Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e2036313430.roa
File:                     3230302e31342e33342e302f32342d3234203d3e2036313430.roa (raw, json)
Hash identifier:          DzhrNlU9PYgqcG/1Oa+m06XjKrIwj/dd/YOHSwPm98M=
Subject key identifier:   18:1F:2E:F9:DE:D3:36:EC:9E:04:F1:D3:26:1C:DB:61:25:B9:33:27
Certificate issuer:       /CN=9239EE97C6B39C11732B535303D9279F94576DA0
Certificate serial:       5235DA27D443C971D46EF5E28CE7F995410701A4
Authority key identifier: 92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e2036313430.roa
Signing time:             Tue 04 Feb 2025 18:34:57 +0000
ROA not before:           Tue 04 Feb 2025 18:29:57 +0000
ROA not after:            Tue 03 Feb 2026 18:34:57 +0000
asID:                     6140
IP address blocks:        200.14.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:35:da:27:d4:43:c9:71:d4:6e:f5:e2:8c:e7:f9:95:41:07:01:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9239EE97C6B39C11732B535303D9279F94576DA0
        Validity
            Not Before: Feb  4 18:29:57 2025 GMT
            Not After : Feb  3 18:34:57 2026 GMT
        Subject: CN=181F2EF9DED336EC9E04F1D3261CDB6125B93327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:09:cb:5f:5f:89:34:97:be:d7:6e:6d:6f:
                    18:94:0f:fb:b5:07:ec:d7:f3:e1:7b:c8:43:c1:10:
                    68:e0:08:67:b7:95:4c:c8:72:1a:eb:f0:9a:68:dc:
                    57:bb:29:cc:f0:6b:56:85:0b:56:bf:7c:05:f4:3f:
                    af:d9:10:6e:e4:67:e4:10:89:59:b4:af:93:28:fe:
                    a5:ce:87:c8:fd:2e:43:68:d2:79:ed:f5:69:3f:da:
                    14:5e:95:1f:77:30:3e:1b:cc:16:9d:66:b7:b2:83:
                    bf:3b:29:bb:9c:23:ce:8a:7d:09:cd:4b:bb:26:ba:
                    32:a0:f2:29:98:06:0b:c5:03:5f:b4:4b:8d:6e:f9:
                    82:5c:5d:95:82:dc:bb:7d:be:5b:75:ca:a6:82:ee:
                    36:86:e5:59:55:39:0f:4a:70:af:dc:1c:fc:e7:dd:
                    09:e5:59:fb:53:03:05:ba:36:b5:6b:39:87:2a:f4:
                    e6:ca:ce:66:01:66:03:9c:c2:e3:e8:31:c8:c0:7f:
                    5d:49:06:aa:e0:b8:13:d8:a7:ad:1d:d4:0b:46:ac:
                    03:86:94:d4:4f:fe:b8:e3:b8:a6:08:35:e1:4a:89:
                    d3:38:f0:d4:f1:7f:9e:bf:6d:55:c0:a4:74:43:ff:
                    fd:90:d6:38:3b:49:94:a3:59:97:87:87:95:e6:a3:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1F:2E:F9:DE:D3:36:EC:9E:04:F1:D3:26:1C:DB:61:25:B9:33:27
            X509v3 Authority Key Identifier:
                keyid:92:39:EE:97:C6:B3:9C:11:73:2B:53:53:03:D9:27:9F:94:57:6D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/9239EE97C6B39C11732B535303D9279F94576DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9239EE97C6B39C11732B535303D9279F94576DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A0AE43E14E6936AC3BDFB148CA479087144732F2C8CCD9D909084E4D1F05B11/0/3230302e31342e33342e302f32342d3234203d3e2036313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:a3:30:bb:96:ef:ca:de:5e:cd:3d:7d:0a:66:c2:3e:c2:
         88:58:a6:e3:0e:af:d6:df:aa:c4:07:41:a1:42:ac:bf:c6:cd:
         b5:60:fc:26:25:a9:4f:d6:0c:c4:dd:08:12:b0:ee:21:dd:f2:
         ae:3b:d5:9d:e7:ca:f8:b7:62:e9:f1:91:a2:1a:06:e2:76:f6:
         b3:1c:2b:9f:c6:46:a6:9f:3c:0e:51:ed:a2:44:b5:97:bb:6c:
         61:88:18:fd:8b:f1:b2:e6:e4:c5:20:91:db:47:c1:b5:5d:39:
         b3:c9:1d:23:b5:a7:21:61:53:86:24:f0:55:2f:cd:fa:68:bd:
         2b:73:9e:18:00:47:b5:74:37:a2:c9:8a:5d:3a:c7:2c:d7:61:
         0b:bf:0d:2b:ee:c9:f9:58:16:fd:75:19:e2:c3:8b:f2:03:3c:
         8f:05:77:02:29:56:2d:96:4a:6e:f4:14:08:19:97:88:95:97:
         d4:8c:61:fe:22:7b:2e:cc:5d:7e:10:23:4e:6b:32:63:27:ad:
         5e:59:ab:b0:b7:bc:5f:04:2e:61:74:d3:fd:08:f3:d4:0d:b4:
         46:e5:9b:fa:fa:dc:6d:bf:a1:4f:28:7a:66:ab:33:c7:4c:0e:
         7a:aa:79:2c:33:de:52:0c:01:1a:a1:d1:14:fe:a4:f8:64:56:
         15:58:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:12 2025 by rpki-client