Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3230302e36332e3139322e302f31382d3234203d3e203134353232.roa
File:                     3230302e36332e3139322e302f31382d3234203d3e203134353232.roa (raw, json)
Hash identifier:          vrcyfQr6MFy7oBsyTCTpWunn7puePjYs3y0CGs/DnYI=
Subject key identifier:   F8:92:10:8D:88:3B:78:58:2E:B3:A8:B7:38:13:D1:27:DD:40:57:9A
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       2B46F113082E5F7237A08C1BB1E7760C7711799D
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3230302e36332e3139322e302f31382d3234203d3e203134353232.roa
Signing time:             Tue 04 Feb 2025 20:08:48 +0000
ROA not before:           Tue 04 Feb 2025 20:03:48 +0000
ROA not after:            Tue 03 Feb 2026 20:08:48 +0000
asID:                     14522
IP address blocks:        200.63.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:46:f1:13:08:2e:5f:72:37:a0:8c:1b:b1:e7:76:0c:77:11:79:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Feb  4 20:03:48 2025 GMT
            Not After : Feb  3 20:08:48 2026 GMT
        Subject: CN=F892108D883B78582EB3A8B73813D127DD40579A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:a8:b6:53:d7:a8:d1:10:fa:10:8e:c7:5c:
                    28:7b:53:bb:8d:fe:54:e3:11:97:1a:65:ac:a1:3d:
                    38:2f:66:ba:38:d3:d9:c2:a1:0f:c1:62:f2:94:2d:
                    8d:78:f2:7b:86:36:53:1d:04:05:41:21:e8:fe:ad:
                    21:3f:74:00:45:0c:eb:2e:c1:bb:92:c3:39:f4:46:
                    ce:9b:dd:9d:fd:8d:c1:5c:6b:2b:d8:57:17:71:72:
                    8b:23:c7:b8:af:1a:6c:c0:5f:74:d7:78:b1:62:8a:
                    75:0a:4e:3c:f8:6c:6f:c8:9d:e5:75:36:8f:7b:12:
                    ed:a4:3c:69:2a:c7:1a:2b:50:4d:1f:9e:3b:7e:a0:
                    56:dc:db:d2:02:07:8a:fd:94:3a:69:bc:3a:53:e0:
                    e7:7b:ed:3a:83:23:04:90:70:0a:3a:78:80:aa:13:
                    b5:45:df:68:bc:2f:ed:f9:35:40:a5:b3:c2:41:d8:
                    71:8d:8c:ee:a0:10:cf:f3:d4:11:9e:7a:41:48:aa:
                    7e:3a:31:b5:f2:4b:bb:eb:d8:f6:26:c0:63:88:a0:
                    a6:29:31:b8:1a:97:da:da:4d:82:f4:f2:1e:fc:c8:
                    77:14:43:71:ca:24:2c:c1:a0:d7:7b:b8:a8:15:35:
                    c8:48:d6:12:9b:3a:bd:ab:3a:f8:a8:aa:70:87:02:
                    8c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:92:10:8D:88:3B:78:58:2E:B3:A8:B7:38:13:D1:27:DD:40:57:9A
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3230302e36332e3139322e302f31382d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.63.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:49:5d:bb:4b:71:16:3b:ed:5c:13:25:11:f4:48:17:d9:5b:
         3c:7e:c5:84:4f:95:da:88:f4:5e:45:50:36:ca:cf:5b:a2:4b:
         40:ee:35:20:a7:ee:e5:ad:6e:3b:23:f9:df:bd:02:24:1d:bf:
         01:8c:99:a6:00:51:7b:7e:9d:11:e5:0f:3c:91:e3:27:5e:56:
         83:e8:46:9a:10:0f:46:17:10:37:f4:29:9d:d4:52:05:ca:90:
         c2:1e:c3:76:2b:26:48:40:fa:97:c4:c0:9a:03:2a:06:f5:00:
         33:56:4a:07:3f:72:b4:ec:b0:1d:53:b9:39:3f:ab:a0:14:88:
         3b:98:ed:b4:de:87:a0:cd:0a:fd:4f:92:6f:86:c9:29:b9:a7:
         5e:ea:28:24:bc:57:92:2d:9c:77:a7:49:f1:99:b1:8d:2e:d8:
         47:7f:94:de:66:ca:1c:31:e1:9b:36:1a:6d:08:2a:b0:f6:2d:
         48:8c:6a:f3:69:9a:da:a8:15:71:25:2e:9d:a1:12:e2:6e:50:
         46:6c:f9:8a:ea:7b:f6:22:90:c5:89:20:69:04:79:83:06:3b:
         d2:80:bc:da:f8:58:09:7a:73:5d:29:74:c1:43:7d:d8:ba:1d:
         a2:6e:74:b5:c1:14:ae:87:62:07:aa:6a:70:8a:45:dc:63:21:
         b5:3c:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:25 2025 by rpki-client