Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
File:                     3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa (raw, json)
Hash identifier:          2BBdboIsdSokxTZEqwaWDxlt4AilFMmXoA73cKW9REI=
Subject key identifier:   1A:D2:96:62:4B:7B:A5:A1:7F:5A:AC:97:12:ED:D1:EC:3E:B8:6C:07
Certificate issuer:       /CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
Certificate serial:       6F7970B05DCC4A93225CB9F960B5A0F12140B88E
Authority key identifier: 44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa
Signing time:             Tue 04 Feb 2025 18:34:18 +0000
ROA not before:           Tue 04 Feb 2025 18:29:18 +0000
ROA not after:            Tue 03 Feb 2026 18:34:18 +0000
asID:                     271867
IP address blocks:        200.36.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:79:70:b0:5d:cc:4a:93:22:5c:b9:f9:60:b5:a0:f1:21:40:b8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6
        Validity
            Not Before: Feb  4 18:29:18 2025 GMT
            Not After : Feb  3 18:34:18 2026 GMT
        Subject: CN=1AD296624B7BA5A17F5AAC9712EDD1EC3EB86C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a0:5f:32:a7:dc:97:69:97:bb:6b:92:ec:9c:
                    b0:5f:03:7c:06:49:05:de:46:3f:6e:c2:0f:19:32:
                    9c:f2:52:00:fc:60:1c:5c:30:f7:75:dd:11:e4:1d:
                    3f:6b:ac:9f:24:e6:4b:f8:2f:3b:26:d0:e2:11:48:
                    9e:16:65:5a:a1:b1:06:32:68:d5:af:e8:be:b1:c2:
                    2f:a2:a6:aa:6f:0e:c3:ec:90:96:11:b8:5f:c4:d8:
                    97:08:08:91:71:0c:6a:8b:84:6e:96:6c:4a:8a:b7:
                    8b:6b:85:e7:fe:e9:5b:57:7c:37:24:cd:16:10:65:
                    c0:b7:fa:85:e7:cc:7a:97:92:16:ac:bb:6d:51:a5:
                    66:a7:44:d0:f3:63:66:ae:23:43:b8:c4:85:c5:4a:
                    70:3d:88:e0:06:83:aa:71:3f:45:0b:08:84:b4:03:
                    3a:bd:e3:72:bc:31:94:60:65:d5:0c:6d:d7:34:fb:
                    50:dc:9f:82:dd:53:9e:16:0f:20:08:ab:c7:8d:34:
                    38:38:52:f6:d2:67:67:f0:74:9e:cb:c6:75:32:e1:
                    cc:b2:11:e1:e5:b2:92:8e:63:ac:dc:8f:b0:3c:39:
                    45:75:16:87:f2:0d:f5:17:f5:b7:09:a4:a1:83:2e:
                    56:62:bd:e1:3a:e6:dd:78:0b:cc:83:cb:29:07:60:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D2:96:62:4B:7B:A5:A1:7F:5A:AC:97:12:ED:D1:EC:3E:B8:6C:07
            X509v3 Authority Key Identifier:
                keyid:44:F0:97:D1:B0:DF:1D:2B:00:D7:14:F0:E6:C7:61:BF:12:CC:23:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44F097D1B0DF1D2B00D714F0E6C761BF12CC23F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DA876A95E4C3C1B90C882840AA7165106F5F8EE4B1219C7E14789DC0ABF614D/0/3230302e33362e3230382e302f32342d3234203d3e20323731383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:ef:45:a4:9f:2b:4a:c8:bf:d9:31:b1:1a:78:f7:00:69:
         ed:11:e1:83:3e:75:bb:99:e0:54:18:2e:b0:7b:32:a5:dc:44:
         b7:f2:55:47:b3:38:8e:7a:66:ab:a8:bb:97:5a:98:fa:53:77:
         24:36:1b:96:56:c6:6d:8d:97:20:10:e6:28:e2:4a:00:fe:45:
         ef:d7:7c:fc:30:b8:10:27:82:54:f2:88:f8:27:d9:b4:2c:e6:
         2e:a2:1f:fe:39:f8:c4:17:0f:c0:af:15:87:5b:11:ec:0a:21:
         ed:8d:8a:31:10:8c:a8:4e:93:96:23:97:14:56:57:74:31:4e:
         fc:6a:8f:f9:e7:36:5c:14:81:75:0a:0e:2b:27:f8:d3:4b:5f:
         89:7e:97:e0:50:eb:28:e1:98:8d:40:2b:2f:ee:ba:fa:16:81:
         ac:94:94:84:33:27:c4:fc:f0:2e:7b:f9:24:09:b4:28:9f:4c:
         c9:de:53:91:04:76:94:a5:39:19:c6:20:f3:d6:39:98:e7:44:
         68:a1:ea:23:07:c5:19:b8:3c:21:82:c9:73:80:9a:3a:79:37:
         51:e2:b4:48:af:89:c6:c8:cb:36:09:4d:6a:72:03:ce:87:a5:
         b4:ac:a4:e6:01:c2:61:f0:0d:95:70:89:79:68:dc:ff:0d:1b:
         43:b6:37:c8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb3lwsF3MSpMiXLn5YLWg8SFAuI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRGMDk3RDFCMERGMUQyQjAwRDcxNEYwRTZDNzYxQkYx
MkNDMjNGNjAeFw0yNTAyMDQxODI5MThaFw0yNjAyMDMxODM0MThaMDMxMTAvBgNV
BAMTKDFBRDI5NjYyNEI3QkE1QTE3RjVBQUM5NzEyRUREMUVDM0VCODZDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpoF8yp9yXaZe7a5LsnLBfA3wG
SQXeRj9uwg8ZMpzyUgD8YBxcMPd13RHkHT9rrJ8k5kv4Lzsm0OIRSJ4WZVqhsQYy
aNWv6L6xwi+ipqpvDsPskJYRuF/E2JcICJFxDGqLhG6WbEqKt4trhef+6VtXfDck
zRYQZcC3+oXnzHqXkhasu21RpWanRNDzY2auI0O4xIXFSnA9iOAGg6pxP0ULCIS0
Azq943K8MZRgZdUMbdc0+1Dcn4LdU54WDyAIq8eNNDg4UvbSZ2fwdJ7LxnUy4cyy
EeHlspKOY6zcj7A8OUV1FofyDfUX9bcJpKGDLlZiveE65t14C8yDyykHYI+DAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGtKWYkt7paF/WqyXEu3R7D64bAcwHwYDVR0j
BBgwFoAURPCX0bDfHSsA1xTw5sdhvxLMI/YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84REE4NzZBOTVFNEMzQzFCOTBDODgyODQwQUE3MTY1MTA2
RjVGOEVFNEIxMjE5QzdFMTQ3ODlEQzBBQkY2MTRELzAvNDRGMDk3RDFCMERGMUQy
QjAwRDcxNEYwRTZDNzYxQkYxMkNDMjNGNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80NEYwOTdEMUIwREYxRDJCMDBE
NzE0RjBFNkM3NjFCRjEyQ0MyM0Y2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOERBODc2QTk1RTRDM0MxQjkwQzg4Mjg0MEFBNzE2NTEwNkY1RjhFRTRC
MTIxOUM3RTE0Nzg5REMwQUJGNjE0RC8wLzMyMzAzMDJlMzMzNjJlMzIzMDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzgzNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyCTQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCmS+9FpJ8rSsi/2TGxGnj3AGntEeGDPnW7meBU
GC6wezKl3ES38lVHsziOemarqLuXWpj6U3ckNhuWVsZtjZcgEOYo4koA/kXv13z8
MLgQJ4JU8oj4J9m0LOYuoh/+OfjEFw/ArxWHWxHsCiHtjYoxEIyoTpOWI5cUVld0
MU78ao/55zZcFIF1Cg4rJ/jTS1+JfpfgUOso4ZiNQCsv7rr6FoGslJSEMyfE/PAu
e/kkCbQon0zJ3lORBHaUpTkZxiDz1jmY50RooeojB8UZuDwhgslzgJo6eTdR4rRI
r4nGyMs2CU1qcgPOh6W0rKTmAcJh8A2VcIl5aNz/DRtDtjfI
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:45 2025 by rpki-client