Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3233302e302e302f31362d3234203d3e2036313437.roa
File:                     3230312e3233302e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          mhdMT8SctBTyG5WruXGLHBB5t42ThSD3Ck19WBqhGhI=
Subject key identifier:   43:F5:3B:F8:85:4C:A8:BE:B6:44:55:D6:09:4C:05:1A:25:DC:E8:92
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       704243E9FE2EB90D20086811648904FECBE2C258
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3233302e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:10 +0000
ROA not before:           Tue 04 Feb 2025 20:00:10 +0000
ROA not after:            Tue 03 Feb 2026 20:05:10 +0000
asID:                     6147
IP address blocks:        201.230.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:42:43:e9:fe:2e:b9:0d:20:08:68:11:64:89:04:fe:cb:e2:c2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:10 2025 GMT
            Not After : Feb  3 20:05:10 2026 GMT
        Subject: CN=43F53BF8854CA8BEB64455D6094C051A25DCE892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:68:1b:72:64:45:a1:6e:c4:77:e3:6f:a9:
                    c1:8e:57:af:4e:d4:e3:e2:a5:df:a7:8a:a8:df:2f:
                    19:e7:f8:c1:44:0d:7b:64:b0:23:d1:43:9f:1b:21:
                    07:9d:ea:a5:21:73:9c:3e:4b:ae:94:94:32:c2:43:
                    70:e4:87:e1:e4:e8:1b:02:f5:07:54:c0:5c:18:f3:
                    cd:63:09:35:58:64:cd:12:6d:c0:30:cb:94:ca:ae:
                    11:35:65:81:0f:62:25:1a:a0:fc:32:0a:d0:27:f9:
                    e9:e2:8a:f5:72:d2:1f:63:70:9a:17:07:f1:12:24:
                    a9:b7:da:59:5c:06:cd:49:2c:c7:0d:cc:0e:90:c0:
                    d0:84:4d:45:4e:1f:01:29:14:be:8c:cd:93:70:5a:
                    4f:ad:d4:f2:99:59:71:5c:40:1f:c1:e0:dc:a0:d3:
                    95:7f:74:f5:78:f5:98:51:63:ea:80:9f:10:72:4c:
                    cc:22:f4:55:e2:b1:59:a2:a3:ec:fc:7f:11:81:79:
                    65:7a:f9:4e:ba:da:ba:79:a7:59:48:b5:c2:f2:06:
                    0e:28:90:8b:19:84:d3:ab:7c:d7:f3:62:f5:97:43:
                    e6:3a:5c:47:24:42:a3:92:3a:c0:c8:9f:c4:10:5e:
                    7d:8c:8d:1c:6a:97:3c:5e:e7:c6:be:04:d8:d9:42:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F5:3B:F8:85:4C:A8:BE:B6:44:55:D6:09:4C:05:1A:25:DC:E8:92
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230312e3233302e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:21:2f:50:9d:f8:0f:21:60:d0:18:59:75:db:fb:77:d2:b5:
         ae:09:48:33:21:af:e7:43:21:d9:31:8f:d7:21:85:54:a1:29:
         b7:f9:78:53:a2:24:38:05:f1:62:7e:da:7b:c0:7d:87:25:a0:
         94:34:4b:ac:67:ef:62:e9:3b:d5:8f:d8:5d:2d:21:70:3a:f4:
         59:88:55:9c:95:6a:d7:7f:5b:a9:90:02:67:96:46:e4:31:45:
         32:95:c2:f9:3e:d0:92:4e:86:4a:65:0f:52:7a:e2:7a:9e:0c:
         e0:b1:ba:68:05:41:4f:bf:b4:46:92:6e:36:b9:16:35:6c:5d:
         27:eb:f7:6e:76:1c:bc:28:27:bc:b3:9f:39:ba:df:db:b5:ce:
         cb:9c:82:26:c2:f0:1c:e8:21:b5:9d:00:e2:a7:8a:1e:3f:d4:
         76:03:94:c7:be:fd:17:67:76:8e:7a:2c:32:21:93:87:41:ab:
         b0:37:a8:fc:09:82:c2:f8:bd:4d:a8:a8:8c:0c:96:bf:25:24:
         cc:47:0a:9d:7f:00:42:57:83:34:7a:38:4f:1e:60:cb:4c:04:
         1a:0a:5f:85:93:6b:d3:16:0f:c6:43:60:73:42:a5:5f:a2:97:
         6a:bc:2a:52:b3:31:ca:0f:94:fe:d4:1f:f7:98:73:d1:79:fc:
         a1:15:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:20 2025 by rpki-client