Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3132302e302e302f31362d3234203d3e203232303437.roa
File:                     3230302e3132302e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          Zk6CK+c3gbqmIQiLqbuL1bA8R7NQIKfhekT0nPva+aw=
Subject key identifier:   06:6F:5C:EF:84:B1:45:A7:4B:DE:28:C4:20:FF:28:34:A2:02:36:58
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       160CB2D617B411042579D38724176EE2192B3F55
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3132302e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 04 Feb 2025 18:19:16 +0000
ROA not before:           Tue 04 Feb 2025 18:14:16 +0000
ROA not after:            Tue 03 Feb 2026 18:19:16 +0000
asID:                     22047
IP address blocks:        200.120.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0c:b2:d6:17:b4:11:04:25:79:d3:87:24:17:6e:e2:19:2b:3f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Feb  4 18:14:16 2025 GMT
            Not After : Feb  3 18:19:16 2026 GMT
        Subject: CN=066F5CEF84B145A74BDE28C420FF2834A2023658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:00:0d:09:30:ec:c2:09:a9:af:40:29:5a:9a:
                    bc:bc:21:43:e9:e3:c6:29:a0:b0:da:c2:a3:2e:43:
                    cb:9c:f8:5b:0d:cd:8b:44:a5:26:84:64:e6:d5:60:
                    be:0b:e3:1f:02:40:25:83:df:8c:d1:2b:ee:fa:0d:
                    00:fb:e6:1d:01:41:00:95:ac:92:27:4f:23:3d:25:
                    29:c7:0d:a3:1e:8c:b5:fd:9a:9e:86:b9:2f:34:57:
                    98:32:db:02:52:c1:11:c8:30:62:40:dc:fb:e7:4f:
                    5d:8b:f1:44:5f:ca:e5:e7:c0:f9:a8:b2:0e:7d:6a:
                    c0:fe:b9:14:1d:8e:15:7d:75:b7:38:79:2f:48:97:
                    e6:36:03:a7:89:49:96:46:0a:50:33:93:03:9a:39:
                    c2:df:bd:b1:1d:46:ac:df:57:57:2b:8f:37:aa:28:
                    24:5b:d2:81:49:3d:40:06:4b:15:db:c2:54:ce:eb:
                    44:ee:04:f3:45:e4:3d:bf:10:c6:e6:3f:67:46:d0:
                    68:ae:36:3b:9a:e0:b9:08:1d:f9:0b:37:8b:40:04:
                    ed:ba:f3:fc:75:3a:6e:a5:7c:fd:e0:c5:05:00:3f:
                    c2:7a:93:03:9c:17:bd:cf:13:81:34:bb:cf:a6:43:
                    e1:6e:2d:21:cf:c9:e7:e1:c1:7d:11:32:10:ed:78:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6F:5C:EF:84:B1:45:A7:4B:DE:28:C4:20:FF:28:34:A2:02:36:58
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3230302e3132302e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.120.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:ce:3d:3b:ff:e8:bb:68:b4:f6:cd:a0:6c:d1:19:d3:78:
         77:84:9b:a4:b8:18:69:6f:91:0f:8f:a3:35:46:b7:6a:d9:1f:
         a9:48:fa:45:63:9a:6a:1d:75:f5:57:ab:07:b0:65:4c:28:b9:
         69:dc:a8:9d:31:a2:ea:ba:78:ba:19:d1:1d:7f:96:c5:c2:1f:
         ac:cb:40:97:cb:95:ec:a1:26:c4:ae:08:a4:45:20:e0:35:36:
         4c:d6:f6:e1:48:29:b5:73:1b:34:f1:49:3d:16:94:69:f9:d3:
         40:65:a5:68:01:81:f9:4f:08:00:34:79:85:48:11:a1:ff:74:
         0f:82:ba:21:83:8e:9b:1a:0d:4e:72:0a:e4:c0:e3:33:41:fb:
         b9:63:e3:74:e8:70:a3:a2:36:a7:3b:f7:db:ce:c8:05:da:eb:
         f8:5c:3e:fd:6a:33:02:a5:f8:78:77:c1:12:8b:38:b8:69:8c:
         05:48:8e:93:b3:71:b9:12:fa:90:94:0c:64:05:44:56:bd:11:
         6c:4a:aa:29:bd:8b:13:6b:16:68:df:a4:7e:b1:18:68:72:28:
         f3:df:fc:c1:64:7f:73:da:ed:8f:a2:c5:a4:7f:cc:91:9d:a9:
         8f:c9:3f:19:fb:12:dc:93:fa:cf:4d:be:de:bd:e5:d4:f8:e9:
         c4:54:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:43 2025 by rpki-client