Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34362e302f32342d3234203d3e203237373638.roa
File:                     3230312e3231372e34362e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier:          5E3g7wQdDdeMCDh8CQXbo4QwSs57yJHNB9ttCLZqhBg=
Subject key identifier:   36:DA:5D:BF:32:88:F0:11:77:5A:FA:6D:82:48:8B:DA:27:0B:5B:E4
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       2ADF4A284506D6C3AB63105B8040BD16953F45B0
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34362e302f32342d3234203d3e203237373638.roa
Signing time:             Sat 07 Dec 2024 23:50:01 +0000
ROA not before:           Sat 07 Dec 2024 23:45:01 +0000
ROA not after:            Sat 06 Dec 2025 23:50:01 +0000
asID:                     27768
IP address blocks:        201.217.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:df:4a:28:45:06:d6:c3:ab:63:10:5b:80:40:bd:16:95:3f:45:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  7 23:45:01 2024 GMT
            Not After : Dec  6 23:50:01 2025 GMT
        Subject: CN=36DA5DBF3288F011775AFA6D82488BDA270B5BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:9b:fb:dc:ae:54:7d:42:3a:ba:80:43:bf:
                    2c:be:ec:2a:da:e0:cd:0b:25:c0:98:5e:50:9a:af:
                    d7:ac:d6:92:21:a1:33:f1:52:62:76:41:03:c2:91:
                    d8:11:7c:38:6b:ee:aa:19:2f:ab:3f:2d:6b:05:61:
                    b5:3e:f2:88:2e:24:cd:94:2d:bf:95:37:c1:08:de:
                    a5:41:d3:fc:5b:c3:62:3d:b0:35:3b:6e:56:02:57:
                    a3:55:8c:03:50:3b:84:23:31:c1:4c:f4:9c:2f:1b:
                    00:60:3d:73:0f:bc:86:24:34:2f:f6:49:aa:85:9c:
                    ed:66:85:0e:b8:fa:20:28:f7:15:25:17:8d:48:64:
                    4d:10:d3:b7:0c:f9:ee:75:53:1a:b3:3b:06:fb:19:
                    bf:40:38:71:5c:29:74:66:7c:ad:22:f4:a1:bc:a6:
                    83:f3:b7:de:d8:7d:eb:11:e2:47:d2:48:47:a6:0b:
                    97:62:63:af:41:2f:63:b2:49:5a:7c:86:7b:26:56:
                    2c:7c:96:e3:af:a5:d9:4c:59:e1:f8:f1:9a:94:9b:
                    a8:55:4e:44:47:e5:38:81:81:c3:f0:9c:02:b7:be:
                    9c:9a:2b:2f:c1:84:7e:50:de:09:6b:88:00:b5:05:
                    8c:93:9b:59:d6:43:7e:9a:3f:b1:fb:f2:e0:14:a3:
                    27:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:5D:BF:32:88:F0:11:77:5A:FA:6D:82:48:8B:DA:27:0B:5B:E4
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e34362e302f32342d3234203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:9f:3a:17:74:b1:f8:dd:83:04:b8:ea:37:be:3a:e8:40:
         e3:de:16:4a:2d:5c:a4:e6:30:d6:24:f2:bf:7d:3b:8d:0b:db:
         11:ba:d2:53:7a:6c:d2:82:8e:a3:1f:54:d6:e5:98:76:2a:f5:
         66:5e:81:a1:df:b3:35:ca:6f:1f:07:58:5d:3c:54:29:33:2d:
         67:ea:b0:3f:f9:62:47:95:22:35:53:51:60:6a:cb:5d:ca:60:
         d7:30:e6:16:5a:1e:bc:a4:2b:ee:93:16:fe:f0:ee:73:3a:ba:
         0a:4e:97:84:bc:8c:aa:d3:8b:9f:17:49:ac:ef:35:8f:60:8a:
         ed:a3:eb:66:e7:0a:82:3b:85:b4:78:ad:d3:65:0d:4f:a4:3b:
         f5:95:6f:da:00:06:d8:11:35:95:93:ce:7a:68:38:58:93:32:
         e9:e1:57:e9:43:a0:9d:58:8d:d9:b4:e1:80:b5:62:8e:73:0c:
         00:a6:ff:ab:7a:b4:e6:20:f8:d8:ee:a7:14:7a:6a:4a:d6:db:
         66:a2:33:ea:39:66:e9:74:d2:7f:98:41:bd:ee:c6:aa:85:54:
         35:0d:d5:3d:1a:a8:67:e5:c6:f9:53:15:a9:91:ae:68:e9:58:
         c1:80:a4:5d:44:30:92:9c:dd:7a:73:d8:8e:c8:a9:dc:61:8d:
         cf:ad:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:49 2025 by rpki-client