Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231322e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          u8z3YQww/Xga9j4Oytkt0fHE0qqkD2E8rRlkTukYERY=
Subject key identifier:   0D:85:DF:41:74:91:0D:2D:CE:CD:01:43:13:24:20:BB:2E:4E:6C:AC
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       271E2E09C90D411F51B95889A0B3B8EDF36AA463
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:14 +0000
ROA not before:           Tue 04 Feb 2025 18:47:14 +0000
ROA not after:            Tue 03 Feb 2026 18:52:14 +0000
asID:                     20015
IP address blocks:        200.71.212.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1e:2e:09:c9:0d:41:1f:51:b9:58:89:a0:b3:b8:ed:f3:6a:a4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:14 2025 GMT
            Not After : Feb  3 18:52:14 2026 GMT
        Subject: CN=0D85DF4174910D2DCECD0143132420BB2E4E6CAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:1d:09:73:08:07:f5:1c:ed:dd:fb:62:16:
                    dd:1d:72:e4:05:c7:c0:cb:6d:7e:c7:25:ae:9a:7a:
                    31:eb:7c:46:af:26:28:48:1f:14:c9:51:cf:d8:98:
                    bb:3e:1a:dd:51:8c:47:7b:a2:35:86:c6:69:a1:82:
                    28:30:45:84:74:6e:cb:0e:ae:6a:6b:a5:1b:5b:8f:
                    dd:72:ef:b2:dd:5e:ea:8a:87:4c:86:28:37:bd:04:
                    79:6d:b6:46:aa:6b:fa:7a:27:c1:10:90:de:1b:ae:
                    a5:e6:34:19:43:a0:d1:f2:c4:c2:8c:b2:dc:1d:81:
                    7a:67:10:24:4d:80:dd:28:02:15:b0:40:28:c4:b5:
                    34:be:46:7c:be:50:94:e7:c6:e3:34:5f:40:0f:f7:
                    b8:8c:ca:57:e5:84:27:39:a2:a3:a2:9e:5b:30:08:
                    9c:37:a9:f6:07:b3:df:aa:5a:30:b6:42:b3:c8:7f:
                    37:1a:18:56:43:7e:02:c4:53:cc:c4:37:a0:48:7e:
                    e2:9a:b1:a9:9f:2c:0b:26:41:5b:f1:a4:62:e9:8a:
                    8c:b7:48:98:59:a2:0a:9d:32:a9:53:2c:d3:ab:18:
                    32:94:46:01:6a:70:14:52:3d:6c:04:46:a4:71:a2:
                    32:84:f4:03:e3:d4:9c:13:eb:7f:28:71:a8:ae:a9:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:85:DF:41:74:91:0D:2D:CE:CD:01:43:13:24:20:BB:2E:4E:6C:AC
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231322e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:4e:67:4e:0d:08:44:60:e3:29:8e:53:59:d2:d7:90:59:eb:
         9b:d6:48:e4:29:9c:2f:43:e7:36:1c:03:db:e2:3f:45:9b:94:
         7a:4a:e7:b1:c6:a3:56:cb:47:a5:a3:1f:da:59:b5:fe:5d:a1:
         09:b7:f0:3b:fe:7a:3c:58:39:6f:ba:d4:00:09:d0:eb:10:c1:
         91:3a:0a:e5:8d:64:04:a0:7e:23:73:9f:43:d6:35:60:33:e9:
         1f:fc:8e:4b:ff:a0:6d:83:b7:b3:eb:8b:3f:8a:2a:87:6b:86:
         84:ae:7f:05:5b:0c:44:0b:24:ee:da:23:25:68:67:4f:f5:9d:
         ce:b6:92:a0:1c:bd:4c:02:95:47:05:74:ff:c2:44:5a:db:25:
         41:25:36:95:99:10:7a:df:89:06:1c:2f:e8:cc:9d:af:19:d2:
         a9:aa:6a:43:02:2e:55:62:da:f4:be:aa:ee:41:ef:ac:f2:8e:
         2b:92:58:61:88:51:7a:ad:24:96:c6:22:40:d4:ee:48:97:01:
         16:97:1b:a3:d0:eb:1e:d3:5c:ab:07:09:2e:8c:3e:69:4d:66:
         8a:b4:59:c0:66:7d:86:a4:82:fe:e7:e1:29:45:83:2c:a0:f7:
         22:9b:90:73:05:16:4b:19:8a:b2:04:5d:e7:fe:f9:3f:a9:55:
         f6:46:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:14 2025 by rpki-client