Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e382e302f32312d3232203d3e203139313830.roa
File:                     3230302e3131302e382e302f32312d3232203d3e203139313830.roa (raw, json)
Hash identifier:          SnjbQZuoZS3uyeOq+BTJFwEXId3rtjggtZ+sdNjg01I=
Subject key identifier:   EE:50:C3:5F:9A:11:D8:43:B0:1B:6B:83:C1:46:C4:4A:A7:00:A7:1D
Certificate issuer:       /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial:       6B96DBFD222D13337BF871165D3CAFD89B55E5E2
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e382e302f32312d3232203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:18:03 +0000
ROA not before:           Tue 04 Feb 2025 18:13:03 +0000
ROA not after:            Tue 03 Feb 2026 18:18:03 +0000
asID:                     19180
IP address blocks:        200.110.8.0/21 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:96:db:fd:22:2d:13:33:7b:f8:71:16:5d:3c:af:d8:9b:55:e5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
        Validity
            Not Before: Feb  4 18:13:03 2025 GMT
            Not After : Feb  3 18:18:03 2026 GMT
        Subject: CN=EE50C35F9A11D843B01B6B83C146C44AA700A71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ca:25:62:d9:37:aa:ef:02:1e:47:c9:19:f9:
                    e5:86:20:54:2e:ef:bc:e9:39:65:ca:4e:8d:70:f5:
                    cf:09:f2:1c:fe:c1:a1:3f:9b:81:15:6c:f0:5c:cc:
                    8c:d1:e6:32:e6:f6:e0:e9:61:ac:ff:95:4c:c1:50:
                    d6:2b:d7:95:c8:5d:43:3d:7a:f0:83:6a:e5:ab:01:
                    97:36:dd:24:16:b3:ac:23:73:32:5d:9d:9f:3e:7c:
                    91:36:5d:4c:6f:9d:cf:6f:bb:fb:33:fa:cf:86:a2:
                    87:6d:e3:40:e7:55:09:0e:20:ec:b2:aa:5d:3b:6e:
                    86:41:29:1f:8f:56:ea:f2:ae:49:2b:1c:fc:b1:0a:
                    61:f3:88:6b:5a:e6:49:f7:37:39:98:a2:c4:4b:bf:
                    a4:98:3b:51:b3:a1:21:de:f6:07:2d:b7:ca:ad:cb:
                    65:ed:6f:00:17:a3:fc:1a:87:f4:7f:38:dc:8a:56:
                    e5:00:82:ef:a0:bf:31:b7:19:ef:e7:ee:7a:39:c3:
                    d9:49:e4:b9:28:4b:57:02:f5:a1:b5:fc:39:b8:22:
                    69:c9:4b:b9:96:5d:03:4b:e0:55:9b:1d:5c:b8:f7:
                    4f:97:19:e3:2b:a5:20:fa:9c:b7:16:3c:ee:2c:28:
                    d5:d3:92:d7:3c:ed:d5:7e:cb:de:12:d4:f2:11:87:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:50:C3:5F:9A:11:D8:43:B0:1B:6B:83:C1:46:C4:4A:A7:00:A7:1D
            X509v3 Authority Key Identifier:
                keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3230302e3131302e382e302f32312d3232203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:c7:33:47:70:16:6e:32:65:3f:10:19:e0:09:85:7a:d9:34:
         aa:9d:b0:cd:22:b5:23:91:25:d5:db:83:7a:3e:93:8c:e1:fc:
         3b:f8:c7:6e:c8:2f:d6:96:ae:60:4a:c3:60:c2:c1:8b:90:ff:
         d2:b6:63:65:b0:d5:f4:47:bb:b0:cf:cd:a3:9f:f7:f1:01:2b:
         94:05:08:82:0b:d4:0f:0c:31:73:0c:e9:e6:cf:51:2a:4b:0e:
         c6:62:6c:0f:47:3c:4a:13:2e:34:80:a2:3b:76:50:48:35:3d:
         f9:bf:5d:81:61:78:68:b4:ba:08:29:2c:04:28:63:0b:ce:ae:
         2d:36:f2:22:89:cf:df:11:14:62:69:df:0a:3c:6f:ae:50:50:
         f0:bd:f2:ef:13:b2:de:2f:fb:b6:17:4c:84:26:ac:42:c1:1d:
         8b:58:36:4e:f7:f0:da:2e:23:53:2d:69:d3:ae:a5:40:e0:72:
         7b:44:1f:d3:e9:2c:21:89:d8:7f:28:38:84:27:d4:ff:ad:80:
         5c:23:02:71:b0:93:fd:52:f4:03:c3:32:5f:0f:56:8f:00:18:
         1a:6d:21:88:56:4a:ec:76:b5:bc:1e:47:7f:32:85:14:06:08:
         26:9e:1a:54:22:4f:d1:7b:d4:6b:a7:5b:78:87:dd:7e:e7:df:
         71:23:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----