Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233342e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233342e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          1gfEjyy003C+Y0o6SrQpdnNxjVu40ASQ9xm93p4S9uI=
Subject key identifier:   48:3D:6A:47:AD:D1:42:CA:1E:75:5E:0A:71:0C:64:E7:71:14:2D:9C
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       3D504738EE25518388597315517D589DC89C8724
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233342e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 04 Feb 2025 18:03:53 +0000
ROA not before:           Tue 04 Feb 2025 17:58:53 +0000
ROA not after:            Tue 03 Feb 2026 18:03:53 +0000
asID:                     27727
IP address blocks:        200.61.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:50:47:38:ee:25:51:83:88:59:73:15:51:7d:58:9d:c8:9c:87:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Feb  4 17:58:53 2025 GMT
            Not After : Feb  3 18:03:53 2026 GMT
        Subject: CN=483D6A47ADD142CA1E755E0A710C64E771142D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:c5:a7:51:fd:12:6b:ac:b3:db:07:5d:89:
                    69:98:06:7e:99:fd:b0:a8:8d:d0:e4:b5:6f:a4:d4:
                    6e:ad:8b:a1:fe:96:71:d7:0b:47:5a:c7:87:98:7a:
                    9a:15:f7:9e:12:dc:00:77:c9:d6:58:3c:11:52:1d:
                    cf:9c:c2:5b:3e:85:ab:e6:86:78:37:2b:cf:75:96:
                    6a:e0:e7:bd:53:63:c5:23:e8:19:06:d1:26:51:30:
                    fa:a5:b9:a1:36:63:7c:64:02:ff:89:f2:16:eb:9f:
                    21:7d:83:e5:81:a4:b8:72:e0:9b:7c:e8:ac:6d:7e:
                    7f:a2:19:6d:7f:83:f7:de:91:fc:ae:82:82:97:bb:
                    99:eb:24:81:76:9c:43:35:b6:41:59:5a:41:c1:5f:
                    1a:22:b9:95:ca:a0:25:c7:8f:a7:d9:bc:25:db:c1:
                    e6:e3:0e:09:a1:33:3d:a6:0a:5b:d3:ee:88:40:61:
                    99:0e:8d:28:d6:7b:a6:6b:99:f7:a1:07:bf:01:59:
                    5c:3e:88:f9:a5:27:fb:3c:26:0c:bf:18:06:0c:5f:
                    38:ed:45:71:b3:3d:40:0b:ea:1f:93:ae:85:7f:29:
                    83:a5:44:c8:99:07:50:51:d4:fa:b9:90:43:9b:0b:
                    40:f2:fb:4f:c8:c2:04:05:09:77:83:74:ff:60:6a:
                    69:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3D:6A:47:AD:D1:42:CA:1E:75:5E:0A:71:0C:64:E7:71:14:2D:9C
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233342e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:a8:ff:f1:dc:c0:73:1f:d8:7b:8b:25:07:a1:7e:da:3a:42:
         98:19:b7:6c:7e:48:ca:cc:5d:e9:03:35:e4:99:77:04:ba:67:
         9c:ad:34:e4:0c:66:c6:f5:ca:b6:1f:8f:02:71:51:a6:07:c1:
         a8:79:db:0a:62:e7:ab:c8:31:cb:56:7b:97:84:79:ad:f9:c9:
         ed:67:c2:33:21:c7:78:7b:88:fc:14:12:33:43:15:ab:d6:8b:
         e7:bc:70:27:c7:4d:ec:8d:6f:70:b8:21:5b:d1:87:46:c4:48:
         67:6c:7c:b1:d8:e7:1d:d8:ea:14:f0:5d:86:5e:c0:4a:2d:58:
         3c:f0:9c:14:f6:08:ac:57:ce:3f:3e:21:b0:7e:e2:ab:01:03:
         38:35:7a:9a:11:a8:97:a7:1f:71:76:48:43:a4:13:a6:74:e9:
         12:0a:b4:da:38:87:bb:88:de:2e:04:06:24:c6:1f:34:69:f2:
         c8:9f:6e:95:a6:da:3f:77:38:ef:50:a5:b7:82:fe:ce:50:e6:
         bb:aa:a7:a9:d2:75:de:62:fa:73:3e:3c:dc:15:a9:16:91:fd:
         6b:b3:ba:b1:41:8b:9d:ec:e9:66:79:9c:df:30:a6:20:68:b7:
         8b:49:68:42:da:72:99:2d:91:46:c5:91:88:4a:35:0b:50:0e:
         45:37:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:27:17 2025 by rpki-client