Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e38312e3131322e302f32312d3234203d3e203136393231.roa
File:                     3230302e38312e3131322e302f32312d3234203d3e203136393231.roa (raw, json)
Hash identifier:          Nq+umXkOHK91isxdCLU9vTh1AW3f65BEu++uAGk69qE=
Subject key identifier:   29:CC:60:63:EE:CE:8A:AC:D6:9D:77:E6:7A:0C:BA:46:58:E4:3A:55
Certificate issuer:       /CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
Certificate serial:       4B5C3BA649F8388E64923570A8778B5C8F8AF04A
Authority key identifier: 30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e38312e3131322e302f32312d3234203d3e203136393231.roa
Signing time:             Tue 04 Feb 2025 18:02:32 +0000
ROA not before:           Tue 04 Feb 2025 17:57:32 +0000
ROA not after:            Tue 03 Feb 2026 18:02:32 +0000
asID:                     16921
IP address blocks:        200.81.112.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:5c:3b:a6:49:f8:38:8e:64:92:35:70:a8:77:8b:5c:8f:8a:f0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309F045D3E1DA21589D7AFA9D296AE24D33A09EE
        Validity
            Not Before: Feb  4 17:57:32 2025 GMT
            Not After : Feb  3 18:02:32 2026 GMT
        Subject: CN=29CC6063EECE8AACD69D77E67A0CBA4658E43A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:ce:75:ad:6d:12:bc:15:97:b2:00:68:08:
                    30:4a:40:5b:9e:b9:c2:f2:47:89:3f:8c:5d:06:da:
                    65:a3:9b:a0:21:4d:90:95:67:5d:37:10:a5:20:ef:
                    fb:ce:07:3a:51:3c:48:53:bd:28:b1:85:7f:f0:a2:
                    4e:c4:83:5f:f4:d6:d2:2f:cf:b7:9a:3f:72:95:45:
                    11:45:fc:8a:4d:0a:96:2d:fe:dd:09:07:ac:d5:a0:
                    3a:94:80:83:bf:ae:0a:66:a7:fe:6c:d5:9a:fd:11:
                    1e:dc:dc:08:49:3f:d1:c0:d0:ee:f5:0b:ac:be:7f:
                    56:69:a6:a3:c4:6e:6b:e7:60:01:67:52:73:b6:3a:
                    a0:6b:c0:64:5c:fa:4a:90:10:04:0c:50:c8:78:fc:
                    a6:77:9d:f3:72:20:a7:92:a1:01:d8:51:0b:0f:f1:
                    ab:4a:28:0c:3d:91:2c:e2:96:8a:ed:35:a8:18:73:
                    0b:66:13:20:eb:2f:d3:1d:bb:72:41:3f:0c:81:0f:
                    67:43:fa:de:4b:88:85:d4:2d:a2:48:37:02:c8:6a:
                    65:a3:4b:c6:52:0e:5b:83:12:98:c5:e1:04:a8:dd:
                    6f:97:4a:30:4b:95:49:43:9a:e6:ac:e7:86:a7:81:
                    bf:bf:93:42:2c:17:9c:a1:df:5b:56:ff:76:10:97:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CC:60:63:EE:CE:8A:AC:D6:9D:77:E6:7A:0C:BA:46:58:E4:3A:55
            X509v3 Authority Key Identifier:
                keyid:30:9F:04:5D:3E:1D:A2:15:89:D7:AF:A9:D2:96:AE:24:D3:3A:09:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/309F045D3E1DA21589D7AFA9D296AE24D33A09EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84EB4C0B5FD3E1B1C92DF9F9438B730E58299D2AA11F20CBF95D845950F706BA/0/3230302e38312e3131322e302f32312d3234203d3e203136393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:55:90:95:fa:b5:fb:99:bf:13:4c:61:41:07:59:41:84:
         0f:38:04:bf:2c:b5:f6:d3:37:ff:28:65:6a:53:e9:71:95:ad:
         bd:0d:b4:83:58:45:f2:f2:75:bf:0c:61:6b:44:a7:34:29:33:
         7d:22:c0:d8:b5:15:d3:1a:5c:e3:a7:4a:08:62:ee:e8:40:7a:
         e3:04:a6:07:6a:3f:6e:86:95:60:e6:04:e6:fd:bf:e6:d6:a0:
         eb:48:6f:d2:1a:74:b5:57:f5:a9:05:22:ce:54:5d:ec:c8:f1:
         ea:9e:cf:cf:81:35:0b:ad:5e:09:1c:8b:ca:3e:3a:72:b6:a5:
         d4:65:f0:e3:b8:65:fa:c4:86:a2:05:e6:28:70:0c:31:45:23:
         d1:de:9b:87:d1:f7:67:5a:04:d0:0b:8f:05:51:59:44:df:bb:
         1c:9e:50:c4:47:f7:be:f3:cc:6b:df:ce:5a:bd:f6:54:d4:22:
         9d:5c:10:fb:d3:dd:34:5c:b5:b3:a0:4b:14:ed:c6:54:3b:1c:
         fb:fe:f2:cb:45:7e:eb:fc:05:54:f3:8a:77:c6:48:fa:82:54:
         f6:a7:b5:06:64:48:43:08:f1:ee:8f:e3:1e:08:76:da:76:7f:
         78:df:c1:4f:3c:44:25:05:69:b4:b0:cb:0c:c7:0a:67:b5:86:
         65:12:b6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:17 2025 by rpki-client