Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e203236363133.roa
File:                     3230302e31342e33342e302f32342d3234203d3e203236363133.roa (raw, json)
Hash identifier:          QFP7bLl7yvlBQftx7eYASzvxY7tvnPskBa+HVXk6jxc=
Subject key identifier:   9B:7A:5F:79:92:2D:39:87:1B:A9:33:88:BA:B0:A5:00:B2:97:B8:70
Certificate issuer:       /CN=9239EE97C6B39C11732B535303D9279F94576DA0
Certificate serial:       5C03C53C7E097852D4A7CB1DBCC3CC9A6C9CA4F4
Authority key identifier: 92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e203236363133.roa
Signing time:             Tue 04 Feb 2025 18:34:56 +0000
ROA not before:           Tue 04 Feb 2025 18:29:56 +0000
ROA not after:            Tue 03 Feb 2026 18:34:56 +0000
asID:                     26613
IP address blocks:        200.14.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:03:c5:3c:7e:09:78:52:d4:a7:cb:1d:bc:c3:cc:9a:6c:9c:a4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9239EE97C6B39C11732B535303D9279F94576DA0
        Validity
            Not Before: Feb  4 18:29:56 2025 GMT
            Not After : Feb  3 18:34:56 2026 GMT
        Subject: CN=9B7A5F79922D39871BA93388BAB0A500B297B870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:df:28:05:01:eb:a4:79:6f:28:78:23:d8:
                    70:de:d8:b1:c1:e1:23:75:a5:90:66:d7:60:d1:0d:
                    e0:6c:49:4f:60:c1:b1:a8:bd:af:08:f1:df:52:91:
                    bf:1f:21:2b:d1:3e:74:0f:82:80:21:33:b9:df:47:
                    be:fa:69:d9:57:e6:d0:ef:02:95:56:87:f4:8e:c1:
                    b7:37:1b:b5:22:fe:b4:19:e5:9d:03:99:f1:0a:05:
                    b1:4a:f9:ba:b6:52:42:ae:20:c3:4e:6c:83:ed:75:
                    ea:00:36:3e:fd:e5:ee:f5:f6:db:59:b1:cc:8f:eb:
                    98:7b:84:f9:38:f5:a2:87:b4:e7:1a:2c:f3:2d:d5:
                    a5:b6:20:12:6c:fe:9d:08:df:9c:30:f5:72:b0:9e:
                    9d:79:80:62:12:bb:8c:c7:ab:8d:e1:6e:73:61:e9:
                    b5:2a:43:25:6c:03:81:55:ff:13:43:c6:8f:56:65:
                    62:05:9f:95:16:e3:e9:5f:2b:5e:7a:bd:35:67:6c:
                    87:a1:5d:58:5b:6e:c9:99:18:65:3a:0e:54:66:8e:
                    ad:65:0d:8a:c4:72:53:78:07:15:71:64:42:ac:4a:
                    65:f0:8b:69:de:c2:40:71:be:d8:9e:22:f0:44:97:
                    12:99:cd:a7:48:35:b6:e2:61:1c:4f:5c:43:3b:33:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7A:5F:79:92:2D:39:87:1B:A9:33:88:BA:B0:A5:00:B2:97:B8:70
            X509v3 Authority Key Identifier:
                keyid:92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e203236363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:63:c1:45:f6:c2:80:aa:68:2b:c6:cf:f2:61:72:b7:bb:
         57:b0:b4:2a:56:ca:61:c6:1e:4d:92:f5:8c:6f:c7:e9:a2:7d:
         44:0d:22:75:24:e0:47:82:4c:45:5c:c1:e6:ed:c7:a6:cd:90:
         30:94:62:37:87:58:44:8c:ae:1d:64:4f:f9:30:aa:4a:7e:93:
         79:35:04:76:71:6f:32:ff:64:7e:33:81:2e:da:82:cc:a8:71:
         38:d2:3a:09:05:e1:5f:40:9c:63:11:79:c0:31:d7:4d:41:1d:
         9e:70:32:3c:9c:83:c7:4e:bf:18:24:71:5a:5a:1f:92:da:ff:
         ba:0c:6a:17:d3:98:55:65:6e:55:31:8f:80:92:bb:07:3c:d3:
         71:77:79:5c:55:be:d1:37:e7:1f:31:22:86:1f:f3:18:3a:24:
         5f:1e:29:57:8c:25:80:26:75:81:a8:6f:f6:71:43:1f:d3:3d:
         83:89:a1:8e:d0:2f:97:cb:6b:ae:77:f9:5a:c2:32:ea:05:e7:
         80:59:6d:cb:f1:18:16:ba:ba:5d:c4:80:f6:5e:69:08:05:f8:
         88:cc:d1:c3:c7:bd:ef:b1:f7:5c:cb:d0:33:86:65:92:09:b3:
         e8:76:2f:62:11:7d:2a:a1:c4:98:59:59:9e:11:07:37:f2:23:
         24:c8:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:15 2025 by rpki-client