Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3232322e302f32332d3234203d3e203238303735.roa
File:                     3230312e3139302e3232322e302f32332d3234203d3e203238303735.roa (raw, json)
Hash identifier:          FcU042HDPU2bdjPhHRZxaoYRRLEinvHGQM1nvp1X824=
Subject key identifier:   E5:11:5D:FB:54:4B:E2:44:51:28:DA:64:79:AF:F5:70:2E:C3:97:21
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       019BD23FBCBEC15BF3AEEE7ACC6E1CDC0BD3117F
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3232322e302f32332d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:58:58 +0000
ROA not before:           Tue 04 Feb 2025 19:53:58 +0000
ROA not after:            Tue 03 Feb 2026 19:58:58 +0000
asID:                     28075
IP address blocks:        201.190.222.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d2:3f:bc:be:c1:5b:f3:ae:ee:7a:cc:6e:1c:dc:0b:d3:11:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:53:58 2025 GMT
            Not After : Feb  3 19:58:58 2026 GMT
        Subject: CN=E5115DFB544BE2445128DA6479AFF5702EC39721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:b7:6b:92:fa:26:f7:91:75:10:fe:0e:98:
                    40:13:7f:bb:62:70:be:fb:e7:e3:9c:4b:9d:b8:b7:
                    59:35:de:1a:23:6c:ca:89:e8:46:c2:71:73:e1:d5:
                    7a:50:d3:56:0a:ef:0b:b8:f6:ac:31:1b:44:43:ef:
                    9f:fa:75:c2:1d:ef:1f:02:de:71:2f:b8:d1:a0:e4:
                    d8:e6:e2:86:14:73:20:70:6a:b5:f7:82:a9:e2:f6:
                    d8:e0:6c:d6:ab:b9:ef:5d:eb:dc:78:1f:51:71:c4:
                    3e:70:bf:a9:ed:b1:89:e5:2b:42:17:e2:bf:35:3c:
                    03:13:94:ae:0a:41:95:de:7d:f1:ab:bb:25:73:51:
                    40:9f:91:e9:88:52:81:40:c7:46:a7:a8:f6:f2:b6:
                    b5:55:65:e9:3d:c3:7a:43:76:4d:9e:a8:66:da:fa:
                    7c:68:66:24:ee:96:e7:d8:19:20:ce:16:15:2c:ba:
                    e4:02:d9:e2:89:e0:07:2c:32:d0:e2:c0:ec:66:59:
                    10:f7:91:0d:ae:94:cf:f7:9e:dd:b1:68:f5:29:70:
                    1a:66:8c:7d:9a:22:f2:52:93:ee:78:1a:aa:39:c8:
                    3e:93:dc:71:4c:cd:84:b4:7e:df:fe:5b:90:a3:97:
                    75:14:bb:48:c6:a4:0b:fa:b0:a2:2a:ef:91:6f:36:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:11:5D:FB:54:4B:E2:44:51:28:DA:64:79:AF:F5:70:2E:C3:97:21
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3230312e3139302e3232322e302f32332d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:85:97:c3:ca:81:bd:ef:df:cd:78:2f:f0:b6:89:e9:9c:5e:
         9a:a0:76:94:d6:e1:ca:89:13:11:ab:7a:99:97:6d:d5:9d:2e:
         ac:c5:51:11:84:56:51:e8:3d:2a:7e:9b:2b:a2:0d:d0:d5:cf:
         d0:e2:98:fc:fd:b1:e2:b7:50:f3:71:69:4a:c9:e5:55:8b:7a:
         13:08:eb:0c:39:5f:a4:c1:7f:5b:b4:ab:10:31:2b:c0:36:3a:
         82:ec:71:a4:c1:bd:91:ce:13:0f:fe:fb:48:f9:19:4d:ed:0f:
         90:69:d3:16:3e:ca:3b:81:e4:57:28:e9:58:25:a9:7d:d2:5c:
         ad:a0:32:24:59:72:30:f9:c2:b4:ee:e1:85:a9:43:65:a1:d9:
         48:21:04:f1:09:a2:e4:0a:b8:a7:c1:7e:20:9c:ce:94:af:1a:
         bf:25:3f:fb:42:11:21:55:de:62:cf:4b:05:d2:b8:e6:a4:f3:
         18:8d:28:ce:9e:93:fe:65:01:b6:11:10:07:10:5d:32:7d:14:
         b9:40:75:96:b6:6f:19:2b:fd:4a:03:d8:73:ee:46:21:0f:6e:
         27:bb:4a:f8:ce:32:05:53:58:49:f0:a9:1c:32:b1:9b:2d:af:
         37:a3:ef:84:11:86:0d:a9:c8:b9:98:c9:a2:eb:63:bb:82:d7:
         c2:ee:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:46 2025 by rpki-client