Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131352e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131352e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          uC72h0taYa02QozDfqjJBRYU73dFqINoFzpJpf8nP24=
Subject key identifier:   14:52:DF:3B:34:A8:EB:E4:5F:26:8C:3F:96:79:1E:CF:63:F9:78:30
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       5E6C44C9977F4B07DE08AE1C15E076BFCB433386
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131352e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 04 Feb 2025 18:11:55 +0000
ROA not before:           Tue 04 Feb 2025 18:06:55 +0000
ROA not after:            Tue 03 Feb 2026 18:11:55 +0000
asID:                     52283
IP address blocks:        200.108.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6c:44:c9:97:7f:4b:07:de:08:ae:1c:15:e0:76:bf:cb:43:33:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Feb  4 18:06:55 2025 GMT
            Not After : Feb  3 18:11:55 2026 GMT
        Subject: CN=1452DF3B34A8EBE45F268C3F96791ECF63F97830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:8b:9d:38:55:c1:92:4b:51:96:55:c0:c2:
                    7a:b9:45:87:04:86:ad:f1:92:4c:37:80:1e:3e:79:
                    f2:c5:ff:30:53:46:cf:64:9e:fb:af:2f:6f:6c:79:
                    b9:04:50:2d:d2:78:27:f3:59:7f:ce:55:d6:3e:92:
                    2b:fd:5f:fd:a4:d9:5e:20:8a:d2:46:41:b6:2a:94:
                    55:fe:59:8f:92:a6:54:28:a2:0d:40:5a:1e:20:e1:
                    ba:d8:a7:90:cc:59:ec:41:ea:d3:df:93:c4:0d:65:
                    d8:f7:af:66:d1:a9:f0:29:dd:69:4d:45:c7:f1:3a:
                    51:d6:44:93:10:f7:ea:be:27:04:58:b8:1e:cc:72:
                    c1:87:d1:df:2e:3e:d6:3a:8b:49:5c:8e:14:56:ee:
                    e4:2c:12:fa:a2:eb:ec:6d:73:a3:51:cf:7e:dd:7e:
                    d6:7f:dd:14:2d:32:88:b9:7e:94:57:cc:c9:39:64:
                    92:73:73:d9:12:5f:98:d5:63:af:e8:60:00:46:87:
                    75:9c:cb:23:e6:ba:3c:9f:38:c3:61:28:3e:aa:52:
                    8c:e8:fb:78:b4:fa:c8:35:94:be:74:1b:99:2b:4f:
                    2d:94:fc:73:23:5b:94:d5:8e:f5:e5:d3:d8:f4:90:
                    09:a0:87:a0:ed:2c:82:44:2e:59:be:bd:1b:26:32:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:DF:3B:34:A8:EB:E4:5F:26:8C:3F:96:79:1E:CF:63:F9:78:30
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131352e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e8:65:e8:d8:c5:3b:00:7b:8d:fb:20:7f:e7:a0:4b:43:df:
         14:77:bf:07:1f:d1:32:4a:6a:a3:d7:22:70:22:93:d0:25:88:
         ed:fd:47:e8:a8:12:d9:7a:00:4c:eb:3d:2e:76:87:71:c6:69:
         8f:14:1c:5c:50:e8:f3:d8:69:41:fd:00:13:99:64:62:3c:3f:
         0e:e6:af:ab:7a:c8:ae:a2:34:a3:af:9d:e5:56:7e:7f:b5:e8:
         91:d9:c6:75:40:99:ca:65:a0:f6:e8:92:d0:3e:2e:4f:88:a9:
         52:1a:dc:ff:09:f4:84:8e:dd:e1:6c:96:6d:f5:34:83:d4:18:
         31:66:bd:7f:f1:86:f6:ff:10:13:16:c7:7c:8f:40:07:02:98:
         da:03:52:1b:8d:b0:8f:a6:09:e8:e4:49:5a:25:da:29:80:ba:
         04:ff:b7:83:37:3d:59:01:32:a7:dd:6f:ca:99:ef:18:94:7b:
         50:ca:44:b3:55:a5:55:b4:e4:3c:7d:16:99:23:f0:be:21:57:
         39:3d:f1:a6:a3:8a:9a:a0:da:d1:ae:be:f1:75:d3:f5:58:71:
         63:7b:ab:01:db:90:b8:49:f5:3f:1f:56:6a:59:38:15:ba:30:
         fe:92:78:6d:24:4e:f6:3b:48:ce:37:ae:f3:55:e3:a8:94:6d:
         23:c3:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:15 2025 by rpki-client