Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235342e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235342e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          JY8I2y8DKYtW0y3ksx0VtUBjarL88aRVe3sizrByqR0=
Subject key identifier:   73:F2:88:BB:D3:2F:0A:C4:8A:78:4C:FF:B2:75:34:AA:08:C1:85:70
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       3F04067C9881EFB9DD644490C02376F031410680
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235342e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:47 +0000
ROA not before:           Tue 04 Feb 2025 18:27:47 +0000
ROA not after:            Tue 03 Feb 2026 18:32:47 +0000
asID:                     28050
IP address blocks:        200.74.254.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:06:7c:98:81:ef:b9:dd:64:44:90:c0:23:76:f0:31:41:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:47 2025 GMT
            Not After : Feb  3 18:32:47 2026 GMT
        Subject: CN=73F288BBD32F0AC48A784CFFB27534AA08C18570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b9:e6:0b:a3:e0:f0:85:ad:d3:43:3c:e9:ff:
                    fe:a2:bc:14:85:9f:f2:7c:a9:db:f6:92:67:bd:d8:
                    a0:f7:6c:28:da:60:04:67:de:9d:3e:fb:4b:52:b2:
                    85:00:d8:17:c3:6d:51:8e:33:97:01:9f:86:6f:86:
                    71:84:a8:64:f6:0a:23:7d:80:22:2b:41:43:e9:92:
                    c8:6a:86:0f:19:86:41:92:0c:76:cd:af:6c:25:5b:
                    3c:fe:06:01:68:6e:4e:ec:eb:2c:17:90:d8:d6:d3:
                    ca:bb:0c:5e:b2:f6:1a:78:a0:bb:2b:4c:93:ce:2f:
                    cb:3d:16:2b:67:d6:51:fd:21:b5:46:49:b8:88:e4:
                    e2:bc:b9:13:13:35:1f:a8:8a:97:18:12:98:4f:5f:
                    63:0b:90:76:47:9e:16:a3:5d:60:73:ab:3c:a3:d9:
                    22:b2:fd:93:dd:da:5b:76:46:97:8e:ff:e3:fb:ab:
                    e2:fb:f2:1e:15:45:4c:12:b2:b3:a6:b2:26:ec:02:
                    6c:42:0c:4e:29:2f:da:e9:c1:37:01:dd:f8:78:9f:
                    b5:53:db:d1:c8:2b:91:9e:ff:91:7c:d1:f0:b2:cd:
                    ce:27:a4:dc:7d:9a:39:24:6e:4b:e1:57:6a:d6:ce:
                    8b:ae:4e:27:a7:d2:82:c3:26:ce:8c:5f:bb:22:f3:
                    f6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F2:88:BB:D3:2F:0A:C4:8A:78:4C:FF:B2:75:34:AA:08:C1:85:70
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235342e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:0f:60:f3:fd:d0:af:a3:06:25:a0:a8:83:fd:d6:46:e7:bf:
         5c:80:ad:ee:7c:b3:0c:6e:4b:ee:ad:1a:af:08:98:39:09:69:
         81:17:9e:2f:8e:cd:05:bb:5a:a0:42:f1:28:8f:31:2b:14:5d:
         8b:d1:9f:e6:3c:3b:b6:45:1d:d0:49:64:f9:af:47:65:f8:14:
         ba:42:e5:52:f4:45:91:8d:15:89:5a:21:c8:ab:17:38:fe:e1:
         11:68:47:a6:7b:6e:2d:63:b0:86:82:a9:d1:62:00:c0:9d:65:
         59:5d:54:6f:7f:a0:64:a1:55:f0:f8:94:84:cb:43:50:78:6c:
         58:d7:19:68:13:56:9c:ed:03:f0:a8:a8:0f:7f:cc:e5:0b:72:
         5f:20:bc:00:ff:a6:8a:3b:f7:26:df:2b:05:3f:1d:1c:67:bd:
         78:ec:1b:de:28:8c:5f:b6:be:a0:a4:34:fa:09:84:45:51:b1:
         ff:63:67:9a:e2:9a:27:8d:62:aa:db:8d:8d:21:3f:7f:c8:5f:
         05:c5:5b:96:f3:aa:c8:f2:98:21:55:0f:42:27:5d:31:f9:84:
         08:2f:60:cb:4f:99:b3:dd:59:44:c7:4d:d8:b3:27:8d:0c:5a:
         15:b3:36:ef:54:94:2e:b2:cc:6d:bc:de:b2:5b:7b:b2:3f:70:
         96:95:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:48 2025 by rpki-client