Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa
File:                     3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa (raw, json)
Hash identifier:          f9pjx+KsDvRQm9eI+2o/OtkDm8S5jayF/zjf5FQDpYQ=
Subject key identifier:   25:6B:19:EC:7E:16:F7:44:7A:45:39:D9:10:1C:0D:87:78:00:9A:FF
Certificate issuer:       /CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
Certificate serial:       17C7C77A678269522B115F658A3EFDACFE43DF5E
Authority key identifier: B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa
Signing time:             Tue 04 Feb 2025 18:11:55 +0000
ROA not before:           Tue 04 Feb 2025 18:06:55 +0000
ROA not after:            Tue 03 Feb 2026 18:11:55 +0000
asID:                     52283
IP address blocks:        200.108.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c7:c7:7a:67:82:69:52:2b:11:5f:65:8a:3e:fd:ac:fe:43:df:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B168144FAA075D3D9B10EF691FC55E6A3A3E172E
        Validity
            Not Before: Feb  4 18:06:55 2025 GMT
            Not After : Feb  3 18:11:55 2026 GMT
        Subject: CN=256B19EC7E16F7447A4539D9101C0D8778009AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0c:0b:a4:20:37:80:b9:c4:ce:76:94:c8:3c:
                    f3:9d:39:91:33:ae:83:3f:01:08:43:3a:b0:21:64:
                    68:ed:65:f5:e2:68:db:c8:d8:77:b9:d1:fb:57:8b:
                    1c:2e:6b:be:96:de:f7:4a:b0:09:79:2c:72:be:1e:
                    b8:2d:18:02:52:20:06:ae:e4:5a:19:b5:5d:49:db:
                    1d:78:dd:0f:df:7a:30:8b:e5:c1:d3:d1:60:e6:0f:
                    62:58:5b:f2:9f:15:94:09:08:bf:d5:2a:73:3f:ea:
                    ff:79:41:13:47:f8:23:d7:62:8d:56:4a:28:de:34:
                    a5:86:07:64:a4:32:64:08:38:c0:db:45:a9:0e:7a:
                    f2:91:be:c4:25:48:51:ee:9e:2a:ef:af:f8:16:24:
                    49:44:96:26:00:35:3c:16:be:fb:e6:1e:8a:df:e0:
                    86:72:64:85:ae:38:7a:8c:27:60:36:96:16:ea:0d:
                    d9:f7:a1:6c:ad:0d:86:88:47:4b:48:e0:0e:a8:de:
                    9d:31:86:d8:64:01:d3:0a:1d:8f:94:93:2c:f2:24:
                    52:14:fd:19:f8:b9:ee:1b:f7:a5:cf:04:d3:88:0a:
                    94:3e:c7:5e:4c:66:f3:53:4b:5b:ed:82:57:be:b6:
                    4d:ca:aa:94:10:41:c3:a1:da:58:92:2f:42:42:ed:
                    f5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:19:EC:7E:16:F7:44:7A:45:39:D9:10:1C:0D:87:78:00:9A:FF
            X509v3 Authority Key Identifier:
                keyid:B1:68:14:4F:AA:07:5D:3D:9B:10:EF:69:1F:C5:5E:6A:3A:3E:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B168144FAA075D3D9B10EF691FC55E6A3A3E172E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9E4A36671FA7DBA911B98A46CD51962D9665B0DE68EA50EBF43C92EAE8020FFA/0/3230302e3130382e3131392e302f32342d3234203d3e203532323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:80:e3:cb:dd:2e:78:f7:18:f7:57:07:12:f0:2c:8d:fd:94:
         29:67:66:82:a3:96:e1:a2:11:7f:02:61:fa:eb:a8:db:19:93:
         10:5d:29:53:bf:b7:79:9d:4d:de:74:29:ba:4c:12:86:1e:58:
         d2:5f:e7:55:c7:b7:15:d8:cb:a6:b6:79:4e:77:28:01:8f:5d:
         24:1e:39:93:ac:8e:5a:09:09:2e:d0:6e:96:11:e2:53:ff:48:
         f1:62:77:39:1d:b5:18:c7:d1:d3:d2:b3:69:15:35:db:e4:a2:
         8e:33:5d:80:f3:9c:5a:24:e6:5f:14:3c:fa:f9:3d:b3:4f:e3:
         eb:f4:de:04:7e:b3:c3:71:cc:d9:7a:bf:7a:cc:ff:a5:9b:c0:
         66:b5:f1:df:85:b6:a8:36:e7:66:02:5a:7e:b6:c7:ce:5c:10:
         d7:2b:95:fb:31:0e:48:f5:de:52:8e:d0:06:af:8a:10:e8:33:
         14:bb:6e:82:13:27:54:a8:ac:9e:19:c7:22:59:dd:28:31:d9:
         f7:7c:f3:f3:a5:2c:ef:fd:83:a3:6f:56:a2:61:23:54:20:5b:
         a9:1d:26:75:96:b4:7c:02:a9:40:3c:bc:29:8c:cd:66:8d:99:
         31:1f:22:51:ad:3c:00:c1:9c:72:dd:be:51:e1:b3:e1:4f:dd:
         95:0c:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:34 2025 by rpki-client