Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235352e302f32342d3234203d3e203238303530.roa
File:                     3230302e37342e3235352e302f32342d3234203d3e203238303530.roa (raw, json)
Hash identifier:          SXF+iCOaXxohlu09DbmzNtLAo1poH9lkJGXGcaHFcJA=
Subject key identifier:   85:9E:3E:86:1F:15:FE:75:78:CE:62:30:C0:73:BA:B1:F1:30:2F:F1
Certificate issuer:       /CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
Certificate serial:       38CF57B4E6FA3742F31E8F2671E2F32277C60079
Authority key identifier: BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235352e302f32342d3234203d3e203238303530.roa
Signing time:             Tue 04 Feb 2025 18:32:48 +0000
ROA not before:           Tue 04 Feb 2025 18:27:48 +0000
ROA not after:            Tue 03 Feb 2026 18:32:48 +0000
asID:                     28050
IP address blocks:        200.74.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cf:57:b4:e6:fa:37:42:f3:1e:8f:26:71:e2:f3:22:77:c6:00:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B
        Validity
            Not Before: Feb  4 18:27:48 2025 GMT
            Not After : Feb  3 18:32:48 2026 GMT
        Subject: CN=859E3E861F15FE7578CE6230C073BAB1F1302FF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:c0:d3:30:b6:20:4a:12:26:03:e8:80:44:
                    cb:1c:a2:7f:a7:4d:09:e3:4d:bb:99:1c:01:76:7c:
                    33:01:b2:06:a8:2d:e6:50:3d:c4:ce:cd:e6:2a:f7:
                    a2:6a:61:f3:59:9a:b2:21:5b:a1:2c:30:cd:f4:50:
                    80:fb:ff:06:73:ce:46:1c:8b:1a:75:9a:78:0f:7b:
                    76:5a:63:db:e0:9b:a4:11:6c:df:9a:54:1f:7b:d7:
                    9c:d6:d7:50:61:3d:4b:7c:76:fe:18:05:4b:e7:c8:
                    e3:b8:34:47:29:35:01:8f:1f:d3:64:2e:07:0b:8f:
                    af:d6:f0:91:ab:16:07:59:9d:8c:ef:ac:1e:01:7d:
                    04:3a:7a:67:e9:95:65:9f:25:79:f5:48:09:27:41:
                    2f:f1:40:9e:5d:a8:a4:c3:ea:7c:93:d0:b3:ac:04:
                    b8:05:e4:06:46:7d:1d:10:d7:4e:b5:e8:41:00:5c:
                    37:bb:c8:ae:55:62:a6:38:5c:8f:3f:c0:74:56:4a:
                    6f:11:95:54:42:24:88:21:cf:5a:ab:3e:1a:7f:3f:
                    7d:cf:3a:87:d7:49:86:8d:47:68:55:03:84:26:7a:
                    c4:4e:e1:30:5a:06:dd:ae:59:30:9b:fc:57:f9:3d:
                    d0:72:a2:78:8a:ec:5f:08:65:5a:af:e0:16:60:62:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9E:3E:86:1F:15:FE:75:78:CE:62:30:C0:73:BA:B1:F1:30:2F:F1
            X509v3 Authority Key Identifier:
                keyid:BD:5C:8B:3B:9F:5A:D1:E1:22:59:0B:3A:8C:84:9B:67:CE:09:B5:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD5C8B3B9F5AD1E122590B3A8C849B67CE09B50B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F39A89B89F9B334173387B21396CDACBF43847171DB32191BAE9418549B59F4/0/3230302e37342e3235352e302f32342d3234203d3e203238303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:1c:10:40:2e:72:cb:11:48:58:54:8b:d6:10:b7:a7:cc:
         a6:50:86:35:4a:64:33:21:73:ae:fe:b7:7e:6c:52:03:5b:df:
         d8:54:39:27:f5:90:68:48:50:8d:65:b9:67:0e:93:ee:32:c6:
         7f:28:41:15:31:65:e2:19:4c:80:44:fc:78:a0:ef:e7:c1:86:
         86:85:98:2c:b0:d3:02:d0:51:90:93:6a:f2:21:5d:c5:36:02:
         e1:e4:24:08:5c:86:7e:ac:99:59:da:ca:8d:54:6f:6c:7e:27:
         99:b0:dc:ee:e1:6c:8c:86:57:c0:e9:b5:a8:5c:5a:93:0f:3d:
         a7:a3:92:84:51:8e:6b:bc:0e:ef:be:ae:36:b1:9e:9d:da:b1:
         02:d5:27:8a:87:01:86:01:32:55:b5:39:14:99:08:75:21:55:
         fd:ed:c4:c1:5b:a9:aa:f0:04:b7:f9:8b:5a:39:3f:84:3f:78:
         92:4e:dd:2e:c3:62:cf:d3:5c:2a:41:5c:be:d9:e5:54:e6:bb:
         57:39:06:b5:b9:be:d2:42:3a:06:6d:3a:c4:e1:a6:cf:6a:53:
         e9:e1:cb:73:d3:f1:8e:aa:bf:8c:d3:cc:60:20:4e:79:b3:00:
         9d:19:2f:d9:7f:e7:55:21:4e:a8:1d:23:d3:07:47:4d:86:c9:
         33:f3:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:11 2025 by rpki-client