Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa
File:                     3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa (raw, json)
Hash identifier:          Aff6UZpOZuW6D/GV8lQ+5CLed/ZCusyM4v19Yb5cVEI=
Subject key identifier:   00:DD:F9:52:89:E4:7C:13:4B:E6:2D:86:AC:27:A2:95:21:68:41:98
Certificate issuer:       /CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
Certificate serial:       4C952975A00574982392A60B03A348FB1B7B8D69
Authority key identifier: 1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa
Signing time:             Tue 04 Feb 2025 18:04:40 +0000
ROA not before:           Tue 04 Feb 2025 17:59:40 +0000
ROA not after:            Tue 03 Feb 2026 18:04:40 +0000
asID:                     272851
IP address blocks:        201.46.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:95:29:75:a0:05:74:98:23:92:a6:0b:03:a3:48:fb:1b:7b:8d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0
        Validity
            Not Before: Feb  4 17:59:40 2025 GMT
            Not After : Feb  3 18:04:40 2026 GMT
        Subject: CN=00DDF95289E47C134BE62D86AC27A29521684198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:a9:af:ff:88:ce:eb:5b:e8:68:81:2a:4f:
                    23:4e:0b:5b:00:23:d3:fc:20:e2:50:91:c4:58:95:
                    4f:3e:10:6b:ce:af:19:4e:e4:a9:13:d9:84:6c:66:
                    8b:b2:a9:7b:b0:58:1c:28:36:ed:79:1e:ba:08:55:
                    56:0d:65:e8:c0:bb:72:dd:7b:63:97:fc:a8:e2:e5:
                    83:69:ff:5d:e4:fa:7f:94:14:0a:4f:54:30:e5:a1:
                    b3:30:9a:1d:99:8c:bc:25:dc:0a:91:ef:af:fa:08:
                    8f:61:a6:48:79:58:e5:80:62:c3:0f:f9:08:fe:ff:
                    ea:2a:65:05:07:56:17:1a:c2:a9:6e:7a:b5:d2:09:
                    c5:4a:7f:8b:48:40:55:43:63:56:74:c4:cd:51:52:
                    18:82:a1:53:96:c7:11:ed:02:0c:89:44:e7:59:80:
                    9b:46:0b:8e:47:08:da:57:03:2c:37:7e:94:30:96:
                    9b:63:d2:23:7f:41:ec:8b:71:74:dc:33:9c:b8:39:
                    b8:f9:be:4b:54:31:12:62:9c:03:e6:90:d9:54:e0:
                    1c:13:60:65:0c:55:92:34:49:90:ac:9a:6c:e6:74:
                    7c:c7:48:8a:33:6f:d8:0d:d1:50:df:4a:d8:f9:f3:
                    d2:ad:f3:2d:91:64:bc:c2:4b:7d:1b:5e:85:96:eb:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DD:F9:52:89:E4:7C:13:4B:E6:2D:86:AC:27:A2:95:21:68:41:98
            X509v3 Authority Key Identifier:
                keyid:1D:1B:3E:EA:F0:85:6F:CD:C6:C1:20:5A:AC:7D:2C:6B:17:F4:DA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D1B3EEAF0856FCDC6C1205AAC7D2C6B17F4DAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C52C6C6310CD93C0EB0CFB0B7165C89C0F8005613E3BCAA7ADD534184AB18E5/0/3230312e34362e3131352e302f32342d3234203d3e20323732383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:24:27:0d:a2:79:b4:82:52:0f:27:9f:2d:84:2d:77:8a:99:
         90:23:63:8d:c6:be:a4:76:b3:c0:73:ad:0b:b0:96:17:d6:e4:
         f6:32:0e:d7:a5:37:10:e7:34:32:4e:94:cf:66:4f:5e:d5:88:
         f7:b4:d3:59:e2:d5:74:7d:dc:34:64:ab:87:87:02:7b:15:cf:
         a5:65:50:a4:28:07:fd:75:66:db:37:6f:69:9c:5b:5c:13:ce:
         24:6a:4a:9f:28:a2:49:81:c0:9d:a6:a9:d2:03:45:6a:f2:61:
         d1:95:f9:68:f5:6b:a5:51:d3:de:2a:e1:2b:fb:48:db:a9:1b:
         fe:ab:1d:6f:eb:2e:f5:ee:2f:09:d4:40:61:b6:d1:11:b4:07:
         35:ed:40:5a:5a:4f:3a:38:ff:6b:64:f3:18:13:1d:28:6c:01:
         a3:cc:7a:c1:0a:ed:63:78:da:ad:28:78:28:43:4b:0e:30:cf:
         1a:bc:aa:cf:58:6a:89:3b:88:3c:7a:90:70:3b:fa:dd:7b:6d:
         8e:ef:4c:8c:f5:3b:2e:f3:50:db:99:bd:dd:07:b0:00:15:d1:
         2c:1c:5d:ba:55:61:6a:b3:03:a2:0c:9b:9f:41:a2:4d:0d:47:
         38:65:00:26:f1:c5:c7:3f:e5:34:25:1a:35:18:bc:a7:30:dc:
         f3:b8:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:50 2025 by rpki-client