Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232342e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3232342e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          avkvDiLUEliCXVFjoQF7xtHn9b1stR1paXUVn2Gf94c=
Subject key identifier:   CC:DF:69:69:BE:80:F1:E8:FA:7D:3A:9C:0A:F9:C0:B4:D2:6B:E7:51
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       373CE1D09D54FC27C21C4F7349ABEA8A1D50D7E8
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232342e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 04 Feb 2025 18:03:53 +0000
ROA not before:           Tue 04 Feb 2025 17:58:53 +0000
ROA not after:            Tue 03 Feb 2026 18:03:53 +0000
asID:                     27727
IP address blocks:        200.61.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:3c:e1:d0:9d:54:fc:27:c2:1c:4f:73:49:ab:ea:8a:1d:50:d7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Feb  4 17:58:53 2025 GMT
            Not After : Feb  3 18:03:53 2026 GMT
        Subject: CN=CCDF6969BE80F1E8FA7D3A9C0AF9C0B4D26BE751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:ac:3c:6a:e7:7b:52:f6:39:3b:90:03:0b:
                    e3:49:f6:3c:a9:f3:d4:7f:f3:9d:60:d9:5b:cb:40:
                    89:58:3a:3b:38:20:cc:77:f0:e4:c5:13:34:86:d5:
                    72:ef:65:fb:1b:08:1e:d9:de:72:12:5c:07:3f:2b:
                    7d:05:54:69:70:16:3c:76:a8:cc:3b:7e:93:d6:df:
                    dc:ea:91:ee:0e:d4:9a:7e:1e:07:ec:d6:f9:56:c2:
                    08:74:51:ab:38:35:a6:c4:d1:1a:ff:d2:c1:ef:aa:
                    c7:34:3a:fd:5e:ce:dc:bb:fa:26:cd:76:f1:a6:0a:
                    00:b1:6d:83:97:90:55:fa:44:51:39:48:62:7d:75:
                    79:8a:f9:2e:74:3b:fb:a1:92:c7:2c:a7:80:bb:f6:
                    cf:ab:aa:75:b0:0c:e2:1a:35:a3:2f:27:54:88:76:
                    8d:93:5d:55:f9:3f:3e:4a:c4:77:51:71:9e:ca:45:
                    6d:6d:62:69:ad:6d:27:a4:67:f4:1a:f9:2d:ec:27:
                    80:ac:75:cd:6e:34:a3:95:15:04:8c:0f:87:0b:ef:
                    37:2d:da:a4:db:25:57:1e:4a:24:df:f8:fe:55:c1:
                    d7:af:da:a2:23:98:7e:e6:90:83:b9:bb:1d:54:a2:
                    ae:b5:8b:03:0e:23:4a:45:2b:6b:82:6d:44:31:09:
                    36:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:69:69:BE:80:F1:E8:FA:7D:3A:9C:0A:F9:C0:B4:D2:6B:E7:51
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3232342e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a0:5e:3a:f2:aa:9b:34:ec:ea:fa:4a:5b:df:1e:d3:b6:ed:
         3e:0f:cc:ca:b8:28:c8:3e:00:dd:f8:8d:5c:58:33:e0:12:83:
         c4:74:b3:c8:a1:32:3d:2d:a0:ff:97:f9:51:a7:26:40:2b:66:
         3d:8c:f0:e7:4e:b5:00:38:91:20:4a:c4:47:b9:4f:a8:c3:5e:
         55:10:88:72:b7:e5:80:64:d0:3a:ef:0b:be:cf:25:e4:1f:5a:
         18:f6:85:17:6e:05:9e:2b:d0:e3:d2:90:7f:18:8c:5a:77:05:
         1b:cc:0b:71:e9:44:47:73:9b:b4:36:c8:7d:c8:57:13:53:93:
         eb:65:a9:63:d1:47:4e:aa:d9:e1:2a:97:55:ea:43:1d:c7:a6:
         49:0f:d7:fa:da:d1:49:67:2a:29:49:ce:3b:5e:f5:86:a0:d6:
         1b:5f:33:0e:b3:6f:2b:f2:ef:23:84:35:dc:cd:55:a2:df:ee:
         81:c0:43:99:33:48:a2:3b:3a:c2:d7:64:b4:21:24:16:57:62:
         bc:ee:d8:cb:da:59:c6:39:88:fe:ff:6d:32:79:ba:66:c3:1c:
         f0:85:93:3a:8d:07:2e:1d:2c:63:da:fa:b5:4a:03:d6:8c:5a:
         5b:f8:85:94:1e:a8:80:6f:79:ec:bf:7c:17:46:56:a5:f4:87:
         d9:e5:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:37 2025 by rpki-client