Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36302e302f32342d3234203d3e203532323234.roa
File:                     3230302e31302e36302e302f32342d3234203d3e203532323234.roa (raw, json)
Hash identifier:          rBfPxno53IQP8ll1+2lOzRgljWTAhz5RlJRFWJ13xx0=
Subject key identifier:   D7:F4:70:51:4B:50:7B:CA:B6:61:62:36:17:85:95:2C:1E:B3:A2:74
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       11695471992B936C1884A1E83B0FD2DB61F585BD
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36302e302f32342d3234203d3e203532323234.roa
Signing time:             Tue 04 Feb 2025 18:19:35 +0000
ROA not before:           Tue 04 Feb 2025 18:14:35 +0000
ROA not after:            Tue 03 Feb 2026 18:19:35 +0000
asID:                     52224
IP address blocks:        200.10.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:69:54:71:99:2b:93:6c:18:84:a1:e8:3b:0f:d2:db:61:f5:85:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:35 2025 GMT
            Not After : Feb  3 18:19:35 2026 GMT
        Subject: CN=D7F470514B507BCAB66162361785952C1EB3A274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:09:75:fa:13:fe:3b:c7:5f:ae:4c:19:c1:
                    a5:f8:a0:d3:84:11:85:9c:45:cc:a8:05:c2:f8:b5:
                    88:4f:c7:88:76:08:45:96:e7:df:d8:5d:c8:93:1b:
                    27:64:56:9a:a7:68:52:21:93:a7:d6:e0:39:98:25:
                    dc:08:d3:64:82:7b:2a:2c:0f:6a:14:ad:ab:64:a3:
                    0b:07:f3:27:7c:ee:67:d1:aa:2b:fe:97:d4:23:59:
                    7a:57:02:00:49:10:d4:a5:fb:2d:13:b7:db:93:62:
                    8f:45:7a:5c:fc:06:ac:24:8c:ee:5c:db:2d:b2:11:
                    00:76:a3:ea:04:54:c5:e5:6e:5e:9e:e5:40:b5:5d:
                    f2:5f:9a:0a:19:5d:f2:ab:f6:b0:1c:3d:18:3e:0c:
                    7e:2e:79:3e:b8:ad:32:9a:98:22:b8:11:ec:fb:b8:
                    06:6a:25:30:45:49:55:d8:be:97:07:94:1c:6f:8a:
                    d9:04:12:bf:4b:8a:de:0e:a0:cb:d4:ca:d5:12:4b:
                    31:49:74:af:e8:97:0c:62:30:fd:7c:21:a0:5a:e6:
                    8a:2f:7e:7a:6a:c8:bc:f2:43:6c:90:7e:18:8d:20:
                    68:3e:47:a9:03:b0:dc:30:7b:33:90:78:0c:32:9d:
                    de:23:df:ce:19:2c:20:37:84:a2:ca:b8:34:20:35:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F4:70:51:4B:50:7B:CA:B6:61:62:36:17:85:95:2C:1E:B3:A2:74
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3230302e31302e36302e302f32342d3234203d3e203532323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:58:74:e6:4e:36:35:bc:b4:64:0a:8d:22:4f:87:e7:b9:c3:
         af:02:ab:18:95:d1:24:c2:22:23:cd:6e:a4:57:5e:a7:23:19:
         19:6f:ec:68:c7:99:c0:8c:96:89:5a:3b:3f:0a:9b:fb:1e:b4:
         35:f5:9c:1b:70:1b:85:e9:a6:fb:36:c1:27:eb:56:58:ae:3e:
         32:db:94:12:32:0e:8d:4f:34:0a:3c:8e:9b:94:4d:58:a0:25:
         ca:94:15:a0:79:3a:0b:84:29:48:d1:e9:a3:99:fa:18:4b:52:
         b3:8e:2a:b3:b2:88:6f:34:e5:b1:ce:56:4b:3c:11:63:6f:f8:
         c4:71:24:e9:45:51:22:11:62:ec:35:38:38:47:cd:69:f0:fd:
         fe:25:a2:d4:59:60:31:b0:99:65:ea:34:9a:c2:5c:04:af:0f:
         ce:4c:cc:e8:17:00:df:56:8c:31:8d:c2:02:34:f5:d0:c2:4a:
         18:b6:b0:86:64:88:54:3f:7f:6d:68:73:50:d9:48:44:6e:e6:
         c8:58:1e:3c:b6:5e:18:cb:8c:8d:cb:95:31:78:0d:62:18:b6:
         cd:3b:a2:a1:5a:90:36:d6:5f:52:9b:e1:d1:91:5a:e2:70:fb:
         f7:21:50:2c:ed:3b:fd:6c:55:0f:f1:09:a9:eb:c9:7d:09:4f:
         64:b2:54:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:43 2025 by rpki-client