Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230392e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3230392e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          bybuioWKv/FYndyH2NyPgT2SRpcS9DJOoX1/pzO7EBU=
Subject key identifier:   D7:35:E5:B6:E3:A8:EC:57:5B:33:BA:DE:97:59:14:61:41:EB:AD:AA
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       1151C7ABE92A6AA42CE04E3C3A4876B2EA4D2F76
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230392e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:12 +0000
ROA not before:           Tue 04 Feb 2025 18:47:12 +0000
ROA not after:            Tue 03 Feb 2026 18:52:12 +0000
asID:                     20015
IP address blocks:        200.71.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:51:c7:ab:e9:2a:6a:a4:2c:e0:4e:3c:3a:48:76:b2:ea:4d:2f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:12 2025 GMT
            Not After : Feb  3 18:52:12 2026 GMT
        Subject: CN=D735E5B6E3A8EC575B33BADE9759146141EBADAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:54:bd:b7:3a:ce:63:f4:19:31:8e:2a:08:01:
                    f0:ae:39:d0:8c:e7:da:29:5e:03:8d:b2:f5:75:d2:
                    ba:b2:ae:d2:d9:3f:2a:9a:e0:64:f5:fa:07:f9:71:
                    b2:91:6b:98:17:b2:c7:f9:f8:01:6a:21:99:14:12:
                    9c:72:8d:ec:08:27:5b:47:88:f8:6c:7e:a6:b8:bf:
                    b1:a9:0d:dd:b3:8f:0a:b0:a1:00:b5:c2:2a:3a:8e:
                    ff:7f:6d:18:2a:5d:05:c3:fb:8f:c6:f0:94:aa:8c:
                    37:4d:7c:19:a6:ae:19:c2:9f:98:dd:58:19:67:59:
                    bb:03:e0:19:e5:fd:09:0a:ca:99:82:d6:0c:8d:57:
                    35:e5:40:28:d8:8b:ae:45:9f:7f:12:ee:c5:d5:93:
                    2c:9d:c4:8b:79:07:c4:b0:61:28:77:ab:92:d2:4a:
                    d0:02:34:d3:6f:4a:b1:44:a2:f0:f8:1f:4b:2b:da:
                    4a:12:da:f0:8c:a0:f8:7d:b7:62:8f:8e:a3:e8:00:
                    20:28:66:f8:a1:a2:aa:f2:93:1b:40:f4:5b:9d:83:
                    0a:bd:21:51:f1:cc:b0:6e:1a:8c:d2:de:53:0b:9e:
                    93:79:75:ab:3a:65:14:2a:f9:39:bf:0a:af:48:81:
                    b5:db:99:73:12:6c:62:73:58:0d:06:b9:8f:62:37:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:35:E5:B6:E3:A8:EC:57:5B:33:BA:DE:97:59:14:61:41:EB:AD:AA
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3230392e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:81:08:b4:55:c8:65:27:bd:fd:99:50:59:8c:04:1e:a7:fc:
         83:a0:40:53:9a:b6:6e:6d:48:48:7f:c5:88:eb:46:ce:2a:38:
         83:2e:a4:82:83:6e:59:e9:0d:d7:27:bd:f0:f4:eb:f1:55:f9:
         12:37:36:a2:87:b3:d7:80:d6:5e:27:d7:7c:f8:6e:d7:72:0e:
         0f:e4:0a:2b:ba:e4:b5:4f:59:83:d7:ea:cd:0b:df:8c:83:cb:
         87:36:86:ab:05:6c:62:37:34:1a:e0:58:70:46:0b:95:12:d2:
         a3:bf:ff:b6:49:de:19:55:1b:9b:bb:aa:ae:46:bb:9c:69:6c:
         7a:80:73:05:e9:f8:59:fa:3e:91:f1:9e:7a:f1:40:fd:35:1d:
         d1:91:78:41:19:29:86:2d:39:a4:37:b3:38:72:3a:72:60:ae:
         d2:b9:91:f9:0d:65:c4:53:fa:fd:a3:cb:55:2e:d0:78:cc:92:
         b8:eb:af:9b:5e:ce:e1:88:b5:40:53:5e:fd:34:05:92:e2:7a:
         11:5d:8d:a1:dd:4e:e5:49:62:52:57:8c:1f:f2:a5:76:3e:a2:
         ac:e5:9c:2c:cf:7b:89:07:d9:31:91:9e:eb:96:67:a1:93:2b:
         fd:92:1c:5f:f2:d4:27:59:b6:d3:98:50:a1:ef:06:46:81:92:
         cf:24:a4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:10 2025 by rpki-client