Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233382e302f32342d3234203d3e203237373237.roa
File:                     3230302e36312e3233382e302f32342d3234203d3e203237373237.roa (raw, json)
Hash identifier:          8LjUxnWPk+UGLEMnICfm3P5xMhkz1XMeZGmroNiRVvY=
Subject key identifier:   95:6D:C8:93:05:F3:D3:01:31:0E:B0:6C:48:4D:56:C2:40:DC:43:73
Certificate issuer:       /CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
Certificate serial:       703AAFF334BE40FBEC8549BEA101A75424A15A8D
Authority key identifier: B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233382e302f32342d3234203d3e203237373237.roa
Signing time:             Tue 04 Feb 2025 18:03:55 +0000
ROA not before:           Tue 04 Feb 2025 17:58:55 +0000
ROA not after:            Tue 03 Feb 2026 18:03:55 +0000
asID:                     27727
IP address blocks:        200.61.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3a:af:f3:34:be:40:fb:ec:85:49:be:a1:01:a7:54:24:a1:5a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67146B78C50CEEB1BB25B62E08F49634E3414FD
        Validity
            Not Before: Feb  4 17:58:55 2025 GMT
            Not After : Feb  3 18:03:55 2026 GMT
        Subject: CN=956DC89305F3D301310EB06C484D56C240DC4373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:52:47:50:3f:d3:48:98:d3:24:46:ef:6a:
                    78:52:a5:f4:d9:17:5e:0d:e3:6a:4f:c6:18:0b:d2:
                    dd:9b:ac:44:c5:3c:a9:e6:e5:56:3b:b6:cc:be:29:
                    50:c0:ed:a6:cc:00:8e:2c:5e:7d:b0:da:00:f1:0e:
                    3d:0c:ec:8b:d7:7a:53:f2:dc:7a:9c:75:cf:ce:a9:
                    c3:c4:d2:7f:5d:c1:f8:46:13:f1:fd:f2:b1:eb:68:
                    13:c3:d4:df:80:c0:26:7e:9e:4d:eb:9f:05:74:70:
                    64:a8:16:12:b3:ad:8d:86:ef:3e:2b:3f:ba:97:c6:
                    d5:d9:cc:c0:d6:21:ae:14:3b:8d:42:91:cc:4f:24:
                    77:50:40:0b:76:52:54:24:55:86:e6:15:d3:b7:7b:
                    b0:91:03:f1:9f:23:03:a1:e3:ec:7f:50:ef:3a:0e:
                    94:dd:18:f3:54:c7:a3:a1:cc:b2:8c:95:a3:ba:53:
                    51:17:ef:99:48:97:ca:43:8a:ae:2d:87:cf:01:1b:
                    65:be:14:81:27:88:4b:3a:af:3b:e7:5d:2e:70:05:
                    c3:91:70:47:3b:bd:50:86:2b:99:9f:fa:07:cc:12:
                    9b:a8:d7:cd:f9:fc:1a:57:c2:13:e6:a6:ac:87:e6:
                    e7:30:5e:c2:a6:19:75:cd:bd:45:41:76:6e:a1:c5:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:C8:93:05:F3:D3:01:31:0E:B0:6C:48:4D:56:C2:40:DC:43:73
            X509v3 Authority Key Identifier:
                keyid:B6:71:46:B7:8C:50:CE:EB:1B:B2:5B:62:E0:8F:49:63:4E:34:14:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B67146B78C50CEEB1BB25B62E08F49634E3414FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A32B1BA6E2293C3B7984DF1C37B14FC1AE752A67FC2759A805B071BDE1667ECF/0/3230302e36312e3233382e302f32342d3234203d3e203237373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:d8:5e:18:91:96:96:57:59:1c:34:4c:03:51:1e:d6:c8:
         bc:d6:8d:83:d3:00:c9:89:cc:3c:73:4e:81:42:0e:2e:1b:ec:
         c2:f8:4b:19:fe:2a:19:62:91:42:f8:7f:2e:58:55:04:ef:8f:
         8d:45:fb:0a:35:39:a7:8c:03:6a:49:19:8e:0c:24:e5:51:db:
         62:2e:2e:68:cc:35:93:03:5a:f1:96:01:2e:b2:e7:25:8f:6e:
         5e:34:ef:61:b9:e5:53:58:7c:7c:df:4b:e8:00:b5:b3:ec:4e:
         89:52:2e:e2:cc:08:cb:2d:ef:b8:1b:96:97:12:69:7d:2d:18:
         a3:0f:15:74:66:19:f9:0d:25:7e:fa:a8:da:94:3e:0f:d2:73:
         88:20:2f:67:f2:35:99:e6:83:31:0e:4a:45:60:20:86:9c:ba:
         7b:45:93:60:68:7b:05:7a:6c:8a:c8:1b:d8:9f:94:d8:46:09:
         d5:65:3d:42:81:1e:8e:6c:00:68:cf:39:e0:49:96:db:a1:c5:
         1c:9a:13:14:1b:3f:70:02:93:56:89:db:c4:95:3c:6f:70:ea:
         0f:30:94:39:92:72:fb:cc:fd:fc:64:4e:ab:5d:f5:19:d5:8a:
         a2:65:ee:bc:8c:6b:d9:ea:7a:cd:51:f4:a3:32:69:4c:aa:74:
         2f:4c:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:21 2025 by rpki-client