Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa
File:                     3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa (raw, json)
Hash identifier:          K+D3vAb/MDFy/4KFKdtsmu7UaFVLiWEmWr2Hrq/vKFs=
Subject key identifier:   44:E6:1A:2A:BB:BD:E2:35:14:8D:BC:A7:FC:11:FE:6C:5E:C1:76:23
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       41235246D05AAEF062EC8A62EBE32B9B2AAE7FB4
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa
Signing time:             Tue 04 Feb 2025 18:02:33 +0000
ROA not before:           Tue 04 Feb 2025 17:57:33 +0000
ROA not after:            Tue 03 Feb 2026 18:02:33 +0000
asID:                     16921
IP address blocks:        200.108.120.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:23:52:46:d0:5a:ae:f0:62:ec:8a:62:eb:e3:2b:9b:2a:ae:7f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Feb  4 17:57:33 2025 GMT
            Not After : Feb  3 18:02:33 2026 GMT
        Subject: CN=44E61A2ABBBDE235148DBCA7FC11FE6C5EC17623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ec:0d:59:33:4f:18:1d:5d:d2:42:bb:f0:53:
                    c9:57:32:ac:c4:ff:21:e3:a9:6f:0c:b0:c9:32:b9:
                    93:a7:f0:4f:38:d1:70:b2:f3:eb:4f:48:65:1b:bc:
                    0a:19:9e:84:61:98:2d:c9:ac:b9:0a:e7:ae:44:56:
                    b3:6a:f6:34:98:4a:43:13:81:3a:10:54:2e:dc:a9:
                    cf:b1:af:c4:2c:88:12:f3:ba:fe:0c:8a:6e:68:d8:
                    cc:21:d1:45:e0:6b:e6:36:ab:bb:9f:34:d6:35:ed:
                    97:f2:e6:b6:93:92:84:67:0d:a9:ba:17:dd:7f:13:
                    7c:c3:ab:bc:c4:48:fc:15:d0:48:fb:f4:e1:3f:0b:
                    bb:61:b0:51:34:f6:89:32:f5:19:8b:d5:78:0f:08:
                    52:f4:d4:87:1b:20:97:44:d8:9b:eb:be:cc:11:36:
                    7f:c7:7e:d5:40:04:c2:ed:af:50:62:61:38:24:25:
                    84:2d:0c:e4:fa:21:9d:b7:15:5a:2f:ca:f8:ad:67:
                    d9:bf:dd:43:23:a5:03:de:09:91:59:1d:4c:b6:28:
                    ca:98:51:dc:d1:e6:b1:25:47:08:53:37:7b:14:f0:
                    ee:5c:4b:09:93:94:5f:86:a2:7d:d9:ae:35:b3:0e:
                    b5:3e:76:42:3d:68:5d:37:30:9d:de:ed:d0:5d:f8:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:1A:2A:BB:BD:E2:35:14:8D:BC:A7:FC:11:FE:6C:5E:C1:76:23
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e3130382e3132302e302f32312d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:50:f8:58:2d:2a:85:b6:f1:dd:03:bf:4f:60:c2:9f:d0:
         7c:87:79:23:5c:8e:35:aa:69:43:52:5e:15:64:9b:75:9f:4f:
         a1:68:d7:c9:ad:e5:00:2f:98:a5:7a:ae:dd:32:b4:dd:de:ee:
         38:31:0c:52:f0:4e:f0:b5:d7:3a:bb:06:85:17:92:db:47:a1:
         bf:11:ca:fc:63:43:fd:90:3a:7a:1f:81:71:04:3e:05:e8:b9:
         50:d5:f7:76:00:37:13:7f:17:b7:9c:76:be:3d:16:a9:61:fe:
         9c:d9:d6:9e:7e:f2:97:49:5a:4e:37:a7:f2:a8:54:f2:82:09:
         08:b2:59:ba:d4:c6:fb:e6:31:5a:e6:f3:88:05:4e:5d:28:a8:
         0d:24:e2:d6:f3:df:83:23:26:cb:6c:2f:3b:92:32:e0:24:c4:
         36:a1:1d:83:64:58:b9:fb:5a:33:57:64:bb:8e:bb:c3:5a:02:
         f5:bc:8c:90:24:a6:5f:86:85:3f:3f:2c:30:c6:0e:68:94:d6:
         91:53:36:49:c5:1b:80:50:9d:4a:22:41:e0:64:30:50:70:ad:
         c2:eb:c0:9c:9c:24:c3:99:d6:95:23:2c:81:a4:43:e8:48:18:
         28:6c:5e:dc:d7:82:c9:12:46:84:a0:bb:ae:0c:95:f5:6c:e9:
         85:3d:42:6e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUQSNSRtBarvBi7Ipi6+Mrmyquf7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA5RjA0NUQzRTFEQTIxNTg5RDdBRkE5RDI5NkFFMjRE
MzNBMDlFRTAeFw0yNTAyMDQxNzU3MzNaFw0yNjAyMDMxODAyMzNaMDMxMTAvBgNV
BAMTKDQ0RTYxQTJBQkJCREUyMzUxNDhEQkNBN0ZDMTFGRTZDNUVDMTc2MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS7A1ZM08YHV3SQrvwU8lXMqzE
/yHjqW8MsMkyuZOn8E840XCy8+tPSGUbvAoZnoRhmC3JrLkK565EVrNq9jSYSkMT
gToQVC7cqc+xr8QsiBLzuv4Mim5o2Mwh0UXga+Y2q7ufNNY17Zfy5raTkoRnDam6
F91/E3zDq7zESPwV0Ej79OE/C7thsFE09oky9RmL1XgPCFL01IcbIJdE2JvrvswR
Nn/HftVABMLtr1BiYTgkJYQtDOT6IZ23FVovyvitZ9m/3UMjpQPeCZFZHUy2KMqY
UdzR5rElRwhTN3sU8O5cSwmTlF+Gon3ZrjWzDrU+dkI9aF03MJ3e7dBd+ELvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUROYaKru94jUUjbyn/BH+bF7BdiMwHwYDVR0j
BBgwFoAUMJ8EXT4dohWJ16+p0pauJNM6Ce4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEVCNEMwQjVGRDNFMUIxQzkyREY5Rjk0MzhCNzMwRTU4
Mjk5RDJBQTExRjIwQ0JGOTVEODQ1OTUwRjcwNkJBLzAvMzA5RjA0NUQzRTFEQTIx
NTg5RDdBRkE5RDI5NkFFMjREMzNBMDlFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDlGMDQ1RDNFMURBMjE1ODlE
N0FGQTlEMjk2QUUyNEQzM0EwOUVFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRFQjRDMEI1RkQzRTFCMUM5MkRGOUY5NDM4QjczMEU1ODI5OUQyQUEx
MUYyMENCRjk1RDg0NTk1MEY3MDZCQS8wLzMyMzAzMDJlMzEzMDM4MmUzMTMyMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM2MzkzMjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyGx4
MA0GCSqGSIb3DQEBCwUAA4IBAQAC8VD4WC0qhbbx3QO/T2DCn9B8h3kjXI41qmlD
Ul4VZJt1n0+haNfJreUAL5ileq7dMrTd3u44MQxS8E7wtdc6uwaFF5LbR6G/Ecr8
Y0P9kDp6H4FxBD4F6LlQ1fd2ADcTfxe3nHa+PRapYf6c2daefvKXSVpON6fyqFTy
ggkIslm61Mb75jFa5vOIBU5dKKgNJOLW89+DIybLbC87kjLgJMQ2oR2DZFi5+1oz
V2S7jrvDWgL1vIyQJKZfhoU/Pywwxg5olNaRUzZJxRuAUJ1KIkHgZDBQcK3C68Cc
nCTDmdaVIyyBpEPoSBgobF7c14LJEkaEoLuuDJX1bOmFPUJu
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:10 2025 by rpki-client