Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3231203d3e2037393635.roa
File:                     3230302e322e382e302f32312d3231203d3e2037393635.roa (raw, json)
Hash identifier:          S3Ra0kjQMTmUF9gMNdr9BixzoE0PGbCFKeKr4b9qc4A=
Subject key identifier:   5D:B5:47:74:CD:2A:19:B5:4E:0B:52:1B:7D:4E:E4:D2:8C:9F:42:3B
Certificate issuer:       /CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
Certificate serial:       2C158257D1041B793D899C3E0BD5A18F91A02B87
Authority key identifier: BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3231203d3e2037393635.roa
Signing time:             Tue 04 Feb 2025 19:58:45 +0000
ROA not before:           Tue 04 Feb 2025 19:53:45 +0000
ROA not after:            Tue 03 Feb 2026 19:58:45 +0000
asID:                     7965
IP address blocks:        200.2.8.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:15:82:57:d1:04:1b:79:3d:89:9c:3e:0b:d5:a1:8f:91:a0:2b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC068F475265AE58CC288A4ED10CEBA18C51FD83
        Validity
            Not Before: Feb  4 19:53:45 2025 GMT
            Not After : Feb  3 19:58:45 2026 GMT
        Subject: CN=5DB54774CD2A19B54E0B521B7D4EE4D28C9F423B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9a:80:2d:c7:f7:08:b8:27:9b:2a:c9:41:fa:
                    5e:0a:80:d5:65:82:c8:98:58:76:a4:9f:8c:d9:5d:
                    05:a9:a8:76:88:36:c0:1d:14:c8:64:db:0e:1b:51:
                    92:da:3f:1e:6c:09:ff:e6:97:a8:c0:27:03:f4:8a:
                    fa:68:0f:e5:cb:2b:ab:04:16:44:21:f8:3c:d3:3d:
                    29:e4:b5:33:22:46:16:fe:07:14:db:79:a4:59:f9:
                    e7:63:a3:c8:cd:08:36:04:51:ad:23:d8:c0:a7:9f:
                    e4:f7:c6:8d:07:4d:7c:bb:ad:68:9f:46:4f:76:eb:
                    88:01:7b:b8:de:db:91:80:55:45:28:58:ae:71:ed:
                    b2:14:12:84:cc:86:61:3b:53:b9:4b:a3:13:a3:9c:
                    f0:0b:2f:0d:58:74:f5:ec:23:ae:ca:c6:79:18:c2:
                    02:52:bb:87:e3:0f:90:ab:22:76:c8:d1:8b:32:27:
                    26:86:bd:15:d1:ed:eb:ad:f2:e0:93:4e:94:8b:bd:
                    2f:09:ae:e4:3a:ca:26:a6:c7:48:08:06:67:57:88:
                    ac:09:70:60:96:a6:8e:c4:bd:56:8c:a8:41:00:23:
                    9b:06:83:54:ce:df:29:7a:b2:d8:ec:5f:c8:05:95:
                    57:8a:6a:96:0d:08:8e:b4:8b:d1:b3:f9:9a:81:18:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B5:47:74:CD:2A:19:B5:4E:0B:52:1B:7D:4E:E4:D2:8C:9F:42:3B
            X509v3 Authority Key Identifier:
                keyid:BC:06:8F:47:52:65:AE:58:CC:28:8A:4E:D1:0C:EB:A1:8C:51:FD:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BC068F475265AE58CC288A4ED10CEBA18C51FD83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80E070B8BB52E4E9798E81C2D826AF3F0D607547DE9117D95E41110FAE79A1CC/0/3230302e322e382e302f32312d3231203d3e2037393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:9e:27:30:88:9f:63:62:9e:28:7e:cd:5e:11:90:6f:12:
         35:b5:35:94:39:a1:a1:1c:fd:c0:d0:ac:1e:52:5e:18:33:ff:
         e3:93:55:a0:db:f8:10:c2:94:29:ed:f2:3b:cd:69:5b:60:82:
         76:a9:34:76:a5:52:87:6b:52:77:dd:ec:28:98:80:3c:0d:52:
         2b:a7:97:01:a6:46:75:a8:11:c8:19:97:c3:78:b2:28:e3:73:
         78:a5:db:38:73:f3:65:ba:0a:31:5f:7b:4b:89:80:4e:65:54:
         81:ea:3e:32:c8:de:b5:5c:20:7d:cf:d8:bb:7c:a7:9b:5e:43:
         88:56:80:ea:a1:9c:f1:9b:39:4e:1e:72:6c:7b:03:7a:43:d6:
         91:3f:02:2a:1e:b3:e2:62:02:38:7d:23:4c:b5:3c:75:3c:41:
         bd:9d:b5:d1:f1:3c:4a:49:7e:31:82:db:9e:f2:f3:fd:78:83:
         95:a5:02:f4:78:9f:7e:0e:4f:fe:ab:42:7b:01:4f:55:6b:81:
         ed:0b:ba:49:95:d8:63:93:b2:ca:d9:e8:2c:07:de:16:05:9d:
         2f:71:2a:76:ef:d4:d3:5a:84:eb:3b:35:0e:a3:8c:d5:2b:cd:
         26:52:82:57:d9:8d:b1:20:77:e4:a9:5b:fb:a9:f3:ed:c5:7f:
         43:08:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:57:42 2025 by rpki-client