Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa
File:                     3230302e302e37342e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          Bddvq3KOnfqrUWoO0Krc6XoXdhX+e5K0ZyzubZHIvWg=
Subject key identifier:   D5:20:20:05:FF:2C:5E:54:07:38:0F:78:57:EA:F5:CC:43:D0:83:78
Certificate issuer:       /CN=0D958177A72933A92171E747F897947268B18B32
Certificate serial:       100F925E10D371AAC383A980BA71EAFEC5C69B0B
Authority key identifier: 0D:95:81:77:A7:29:33:A9:21:71:E7:47:F8:97:94:72:68:B1:8B:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 04 Feb 2025 19:59:55 +0000
ROA not before:           Tue 04 Feb 2025 19:54:55 +0000
ROA not after:            Tue 03 Feb 2026 19:59:55 +0000
asID:                     23031
IP address blocks:        200.0.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0f:92:5e:10:d3:71:aa:c3:83:a9:80:ba:71:ea:fe:c5:c6:9b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D958177A72933A92171E747F897947268B18B32
        Validity
            Not Before: Feb  4 19:54:55 2025 GMT
            Not After : Feb  3 19:59:55 2026 GMT
        Subject: CN=D5202005FF2C5E5407380F7857EAF5CC43D08378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:d2:76:f5:03:7f:9f:e8:96:d2:13:98:b8:
                    b8:44:45:38:aa:ec:c9:ab:15:b7:3c:ac:47:fe:15:
                    5a:a9:f5:99:a8:84:ed:bf:d7:9b:b6:72:dc:17:80:
                    43:f1:65:72:81:c6:7f:6d:8a:e3:ed:14:ce:fd:f6:
                    19:ad:79:19:3e:fe:be:d1:d4:34:ec:ec:07:b4:d8:
                    d2:94:b8:e3:3d:1c:1e:d1:ab:51:00:2b:7f:ed:46:
                    0e:b2:77:5f:b0:13:9f:13:c9:48:64:a3:d9:b9:26:
                    3a:e2:e1:61:b9:bb:f5:d5:2d:f0:b2:00:53:45:7a:
                    ca:48:89:a3:50:08:f1:44:29:fd:6a:60:52:ad:c8:
                    35:58:12:4e:a7:d6:a4:d2:88:5b:66:ba:eb:f3:ef:
                    4f:a3:a1:ed:5b:d0:b5:17:52:56:5d:b4:bb:1c:6d:
                    9b:23:d1:84:50:99:80:ce:03:a9:fa:a2:c9:f2:4c:
                    e0:ce:86:5c:46:a5:40:03:6b:95:3e:95:b7:bd:47:
                    a7:ee:0f:a9:9f:4c:db:b6:8d:80:ff:63:9e:21:2c:
                    90:3a:c6:14:6f:8c:27:bc:21:8a:59:65:1e:71:7b:
                    a0:a8:30:c2:c4:ce:e8:53:8c:09:3e:8a:e2:13:d6:
                    43:3a:f7:60:ad:8d:24:11:98:1b:06:ff:72:09:db:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:20:20:05:FF:2C:5E:54:07:38:0F:78:57:EA:F5:CC:43:D0:83:78
            X509v3 Authority Key Identifier:
                keyid:0D:95:81:77:A7:29:33:A9:21:71:E7:47:F8:97:94:72:68:B1:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/0D958177A72933A92171E747F897947268B18B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D958177A72933A92171E747F897947268B18B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9041C4D86B964E48D3CC67664643C010076F2CD448DE5C5FD73F96DD714CCEC3/0/3230302e302e37342e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:e2:99:99:eb:10:06:08:7a:66:f3:1d:cb:22:e4:69:0a:
         d9:e5:6d:d0:33:8e:ca:b8:27:f4:d4:42:6c:79:06:9b:43:6e:
         b1:8a:39:54:97:48:af:df:76:e6:12:a9:7a:d5:7b:9f:b3:73:
         45:3b:19:96:57:ed:88:8e:ed:3b:b4:50:c2:92:e3:a1:77:94:
         01:f1:d2:bc:65:55:d2:82:a0:a4:45:81:a5:26:0e:6d:4d:9b:
         11:46:af:59:41:da:70:36:28:ee:3f:f9:ea:bc:f2:d6:b3:df:
         7d:bd:c7:fb:64:75:6b:40:f8:66:9b:63:82:6d:73:48:3b:1c:
         1c:d3:a5:d5:21:4e:38:00:cb:c0:b3:30:24:d6:1f:65:5c:aa:
         75:a7:6c:39:f0:62:52:f4:95:74:2f:2c:95:82:94:91:ce:ab:
         4f:b3:2e:3e:0b:f0:e4:02:5e:34:13:66:ba:f9:5e:af:9c:99:
         d5:7c:4b:a6:0d:65:01:7b:f8:dc:82:43:5e:1b:f3:f9:f1:59:
         19:e6:fc:0e:47:50:4e:d1:de:a1:04:4c:47:3b:37:fb:11:cc:
         e4:09:39:dd:92:c0:50:c5:bc:df:70:c4:34:a7:06:17:46:cc:
         ce:55:a9:a9:46:ec:a5:b0:d5:36:b5:30:98:d5:0f:e4:2c:af:
         6e:ee:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:37 2025 by rpki-client