Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231382e302f32342d3234203d3e203230303135.roa
File:                     3230302e37312e3231382e302f32342d3234203d3e203230303135.roa (raw, json)
Hash identifier:          12TSPsxXpVge7xjyJho5fQV/3bhlni7YxfYqbiov3zQ=
Subject key identifier:   EF:8D:7A:54:D5:F3:BF:DC:C3:93:04:DF:7E:6F:98:A7:F3:4D:76:E0
Certificate issuer:       /CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
Certificate serial:       674B90CD3B55954412878DABE5C948E763C0064C
Authority key identifier: D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231382e302f32342d3234203d3e203230303135.roa
Signing time:             Tue 04 Feb 2025 18:52:17 +0000
ROA not before:           Tue 04 Feb 2025 18:47:17 +0000
ROA not after:            Tue 03 Feb 2026 18:52:17 +0000
asID:                     20015
IP address blocks:        200.71.218.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4b:90:cd:3b:55:95:44:12:87:8d:ab:e5:c9:48:e7:63:c0:06:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6368A1CCA4398AC245E8096FFF2D9BD515D42F3
        Validity
            Not Before: Feb  4 18:47:17 2025 GMT
            Not After : Feb  3 18:52:17 2026 GMT
        Subject: CN=EF8D7A54D5F3BFDCC39304DF7E6F98A7F34D76E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:5a:72:f0:80:8e:c3:4a:20:a9:e5:52:f4:
                    88:2e:0d:63:bc:e3:d5:2e:cb:85:9e:40:9d:b9:fc:
                    5f:f7:b8:f6:47:5d:13:13:1c:00:3c:c2:3a:8f:1c:
                    a9:30:a4:d6:83:32:6b:03:38:bb:86:ed:2f:28:05:
                    a7:cd:4b:1c:64:9d:af:67:0b:bb:b6:fa:fc:99:29:
                    98:75:74:94:f8:a6:c0:c0:26:ac:6f:06:46:b1:fc:
                    c6:65:ed:b6:f1:75:8b:af:c7:43:f7:1f:c3:37:75:
                    6a:67:fa:e4:c9:82:09:b1:a5:da:9b:d8:10:32:89:
                    b5:e9:80:09:3d:25:6a:29:9c:fc:d2:51:70:86:3a:
                    de:af:d7:75:8e:e2:e0:37:39:b1:de:27:d9:9c:3e:
                    68:35:d0:54:fa:62:30:4e:3d:bf:39:16:10:57:eb:
                    d2:ec:97:c0:6a:c1:c5:79:dd:f2:94:9a:b5:b0:6f:
                    9a:97:3f:bb:f4:ea:70:70:6a:1d:95:c3:94:d6:7d:
                    6a:fc:60:e0:de:8f:94:6c:78:b9:be:91:e2:e5:28:
                    7c:be:a0:43:22:65:21:f8:00:22:c1:01:ee:11:c5:
                    a1:d2:79:a6:48:8f:0c:7e:98:a0:56:5a:7c:04:bb:
                    7f:fc:f8:8d:8e:71:bf:6b:0e:78:82:72:62:e8:10:
                    2c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:7A:54:D5:F3:BF:DC:C3:93:04:DF:7E:6F:98:A7:F3:4D:76:E0
            X509v3 Authority Key Identifier:
                keyid:D6:36:8A:1C:CA:43:98:AC:24:5E:80:96:FF:F2:D9:BD:51:5D:42:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6368A1CCA4398AC245E8096FFF2D9BD515D42F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A300BCF37CC7EB3A319E7C92A3F89B23C2B65CEE6E1F16AE07EED710CCC40CFE/0/3230302e37312e3231382e302f32342d3234203d3e203230303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:c9:d7:0b:23:ba:88:61:5f:c3:96:81:1e:df:d9:fa:53:
         1a:ac:db:73:41:cc:d4:21:5f:cd:12:18:46:51:d8:c7:df:81:
         c8:b4:6c:53:28:fc:36:17:a6:ab:26:51:63:55:c6:12:4b:da:
         45:1a:f0:2e:61:70:7b:40:b5:91:3c:3e:98:ea:07:25:8a:16:
         60:af:1c:c5:ea:68:86:7c:e3:f9:45:c7:49:65:c8:3b:df:76:
         08:20:3b:35:b8:17:59:4c:75:6a:22:e4:c1:bb:9a:a5:10:29:
         6f:ba:17:f0:38:12:51:f3:73:20:35:a8:16:95:55:f8:20:fc:
         04:96:22:c3:65:4a:83:9c:94:e7:e7:11:9d:e2:25:84:09:23:
         cd:89:34:cf:ca:88:05:ee:a2:77:24:81:5c:7e:34:e2:a6:7c:
         b8:56:fd:7e:c2:25:ef:bb:ff:23:73:e5:6c:40:de:c2:aa:9b:
         c2:be:92:c4:89:68:23:68:d1:ab:77:2e:04:54:2e:50:8b:5f:
         a3:68:fb:f7:20:97:e3:7c:3d:84:73:dc:af:66:e0:1a:39:84:
         53:05:bb:a4:07:e1:cc:f9:95:f1:8f:45:90:00:82:80:34:a2:
         4d:19:56:1f:50:2d:cd:4a:12:26:98:05:f0:f3:0f:95:34:d2:
         f6:ca:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:09 2025 by rpki-client