Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31352e302f32342d3234203d3e20323635383434.roa
File:                     3230302e3131352e31352e302f32342d3234203d3e20323635383434.roa (raw, json)
Hash identifier:          YwWW1mpTKOukx0SlUD57Ipb9tLq4e3EfcVchA/RoFRY=
Subject key identifier:   D7:BB:E9:F0:06:06:9F:C6:CB:C7:C6:84:C9:C3:4B:7F:AA:CE:18:2D
Certificate issuer:       /CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
Certificate serial:       1FBC3D1893FB4B802C5CDB9E30BF2CA045539B19
Authority key identifier: A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31352e302f32342d3234203d3e20323635383434.roa
Signing time:             Tue 04 Feb 2025 17:59:06 +0000
ROA not before:           Tue 04 Feb 2025 17:54:06 +0000
ROA not after:            Tue 03 Feb 2026 17:59:06 +0000
asID:                     265844
IP address blocks:        200.115.15.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:3d:18:93:fb:4b:80:2c:5c:db:9e:30:bf:2c:a0:45:53:9b:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A48A9DA731206C7390C8A6EB16ACEE285DADCE03
        Validity
            Not Before: Feb  4 17:54:06 2025 GMT
            Not After : Feb  3 17:59:06 2026 GMT
        Subject: CN=D7BBE9F006069FC6CBC7C684C9C34B7FAACE182D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:c4:75:79:ca:a3:52:26:7e:c7:b2:a3:06:
                    e2:6f:e9:c6:ce:c4:ea:a0:c9:0d:f7:ac:2f:a5:f7:
                    cc:c7:78:8a:97:8d:fa:32:fb:ae:61:2a:82:ce:c4:
                    75:5f:32:f2:1e:39:3b:5c:e8:20:ab:09:95:c0:a8:
                    9a:76:b3:c8:16:d0:80:7a:53:12:45:e1:6a:cf:25:
                    a9:e9:93:4f:64:44:6d:2f:49:7d:e6:47:4e:39:22:
                    a4:e2:89:cd:f6:22:f6:59:ac:b0:a7:d9:8b:ad:a5:
                    a1:15:8c:0b:3d:77:3c:23:6f:65:f8:3e:dd:d2:d6:
                    82:dc:3e:89:66:25:66:9b:48:47:4a:2c:57:ca:81:
                    5f:95:66:a7:3e:f4:19:93:91:16:bb:0f:83:0e:9b:
                    8b:d3:a8:8d:a5:a3:76:de:37:fc:75:bb:db:38:8c:
                    18:ac:7c:f3:3c:a9:74:da:95:b6:8d:b2:a7:0f:af:
                    f4:dd:16:0e:9e:2c:b8:cf:8b:01:2d:45:93:4b:0c:
                    b2:56:1b:eb:22:bd:6d:77:9a:5a:e6:10:7a:e8:0c:
                    09:a1:39:f4:fc:62:aa:bc:e7:b9:77:1d:f6:d8:04:
                    ca:70:b5:da:01:6b:26:2e:75:1a:dc:36:a8:29:16:
                    ac:6b:5e:fb:f2:a5:48:40:29:0e:a0:c3:39:66:b9:
                    73:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BB:E9:F0:06:06:9F:C6:CB:C7:C6:84:C9:C3:4B:7F:AA:CE:18:2D
            X509v3 Authority Key Identifier:
                keyid:A4:8A:9D:A7:31:20:6C:73:90:C8:A6:EB:16:AC:EE:28:5D:AD:CE:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A48A9DA731206C7390C8A6EB16ACEE285DADCE03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67CE5855437A5E8FA09AAEC7D2D73290C067CC8EB20E04EC092CD3741D9A6D82/0/3230302e3131352e31352e302f32342d3234203d3e20323635383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:79:8d:e2:03:02:fe:fe:94:0c:da:37:c9:33:cb:ef:a4:70:
         a1:6d:af:ed:10:5b:0e:98:19:e1:f9:11:c3:31:b5:f3:53:0b:
         f4:ab:75:28:5c:33:f8:f8:ad:f7:a2:c8:5f:26:b8:ce:49:7e:
         a1:2e:c7:f9:3b:99:eb:e0:4e:f0:a1:8e:a9:8c:dd:f4:46:dd:
         c5:a0:ad:15:bf:1a:15:9b:06:6f:be:4b:92:08:6c:ae:a4:de:
         cc:cf:c1:9b:74:06:fe:59:ac:fa:b5:d1:bc:52:9f:c5:e4:08:
         ef:ab:2e:cd:e0:a5:ee:ff:97:99:64:ca:66:e6:9a:29:d8:8e:
         30:1e:b1:ee:f1:c5:6a:35:3c:6f:b7:c6:ea:7d:62:de:61:6b:
         d7:54:4c:66:22:6b:4d:cd:e5:26:f9:d5:d4:39:8a:76:79:d4:
         c0:cc:d6:de:1b:da:33:74:9e:5d:6e:e2:1f:9a:24:35:95:ad:
         c0:bf:8b:35:8a:90:b8:0f:29:83:0a:03:11:07:32:4f:2d:2c:
         8d:c1:ca:8a:39:f4:78:c0:a2:b2:52:d1:c9:1c:cf:31:d2:59:
         74:74:4d:f7:9b:85:8e:5d:1b:15:cb:00:7c:26:64:21:30:ab:
         fc:3e:43:93:b8:e5:6d:de:45:44:4d:a1:17:cc:14:31:a7:dd:
         4d:47:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:15 2025 by rpki-client