Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39322e302f32342d3234203d3e2037333033.roa
File:                     3230302e36332e39322e302f32342d3234203d3e2037333033.roa (raw, json)
Hash identifier:          OUjMXB7s5f9NUB8onvVmhjuchooiKs8f7IeaPlj43rE=
Subject key identifier:   CC:66:38:3B:C1:21:A6:2F:79:36:BA:76:54:7C:1F:25:57:34:33:A9
Certificate issuer:       /CN=89FBB987F4762D9626E55719EF46050943DEE51C
Certificate serial:       2957FBA8D46958EE0ECACD541836C9C32C8C6169
Authority key identifier: 89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39322e302f32342d3234203d3e2037333033.roa
Signing time:             Tue 04 Feb 2025 20:05:06 +0000
ROA not before:           Tue 04 Feb 2025 20:00:06 +0000
ROA not after:            Tue 03 Feb 2026 20:05:06 +0000
asID:                     7303
IP address blocks:        200.63.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:57:fb:a8:d4:69:58:ee:0e:ca:cd:54:18:36:c9:c3:2c:8c:61:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FBB987F4762D9626E55719EF46050943DEE51C
        Validity
            Not Before: Feb  4 20:00:06 2025 GMT
            Not After : Feb  3 20:05:06 2026 GMT
        Subject: CN=CC66383BC121A62F7936BA76547C1F25573433A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:29:24:99:37:c8:95:82:e1:10:6f:9a:d3:c4:
                    f8:43:a0:1b:d1:7b:1c:08:2c:67:a4:f9:1f:9f:2b:
                    60:e9:84:a6:c0:e4:89:71:95:1e:c6:bc:d9:5a:a4:
                    c2:49:fd:86:2d:1a:93:53:08:d8:66:71:44:00:09:
                    b2:77:4c:51:85:d8:09:fa:21:d9:b8:d4:12:54:bc:
                    80:bc:c7:c3:a7:3e:39:1b:7d:85:cb:6c:56:5d:ea:
                    ff:5d:b7:5b:c1:6f:1c:ce:f6:89:8f:e5:97:00:5a:
                    a9:8a:b0:4a:ea:bc:f1:52:03:67:47:bd:86:18:75:
                    c6:70:fa:44:e0:d8:1f:39:57:4f:c0:9b:17:8a:8c:
                    61:56:bf:f4:9b:06:0b:d8:61:4f:63:70:68:0c:a0:
                    d2:11:39:b6:f3:e0:e0:c9:48:7f:fd:3c:5b:7b:63:
                    c9:a1:99:69:f5:b5:1f:98:ca:05:3f:92:51:f8:a9:
                    61:e1:9e:b0:88:41:c8:41:88:e5:63:f1:07:27:48:
                    d9:3a:ca:4c:50:7a:6f:d8:98:50:4c:61:45:75:0e:
                    42:7a:61:5e:91:b9:f7:f3:62:a8:07:6b:fb:ba:26:
                    94:b6:ff:1c:54:3c:57:79:ac:ce:1f:33:3f:a5:9a:
                    90:a6:e0:01:26:fd:00:45:19:4d:ee:5f:b0:e7:21:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:66:38:3B:C1:21:A6:2F:79:36:BA:76:54:7C:1F:25:57:34:33:A9
            X509v3 Authority Key Identifier:
                keyid:89:FB:B9:87:F4:76:2D:96:26:E5:57:19:EF:46:05:09:43:DE:E5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/89FBB987F4762D9626E55719EF46050943DEE51C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89FBB987F4762D9626E55719EF46050943DEE51C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BAAEFABFFB4077B02F37A6CA4EAC539B4079481C80C83F6F9D2BFF30744CFAA/0/3230302e36332e39322e302f32342d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:16:ac:61:d4:d1:ba:f0:5d:9a:33:93:c2:62:c5:6d:9d:31:
         e1:e9:93:4b:73:2d:6e:8d:3c:7f:41:b2:9c:da:04:d2:09:5e:
         d6:9c:e6:34:b2:d0:30:96:a5:ce:8a:6d:78:27:01:af:a9:4a:
         90:f0:43:c1:95:54:14:0a:40:44:cf:74:6c:e3:2a:81:06:7b:
         9b:2f:8d:de:85:fb:e9:23:f4:0c:34:d4:05:1c:df:07:ef:a5:
         e2:57:2f:26:ce:7e:78:dd:2e:df:dd:f3:22:47:84:9a:e5:5f:
         8b:e1:9d:cc:4c:d5:30:df:5e:f0:6e:03:c5:99:27:85:55:c0:
         4b:28:bc:25:b6:c4:c0:c8:be:30:84:ad:42:d0:f4:16:46:59:
         72:97:c5:7d:db:9d:de:a5:f1:f5:3f:45:39:06:be:2c:40:a3:
         02:ff:c7:d6:a6:1e:f6:d0:d6:1e:2d:03:a7:c6:61:bf:a2:c2:
         bd:1e:99:17:2e:9c:c4:50:44:95:ab:e8:e6:9f:0f:84:0e:81:
         ad:51:e9:16:c8:3e:1f:bc:c2:4c:7e:f3:7c:3c:ae:e5:f9:ec:
         12:b0:65:86:13:58:d8:db:b0:30:af:ca:af:32:e3:ee:c8:f2:
         78:90:a7:da:af:46:6e:16:83:af:20:2e:a8:c2:8a:c7:e7:f7:
         f4:82:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:25 2025 by rpki-client