:
                    49:06:de:55:38:38:4a:32:48:1d:de:be:df:72:1d:
                    dc:ea:28:48:70:39:fe:df:d2:aa:11:43:06:32:30:
                    95:8e:ac:3d:27:fa:cb:ee:d8:ef:f2:aa:05:65:dc:
                    6d:29:6a:75:49:f2:e0:15:16:b8:ff:eb:88:f2:39:
                    b7:ac:03:f4:be:e1:0b:ea:99:d3:84:e0:71:20:ed:
                    53:90:26:2f:91:df:fa:e6:21:4d:74:5f:3e:ad:0f:
                    11:3c:01:52:17:0e:2e:24:69:fd:c9:f0:2e:b0:09:
                    f3:77:6b:88:f0:c5:7a:27:13:06:ca:b7:4e:d5:3b:
                    ef:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0D:98:36:0E:D9:D6:14:A5:D4:61:74:E1:CE:A5:75:5C:96:F1:BC
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e34382e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.48.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:77:7a:ae:3e:1c:5a:14:8f:f6:d4:37:ce:be:67:f8:e2:be:
         ff:a3:88:c7:e6:e1:a1:cb:31:ab:fa:b9:49:ea:a0:69:cf:37:
         5a:ac:96:27:bf:fd:aa:43:79:ac:62:e2:7f:20:a2:be:05:7b:
         05:1c:fb:b1:be:0a:ab:eb:e4:2e:be:50:7c:09:63:c5:85:fb:
         73:be:92:3f:25:55:c2:8f:3b:fa:ce:3a:5d:22:76:e2:01:43:
         e4:c7:c2:5f:4a:59:72:b7:40:4a:03:a9:77:fb:72:8e:28:40:
         c2:1c:5a:fe:60:9a:54:84:26:9f:cb:61:50:a7:98:be:2e:14:
         c4:75:04:64:fa:27:c5:28:af:0d:96:86:a5:35:be:db:f5:18:
         68:d4:ec:1d:db:b4:36:3f:f4:08:61:f3:a8:05:e8:0b:ed:60:
         01:02:00:a1:18:f8:dd:53:2a:26:1a:9a:00:7b:a8:22:53:54:
         57:e8:89:2c:d8:23:02:23:c6:10:2c:62:76:bc:e3:82:5b:7b:
         b0:55:22:b2:07:73:12:40:29:88:73:ab:0b:52:bf:51:88:bb:
         5b:17:32:98:a9:f5:a3:01:1c:2a:79:00:91:71:76:f7:5b:81:
         9c:47:aa:7f:48:91:ef:0a:7d:90:fd:b3:35:00:91:6a:b7:4e:
         20:e6:80:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:20 2025 by rpki-client