Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233332e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233332e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          ZMC6psVYZZz/FxhRVP/PNCs3gHMdkBwy5yPIHHaomK4=
Subject key identifier:   34:83:A8:87:5C:AD:F1:82:3B:55:6D:01:51:6A:84:C4:C1:40:44:23
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       31487ECDEA9970CB017D7AF0252BE0D2BDFB8E64
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233332e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 04 Feb 2025 18:03:53 +0000
ROA not before:           Tue 04 Feb 2025 17:58:53 +0000
ROA not after:            Tue 03 Feb 2026 18:03:53 +0000
asID:                     27727
IP address blocks:        200.61.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:48:7e:cd:ea:99:70:cb:01:7d:7a:f0:25:2b:e0:d2:bd:fb:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Feb  4 17:58:53 2025 GMT
            Not After : Feb  3 18:03:53 2026 GMT
        Subject: CN=3483A8875CADF1823B556D01516A84C4C1404423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ac:27:33:ae:bc:06:64:f7:4d:a6:d8:89:06:
                    2c:f9:6d:7a:64:74:58:3e:84:d9:26:db:9b:22:21:
                    dc:c1:3c:21:46:b6:cd:d8:e0:c2:a1:b4:3a:3a:b0:
                    b6:4a:4d:2c:e8:67:d2:7e:f7:a1:bf:26:4e:52:67:
                    7c:4e:27:e4:ad:a3:dd:3c:76:70:2f:66:75:78:d9:
                    09:f5:5b:a1:c7:a9:39:98:f7:4b:a2:6e:19:15:af:
                    ce:38:76:d5:89:39:93:2b:12:c4:62:fd:1c:85:8b:
                    e1:80:4b:1a:48:1b:48:e9:8a:bd:39:65:50:64:5f:
                    49:20:15:34:15:c0:19:00:9b:14:31:85:58:d9:7b:
                    47:23:41:f5:7e:12:59:9a:0f:13:c7:66:10:49:31:
                    45:b3:81:6b:1b:2c:10:e8:cb:05:7d:55:b5:0c:0c:
                    86:6c:78:92:1d:8f:a3:78:bb:53:62:7c:bb:c1:19:
                    c2:dc:3b:52:3c:52:8f:67:65:e7:2b:90:cb:3b:9f:
                    5b:7c:96:29:37:fb:bc:0c:5e:0d:08:c2:51:db:20:
                    c8:b0:85:86:bb:ca:e6:a4:cb:d8:47:fc:f1:96:cf:
                    5b:7c:90:51:8c:20:55:e2:30:cd:e1:b4:88:25:39:
                    92:4c:61:d8:48:ea:2a:4b:79:5b:ad:d9:9f:8f:0c:
                    b1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:83:A8:87:5C:AD:F1:82:3B:55:6D:01:51:6A:84:C4:C1:40:44:23
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233332e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:67:40:c5:0e:9b:d4:85:99:b1:b2:0d:f0:2e:a5:18:16:17:
         53:01:55:37:89:ed:3c:cc:18:2f:7d:48:b5:4e:b8:f6:f1:0a:
         5e:d9:5c:e8:e1:85:1b:6d:cd:05:63:80:c2:a8:a3:d1:bd:71:
         1b:a2:1d:7f:a5:b4:b1:15:bd:54:1c:22:b4:89:1f:74:8b:ef:
         6b:7c:5f:83:2f:62:32:f0:36:6f:3e:c7:fc:30:8a:af:95:cf:
         c6:6c:94:b2:50:31:39:c8:95:60:5c:69:6a:48:85:2f:e8:05:
         4d:ab:65:f4:d7:d1:c2:02:af:fd:61:d7:87:c6:a2:96:b8:3b:
         e6:06:56:9b:f9:4f:a2:62:47:99:2f:5b:58:a8:97:18:f0:4e:
         4a:fa:dc:8b:ce:3e:ec:6f:22:24:9d:d0:11:5a:5c:aa:cd:c7:
         bc:e2:2c:d5:c9:92:fd:3e:6b:d1:0c:14:9b:66:c5:ff:1c:58:
         3c:4a:bd:e0:e3:64:9b:32:bf:6d:1f:a2:7d:1a:6b:15:5b:32:
         45:7f:3a:71:37:0a:4b:cd:2d:a5:a7:7c:46:22:4f:aa:12:e7:
         44:60:c6:7c:f7:2c:95:f2:57:f6:81:c8:3d:ff:32:5e:5a:9d:
         46:77:28:de:80:d4:e7:d7:eb:8d:b2:a1:d4:5b:7a:a3:70:d5:
         11:9e:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:36 2025 by rpki-client