Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          aNWH3D8jw7cEqiD2zTffeYYJ39LSPePlrq0/hobBGZg=
Subject key identifier:   69:20:0A:02:BC:4C:C9:05:C5:F4:D0:03:F0:50:62:1C:79:4F:17:99
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       1C27060F92AEE199344544AB4DEA01E4E6C73240
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:17 +0000
ROA not before:           Tue 04 Feb 2025 18:47:17 +0000
ROA not after:            Tue 03 Feb 2026 18:52:17 +0000
asID:                     20015
IP address blocks:        200.71.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:27:06:0f:92:ae:e1:99:34:45:44:ab:4d:ea:01:e4:e6:c7:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:17 2025 GMT
            Not After : Feb  3 18:52:17 2026 GMT
        Subject: CN=69200A02BC4CC905C5F4D003F050621C794F1799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:5c:a0:2b:c7:6a:53:8c:8a:9c:07:20:06:
                    08:79:7e:1e:3b:4d:16:e1:1f:b4:f1:78:d6:ab:13:
                    8a:d4:69:87:7b:8d:c2:f5:75:f6:dd:c1:f9:79:14:
                    d9:24:dc:20:66:b8:77:f4:4b:11:c4:e1:be:0e:70:
                    78:68:a1:f7:9a:d3:d3:a6:df:12:07:55:50:f7:6c:
                    1c:5f:31:ac:3d:52:d7:68:7a:25:8c:87:39:cb:b8:
                    e1:86:57:a3:ff:30:f7:23:f5:f2:68:4a:43:6d:0c:
                    f7:04:d3:2b:6f:a3:44:57:b6:48:b6:22:a3:87:ce:
                    0b:2c:c7:da:40:ae:e6:01:3c:15:ef:13:11:64:02:
                    dd:dd:f4:ce:cb:cd:41:04:69:95:48:40:04:2b:61:
                    97:c2:08:eb:31:35:89:fd:a8:dd:0c:c0:46:5b:34:
                    67:d7:1e:84:b2:e9:c7:48:2c:70:10:ac:fb:78:ee:
                    88:6b:3f:14:44:99:68:b1:3c:2a:f0:1b:20:9d:7d:
                    0f:82:02:da:a9:20:a2:75:13:a7:61:f9:8b:d7:13:
                    34:14:5a:d4:af:8c:57:c3:d7:2d:0a:fa:c8:21:30:
                    f5:9f:15:0c:4b:e3:bf:3e:ec:83:81:b9:42:d1:24:
                    bb:e5:2d:ad:4d:97:d8:77:29:25:96:3a:71:a6:8e:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:20:0A:02:BC:4C:C9:05:C5:F4:D0:03:F0:50:62:1C:79:4F:17:99
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:58:f8:74:55:91:dc:78:b6:71:d2:47:b6:f1:de:f0:dc:23:
         b8:80:10:43:1a:d4:0d:d9:66:bd:76:b1:58:15:a9:b7:0f:3f:
         50:56:d9:d0:5a:83:ec:bb:db:2f:b8:68:29:68:7b:d4:33:2c:
         e3:25:c5:a3:6f:73:0a:a7:26:fd:e1:8c:fb:39:19:5a:65:1f:
         7f:cd:ac:9b:a9:08:04:1b:bf:78:29:42:ed:e1:c2:75:83:8b:
         4b:4d:f4:d7:80:9b:02:36:e1:49:4e:05:23:67:f3:e7:ec:2e:
         df:b2:de:5f:8e:07:40:a4:44:51:46:8a:ec:91:4e:8d:c7:b1:
         68:69:9e:c0:2e:cb:d5:34:71:b4:ee:df:03:44:d6:d9:5a:9a:
         4a:f7:2d:fc:eb:4e:bf:d5:61:73:3e:d7:40:0a:9b:e1:c7:51:
         15:ba:e3:c1:aa:6d:22:3e:60:b6:58:0f:01:fa:df:87:32:87:
         64:8e:07:d7:be:34:4b:91:bd:e7:27:e4:17:25:5f:e8:8c:47:
         95:25:c4:2e:0f:96:63:f1:82:d8:19:4c:23:3f:d1:22:1d:11:
         4e:54:11:61:63:71:2d:26:04:eb:17:44:d8:cc:34:b9:31:f5:
         01:1d:86:f7:ed:74:ce:d3:52:b2:5b:74:fb:29:49:8e:38:d5:
         a2:a8:fb:81
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHCcGD5Ku4Zk0RUSrTeoB5ObHMkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzNjhBMUNDQTQzOThBQzI0NUU4MDk2RkZGMkQ5QkQ1
MTVENDJGMzAeFw0yNTAyMDQxODQ3MTdaFw0yNjAyMDMxODUyMTdaMDMxMTAvBgNV
BAMTKDY5MjAwQTAyQkM0Q0M5MDVDNUY0RDAwM0YwNTA2MjFDNzk0RjE3OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvFygK8dqU4yKnAcgBgh5fh47
TRbhH7TxeNarE4rUaYd7jcL1dfbdwfl5FNkk3CBmuHf0SxHE4b4OcHhoofea09Om
3xIHVVD3bBxfMaw9UtdoeiWMhznLuOGGV6P/MPcj9fJoSkNtDPcE0ytvo0RXtki2
IqOHzgssx9pAruYBPBXvExFkAt3d9M7LzUEEaZVIQAQrYZfCCOsxNYn9qN0MwEZb
NGfXHoSy6cdILHAQrPt47ohrPxREmWixPCrwGyCdfQ+CAtqpIKJ1E6dh+YvXEzQU
WtSvjFfD1y0K+sghMPWfFQxL478+7IOBuULRJLvlLa1Nl9h3KSWWOnGmjry/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUaSAKArxMyQXF9NAD8FBiHHlPF5kwHwYDVR0j
BBgwFoAU1jaKHMpDmKwkXoCW//LZvVFdQvMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMzAwQkNGMzdDQzdFQjNBMzE5RTdDOTJBM0Y4OUIyM0My
QjY1Q0VFNkUxRjE2QUUwN0VFRDcxMENDQzQwQ0ZFLzAvRDYzNjhBMUNDQTQzOThB
QzI0NUU4MDk2RkZGMkQ5QkQ1MTVENDJGMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjM2OEExQ0NBNDM5OEFDMjQ1
RTgwOTZGRkYyRDlCRDUxNUQ0MkYzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTMwMEJDRjM3Q0M3RUIzQTMxOUU3QzkyQTNGODlCMjNDMkI2NUNFRTZF
MUYxNkFFMDdFRUQ3MTBDQ0M0MENGRS8wLzMyMzAzMDJlMzczMTJlMzEzOTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzEzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhHwDAN
BgkqhkiG9w0BAQsFAAOCAQEAVlj4dFWR3Hi2cdJHtvHe8NwjuIAQQxrUDdlmvXax
WBWptw8/UFbZ0FqD7LvbL7hoKWh71DMs4yXFo29zCqcm/eGM+zkZWmUff82sm6kI
BBu/eClC7eHCdYOLS03014CbAjbhSU4FI2fz5+wu37LeX44HQKREUUaK7JFOjcex
aGmewC7L1TRxtO7fA0TW2VqaSvct/OtOv9Vhcz7XQAqb4cdRFbrjwaptIj5gtlgP
AfrfhzKHZI4H1740S5G95yfkFyVf6IxHlSXELg+WY/GC2BlMIz/RIh0RTlQRYWNx
LSYE6xdE2Mw0uTH1AR2G9+10ztNSslt0+ylJjjjVoqj7gQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:19 2025 by rpki-client