Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134362e302f32342d3234203d3e20323639383632.roa
File:                     3230312e3231382e3134362e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          XBYWuGbxd5nNcvg7NYRxluwxhmZzxG1d+wAjnuXsDkQ=
Subject key identifier:   64:E7:88:4B:97:57:15:76:AB:18:46:D7:59:1B:F1:6A:F4:3E:92:AB
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       43C29CD7B10B1FB1482B605186BBAEF50AEDB350
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134362e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:53:04 +0000
ROA not before:           Tue 04 Feb 2025 18:48:04 +0000
ROA not after:            Tue 03 Feb 2026 18:53:04 +0000
asID:                     269862
IP address blocks:        201.218.146.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c2:9c:d7:b1:0b:1f:b1:48:2b:60:51:86:bb:ae:f5:0a:ed:b3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:48:04 2025 GMT
            Not After : Feb  3 18:53:04 2026 GMT
        Subject: CN=64E7884B97571576AB1846D7591BF16AF43E92AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:3a:c8:07:e6:ba:08:6a:e9:90:7b:9b:9b:
                    c6:3d:fe:b1:8b:39:69:c2:cc:ff:24:fe:de:f6:86:
                    1c:06:9c:4e:a2:08:47:4a:2b:c1:5d:7b:a2:87:98:
                    42:fb:24:1c:5f:d6:54:67:95:4f:71:6e:17:37:c3:
                    f6:63:ef:2d:69:ee:3f:1c:95:44:a2:cf:b5:83:56:
                    2c:d6:7b:05:98:62:ab:d4:78:32:6f:c8:5b:53:f5:
                    85:c5:0d:7b:2e:2f:e5:79:30:03:61:1a:14:a8:6a:
                    39:ee:86:e9:b9:14:2f:b1:8c:e6:b8:7c:a0:dc:3c:
                    ae:a0:2b:c8:48:c2:4d:7f:79:87:e5:1e:61:c0:cd:
                    e6:e1:a1:6c:22:6d:e9:21:a9:22:3e:07:cf:cf:72:
                    48:87:a7:8b:ee:af:50:d2:48:a0:a6:89:2f:ab:6a:
                    a3:b0:27:c1:96:bf:a0:2a:49:f0:d6:48:e8:36:ac:
                    bf:98:19:94:61:f1:0d:8d:2d:57:74:3c:e4:46:c5:
                    f2:d6:f9:04:6b:a0:81:e6:bf:58:17:54:74:da:ae:
                    58:a4:6a:53:84:e2:36:3d:f5:55:e1:8a:d1:83:46:
                    a2:6a:ae:3c:52:90:70:28:90:47:c1:39:6b:47:d3:
                    1c:4e:8e:88:f3:5f:80:26:80:44:aa:ce:ba:ff:bd:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E7:88:4B:97:57:15:76:AB:18:46:D7:59:1B:F1:6A:F4:3E:92:AB
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3230312e3231382e3134362e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:c9:97:75:bd:8e:45:2f:bb:13:a6:6e:f6:9f:70:5d:8e:
         0c:5d:a9:3d:0f:16:24:aa:52:25:78:4d:db:d9:32:50:2c:0d:
         93:a4:fd:d2:70:d8:17:3b:5e:c8:8e:2c:40:68:99:42:4a:34:
         c3:15:fd:d6:a2:7b:1b:c3:7d:7d:1d:9b:51:21:47:9c:52:6f:
         66:50:52:9d:e7:08:7c:60:55:46:f7:2d:0e:38:4b:97:89:2d:
         3d:2c:dc:28:f2:2c:51:04:cb:79:b4:8d:05:69:56:20:4b:50:
         81:18:4a:6b:d6:6a:16:51:01:02:ff:7d:c8:21:0e:78:35:86:
         ad:58:64:3a:d3:34:f8:af:c1:2e:f5:04:74:bb:15:e1:96:53:
         2a:cc:0e:c6:e0:af:5a:68:a2:ae:63:cc:41:c5:08:54:3f:58:
         2e:c9:cb:2e:f0:b5:1a:e3:1f:05:96:5e:58:ae:34:dd:e1:ea:
         a9:9e:6e:0c:3c:54:dd:db:db:d5:09:5c:d7:19:46:be:b3:b6:
         bc:e1:ca:c0:49:b1:e2:b4:47:8e:5f:67:2d:3d:2a:ad:d5:01:
         da:80:bb:24:ba:da:62:3e:db:d5:68:6c:bf:46:72:f5:75:aa:
         d8:1a:50:45:09:b5:75:d7:5c:8e:32:75:f0:8d:8a:bc:d4:90:
         19:a1:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:05 2025 by rpki-client