Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231352e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231352e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          SVRemcewXHxcXZJrQspikHWi/M3bLM0MQaUiUfDsZD0=
Subject key identifier:   D9:2B:75:75:34:66:59:DF:8B:00:02:82:FE:D2:52:88:30:D2:CC:AB
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       5496150CEE3EDAEF62719C4E4D4B2EB347AEB95F
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231352e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:14 +0000
ROA not before:           Tue 04 Feb 2025 18:47:14 +0000
ROA not after:            Tue 03 Feb 2026 18:52:14 +0000
asID:                     20015
IP address blocks:        200.71.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:96:15:0c:ee:3e:da:ef:62:71:9c:4e:4d:4b:2e:b3:47:ae:b9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:14 2025 GMT
            Not After : Feb  3 18:52:14 2026 GMT
        Subject: CN=D92B7575346659DF8B000282FED2528830D2CCAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:ae:12:ce:0e:f8:48:7f:61:6e:58:7f:fd:
                    0c:7a:a4:30:13:8b:5d:de:38:b7:fc:94:7a:c5:62:
                    df:b3:35:6c:01:26:a6:6e:1d:cd:d8:da:6a:f0:b2:
                    a2:dc:ee:fe:f0:42:19:7c:a3:49:1e:87:36:32:66:
                    08:75:61:e4:2b:1e:d2:2e:98:3e:12:0a:f2:c0:dc:
                    d7:7e:f1:52:fa:9a:14:f7:2c:52:24:f4:a0:c0:75:
                    5b:de:c0:95:af:4c:2f:86:c0:07:2f:20:65:f9:43:
                    a9:b6:f2:4f:cf:96:54:c6:dc:5b:04:4c:8f:ab:34:
                    87:75:a7:fb:dd:f9:ca:d9:df:7c:c4:18:eb:67:64:
                    c6:d4:be:0e:57:b4:34:24:16:03:d7:68:5d:16:e6:
                    8e:fd:61:4f:00:50:d5:d0:29:bb:2d:08:c5:03:b1:
                    5e:17:4a:89:92:55:28:d6:cf:17:30:5b:c5:47:4e:
                    a1:28:cb:65:da:30:c8:f3:a0:3d:55:92:ec:de:b1:
                    1a:8b:9a:99:73:3e:a2:99:a6:54:36:53:fe:12:0c:
                    3f:54:90:83:be:dd:d0:01:2b:9d:b5:b7:b7:82:dd:
                    41:4a:b2:b8:15:a3:98:14:85:8b:fc:f6:6a:e4:97:
                    f4:da:92:37:53:92:83:a5:3c:43:52:e9:af:94:70:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2B:75:75:34:66:59:DF:8B:00:02:82:FE:D2:52:88:30:D2:CC:AB
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231352e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:98:63:03:a7:55:de:5c:57:06:50:80:55:ae:3d:ed:43:12:
         97:41:45:6a:ff:9e:d0:92:4a:59:e6:e9:b7:51:d1:36:a1:9f:
         52:08:df:34:01:b8:1a:0c:dd:dc:fb:1b:b1:fe:24:56:3f:26:
         0d:ca:a1:2c:30:72:d9:26:c0:87:58:06:4b:c8:a8:5c:fc:56:
         1e:88:ee:b2:a7:80:92:d8:df:86:6b:eb:ae:c9:9f:80:8c:8d:
         5b:8c:c2:81:8f:4c:0d:95:bb:df:2b:05:55:42:2e:02:24:23:
         89:60:19:d3:5d:7c:dc:f2:0d:1f:af:f5:82:8e:9e:00:83:6f:
         9d:e4:01:fc:98:c3:6f:81:f1:a4:c8:9e:d7:72:e3:08:36:1f:
         52:cc:1d:f7:ea:f7:14:d8:3e:e9:25:c7:47:7a:39:91:f4:30:
         6c:b5:7f:01:95:49:bf:b8:bd:4c:c9:d9:13:16:5e:e1:3a:e2:
         a1:9f:c3:25:b1:e0:28:6a:ab:ba:ca:87:4a:62:e2:c1:7d:0a:
         14:df:58:6e:cc:fd:dc:37:9a:7d:05:1c:b9:35:86:ec:a7:f9:
         ac:3a:a4:2e:37:c1:6f:40:a4:10:85:2b:f3:26:23:cc:7f:e4:
         24:db:56:fa:70:98:50:ce:91:37:72:5c:b5:fc:19:df:ca:06:
         f3:0c:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:25:12 2025 by rpki-client