Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa
File:                     3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa (raw, json)
Hash identifier:          goQb3mIBJmqxYp0cYL1e2xYw3kGn3KWKF/liNsjiZgA=
Subject key identifier:   C8:DD:5B:51:7D:38:BB:99:65:78:36:78:8F:55:DE:D2:29:D8:EF:98
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       77F5043BD4A83CBCE47929A7EE7305BD69AD8496
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa
Signing time:             Tue 04 Feb 2025 18:31:17 +0000
ROA not before:           Tue 04 Feb 2025 18:26:17 +0000
ROA not after:            Tue 03 Feb 2026 18:31:17 +0000
asID:                     264722
IP address blocks:        201.217.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f5:04:3b:d4:a8:3c:bc:e4:79:29:a7:ee:73:05:bd:69:ad:84:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:17 2025 GMT
            Not After : Feb  3 18:31:17 2026 GMT
        Subject: CN=C8DD5B517D38BB99657836788F55DED229D8EF98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:9d:24:8f:9d:9c:91:25:84:3a:cf:90:ff:
                    0c:1d:bd:d5:9a:41:dd:2e:f9:b5:7d:47:4a:2e:e3:
                    62:d3:db:d7:a5:10:2e:fe:1b:7f:86:6d:d1:44:7f:
                    0b:a0:7f:0c:1d:dd:25:fb:70:18:af:5b:93:c9:32:
                    4e:f4:2b:1e:a4:14:70:64:b2:18:7b:4c:79:53:dc:
                    72:c2:3c:43:3e:a3:84:43:6a:91:09:8d:d5:85:f6:
                    8b:ff:13:a2:d6:9e:14:3d:a0:81:66:b8:57:59:8c:
                    9e:1e:72:f2:24:65:da:e9:a1:b8:03:11:6a:0f:d5:
                    11:72:80:f6:70:17:fa:52:3d:b5:20:7a:78:a5:3c:
                    18:3a:7a:97:5e:52:72:59:f9:01:ba:47:ba:93:a2:
                    2e:7e:1e:8f:d2:25:6a:d5:f8:f7:29:04:e3:f1:02:
                    8c:0c:06:b1:ed:f3:ff:52:e7:32:57:6c:4d:f5:b0:
                    8a:34:a1:9d:97:95:f5:9a:c3:bf:bf:f4:7c:c8:f3:
                    15:55:55:6f:96:75:cc:f5:12:0d:ab:91:92:75:4d:
                    28:6d:4d:71:6c:99:41:54:1f:d4:da:fd:b2:c6:e6:
                    09:24:7d:b9:ac:70:7f:cd:ad:86:1d:c7:14:9b:38:
                    21:44:27:9f:45:47:91:32:aa:5a:1a:69:10:d9:74:
                    19:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:5B:51:7D:38:BB:99:65:78:36:78:8F:55:DE:D2:29:D8:EF:98
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e31342e302f32342d3234203d3e20323634373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:7c:95:5b:72:a1:e2:98:5e:b2:ce:db:55:0a:8d:32:06:95:
         b1:48:26:2d:22:65:0d:65:58:96:6a:e0:83:61:0f:06:9c:80:
         49:f8:ab:b6:3c:9a:bf:6b:0c:93:dc:be:a9:35:b8:da:8c:ce:
         41:6b:d7:81:59:f2:2d:99:50:e6:8d:a4:08:8e:1f:f3:c8:20:
         57:08:50:b8:e3:38:1c:c2:6f:8a:78:5f:8d:7c:c2:43:5c:25:
         a2:f2:59:02:07:9d:48:44:52:9b:84:35:d5:6d:28:3a:82:18:
         d0:0b:dd:14:99:89:46:82:9f:1d:68:b0:7c:f0:a8:c7:f1:f1:
         ea:73:2f:b4:7f:6e:8c:b3:21:22:8f:c1:cd:68:35:95:dd:20:
         d4:05:74:39:39:14:73:10:98:a9:a8:a2:bd:a9:f9:66:dd:70:
         cb:21:51:3e:be:b0:78:a8:af:4b:cd:39:6e:c2:73:d7:a8:3f:
         af:ec:85:03:08:52:78:c5:d4:51:d9:36:5d:ab:20:91:00:45:
         bd:cb:c2:33:fb:e5:87:e1:49:c1:14:8c:29:9c:3d:4e:ba:19:
         aa:7d:cc:10:4c:ce:ac:35:1d:76:2c:1c:5a:05:93:39:6e:86:
         8d:b1:4d:80:24:f6:10:1e:bb:24:c3:78:14:44:17:85:3f:b8:
         bc:b6:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:48 2025 by rpki-client