Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139382e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3139382e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          XSCaAjjSxXAkN7CVV/RhT8kfft/pYGtmrXq3hDmXW1I=
Subject key identifier:   B4:6C:BF:1A:92:07:32:42:A7:B2:B7:6C:64:26:76:32:3F:25:F2:3C
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       436982AA86E1C571B38A89D63557942449BF4B64
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139382e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:12 +0000
ROA not before:           Tue 04 Feb 2025 18:47:12 +0000
ROA not after:            Tue 03 Feb 2026 18:52:12 +0000
asID:                     20015
IP address blocks:        200.71.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:69:82:aa:86:e1:c5:71:b3:8a:89:d6:35:57:94:24:49:bf:4b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:12 2025 GMT
            Not After : Feb  3 18:52:12 2026 GMT
        Subject: CN=B46CBF1A92073242A7B2B76C642676323F25F23C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:dc:89:6f:9c:1c:8b:cb:fc:8a:e6:54:9b:
                    33:e0:b3:fb:d3:ff:90:33:b4:9a:ef:f5:85:4b:8e:
                    58:e9:86:38:c0:28:dd:2a:70:be:f8:bf:36:71:e5:
                    81:8c:0a:52:15:49:ab:6b:1e:53:1c:00:29:65:b6:
                    5d:cd:25:b7:66:cb:59:3b:d4:b4:1e:aa:57:ef:d4:
                    19:e0:f2:94:de:8a:88:8a:61:45:f3:d3:2a:39:0a:
                    2d:81:aa:4f:72:2b:93:65:d0:b7:01:07:15:1e:1d:
                    ea:f4:68:fa:85:8d:a9:ec:64:51:66:ce:a9:08:37:
                    40:ba:43:e9:52:74:c7:4b:62:d7:c6:b0:2a:75:03:
                    4f:ce:6a:02:a9:a3:cf:9b:aa:6d:b0:8a:51:12:de:
                    da:e9:07:92:ae:97:8e:3e:92:97:d0:b2:1e:6d:a3:
                    a9:97:05:06:0b:88:79:01:1d:24:1b:5d:09:6b:8d:
                    34:53:29:62:97:d2:e8:b5:ed:6d:c6:2b:8b:8f:b5:
                    17:40:b2:6d:ae:6c:33:4f:9b:12:8a:76:67:a0:f2:
                    e0:be:4d:a9:6e:1e:46:19:f3:4b:0d:dc:f3:ce:b9:
                    80:46:ea:9c:02:ae:9b:28:d3:10:da:c9:21:ea:97:
                    e8:15:1e:0e:1c:10:8a:df:0c:5e:1b:70:83:33:31:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6C:BF:1A:92:07:32:42:A7:B2:B7:6C:64:26:76:32:3F:25:F2:3C
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3139382e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9c:56:2c:00:3f:8e:5d:e8:89:7d:8c:c7:b3:c5:1e:83:e6:
         a5:fa:f8:2d:34:2e:3c:0f:ed:88:0a:bd:0b:09:45:32:5d:2f:
         9e:2e:98:44:d1:a9:3c:35:6d:46:0c:0f:d1:55:fe:f9:51:ea:
         16:fb:a7:b3:02:85:be:f0:2b:d2:f2:df:7f:fb:90:55:fc:4b:
         c6:1d:9b:36:29:38:20:1c:80:43:0b:c2:25:9e:b0:80:1e:76:
         43:75:7c:0e:ae:39:ef:f7:00:01:9a:26:c4:74:93:95:4a:90:
         54:e0:ee:30:2b:52:f2:b4:23:49:61:b2:fb:14:75:d5:0f:36:
         c7:a8:01:a5:cd:13:6d:c5:e0:70:23:21:53:9f:86:6e:a7:c7:
         0a:cd:64:ef:b6:83:a7:c0:59:4c:e2:90:e1:a0:5c:76:85:8d:
         16:d3:45:f3:f7:1f:77:63:5c:10:1b:a9:08:e6:c6:9e:6d:2d:
         3f:70:d6:7e:ea:a2:2d:4c:3d:5c:a1:de:43:46:33:a8:cc:a0:
         ab:8a:6d:4a:36:d8:46:03:74:50:4b:80:ba:a3:72:ab:8e:a6:
         b0:55:3a:5a:85:13:0d:8a:cc:62:ef:d9:3a:72:41:f4:c2:ca:
         3b:3a:e8:e8:2b:e1:c1:69:9b:b1:dd:98:fc:11:06:c1:8a:ee:
         d6:34:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:14 2025 by rpki-client