Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e39332e302f32342d3234203d3e203237373839.roa
File:                     3230312e3232312e39332e302f32342d3234203d3e203237373839.roa (raw, json)
Hash identifier:          veYxlZlpTVxenaeDD1M1kt15EdvWpWol8yftS8cRH68=
Subject key identifier:   90:D7:63:FA:B8:F0:1A:92:FA:52:A9:FF:6B:23:E2:22:8E:AD:97:60
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       7D2EA5358A8422A508F057F4781D6EF8D1D2E39E
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e39332e302f32342d3234203d3e203237373839.roa
Signing time:             Tue 04 Feb 2025 20:08:35 +0000
ROA not before:           Tue 04 Feb 2025 20:03:35 +0000
ROA not after:            Tue 03 Feb 2026 20:08:35 +0000
asID:                     27789
IP address blocks:        201.221.93.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2e:a5:35:8a:84:22:a5:08:f0:57:f4:78:1d:6e:f8:d1:d2:e3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:35 2025 GMT
            Not After : Feb  3 20:08:35 2026 GMT
        Subject: CN=90D763FAB8F01A92FA52A9FF6B23E2228EAD9760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:b3:47:f7:8c:59:98:ae:77:65:bb:15:8d:
                    3e:6e:ab:02:70:cf:81:8b:c8:b9:f2:f6:b8:bb:e0:
                    ba:45:1d:6a:74:11:0d:fa:59:f9:5e:56:70:4a:42:
                    cd:56:35:08:84:b5:1c:2f:9a:1d:33:8a:33:f4:ff:
                    d2:39:24:c6:37:fe:bb:f4:f6:45:3d:0e:f0:0d:5f:
                    2f:fb:12:bf:9c:a7:76:04:19:8b:fb:fe:17:2b:4f:
                    1d:fd:e1:94:a4:20:40:28:1c:de:62:c6:1c:07:72:
                    55:6a:fc:87:a3:9f:09:45:ce:e4:da:a5:89:21:4d:
                    42:8c:b9:07:4c:32:33:67:75:7c:9f:e8:8a:51:61:
                    4b:19:8f:4c:3f:a7:18:c2:87:15:c5:09:fb:14:d2:
                    5a:3c:68:f6:1f:25:aa:dc:a8:08:3a:7d:11:d5:82:
                    ac:e2:25:f9:40:65:c9:09:3d:22:38:a2:5b:80:fb:
                    12:aa:ae:20:34:9b:8c:48:0f:9d:d7:19:26:b3:e7:
                    43:e3:cf:f6:02:50:89:3e:2a:20:44:a4:fe:9b:c1:
                    f3:0e:c4:2a:a9:4a:86:a0:b0:1a:a5:7d:8c:e7:e8:
                    36:37:8b:17:25:08:a9:01:ae:0d:74:e8:1d:df:14:
                    d5:18:5d:da:89:fd:26:e9:c3:ec:79:8c:79:c6:0b:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D7:63:FA:B8:F0:1A:92:FA:52:A9:FF:6B:23:E2:22:8E:AD:97:60
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3230312e3232312e39332e302f32342d3234203d3e203237373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:c5:b5:0a:a1:a4:b7:1c:84:34:9b:75:36:d9:d6:38:bc:
         f3:eb:1f:c3:3a:97:9e:09:99:1c:d1:26:c1:7a:24:f7:4a:7b:
         74:93:c5:59:99:57:63:cd:9f:16:e8:f7:ae:35:b6:4e:90:ee:
         26:36:ee:1b:57:89:7c:b8:e1:c5:cf:e3:da:b6:94:f5:41:18:
         42:43:b8:3c:f5:14:8d:2f:44:83:cb:ee:34:a4:09:69:0c:2e:
         1f:d0:ed:88:23:ea:cf:aa:7a:c2:39:96:e2:96:4c:df:79:b7:
         49:00:68:26:08:66:24:6c:d4:07:0b:6d:93:54:79:18:22:ef:
         32:15:05:2d:d0:14:16:46:0c:e7:6c:ec:28:83:73:f0:18:5e:
         6e:47:55:96:b7:7d:34:07:fd:91:63:82:f9:ea:a6:76:a2:a5:
         c3:81:23:13:91:cf:1c:10:50:38:38:4b:d8:86:03:69:e8:d2:
         50:cf:a8:b7:7f:40:d1:1a:c1:ed:bd:ca:c4:50:b9:4e:b3:c8:
         4c:ea:09:78:fa:d2:78:bb:c8:91:cb:19:ed:98:16:a7:43:db:
         9f:f7:6c:ef:33:be:81:62:60:63:4a:90:90:5e:da:ab:36:77:
         ea:fc:1a:8d:52:e8:0a:83:53:64:66:4e:15:7e:c7:04:ac:36:
         4d:62:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:59 2025 by rpki-client