Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e36302e302f32332d3234203d3e203237383636.roa
File:                     3230312e3231372e36302e302f32332d3234203d3e203237383636.roa (raw, json)
Hash identifier:          0uQwwzcOwedwqrrnO9+rLyXKVFbaLfSk6p36Iq9mipw=
Subject key identifier:   F7:EB:6E:1D:5C:AE:14:5C:15:E3:BA:3F:A2:D0:53:F8:2A:B3:80:49
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       6FC8845976E66775961E3F36790BA88D83E0E35E
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e36302e302f32332d3234203d3e203237383636.roa
Signing time:             Tue 04 Feb 2025 18:31:19 +0000
ROA not before:           Tue 04 Feb 2025 18:26:19 +0000
ROA not after:            Tue 03 Feb 2026 18:31:19 +0000
asID:                     27866
IP address blocks:        201.217.60.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c8:84:59:76:e6:67:75:96:1e:3f:36:79:0b:a8:8d:83:e0:e3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Feb  4 18:26:19 2025 GMT
            Not After : Feb  3 18:31:19 2026 GMT
        Subject: CN=F7EB6E1D5CAE145C15E3BA3FA2D053F82AB38049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e8:5f:88:98:57:ac:31:77:ba:f1:5b:e6:af:
                    bc:26:ae:9c:7d:2d:0f:4d:af:c5:6c:6d:35:46:7d:
                    32:39:b1:36:77:c1:96:5f:5f:bd:11:0e:4f:00:47:
                    23:74:03:62:c3:66:f2:e6:95:49:0e:39:df:17:21:
                    00:50:8a:21:35:64:1a:34:2d:cb:df:f8:93:eb:00:
                    62:fa:c9:df:87:54:24:d8:05:d3:af:fa:16:52:3c:
                    84:3f:57:23:d6:7d:06:e3:5a:36:b6:6f:d8:74:9b:
                    5f:89:f8:31:0a:92:da:9f:05:93:86:63:15:5f:09:
                    c1:c2:f3:1c:a8:30:ef:ea:8b:87:00:52:37:57:06:
                    49:14:bb:46:c6:96:fa:da:ec:a4:2f:88:f5:ca:43:
                    c2:4d:86:dd:1e:00:4c:af:d7:48:61:f2:df:67:2c:
                    15:ff:2d:cd:a5:cb:ad:85:a1:8a:a9:bd:1f:82:61:
                    3b:3f:cd:1c:3b:bc:27:f3:2b:aa:e1:98:da:1d:38:
                    03:d6:ff:cb:46:94:07:d1:9e:dc:ef:a3:36:07:db:
                    10:9f:d5:45:7d:5b:b3:42:0f:6e:dc:8b:e4:f5:88:
                    fb:68:83:df:1c:1b:c9:34:a2:fe:19:a5:9b:a9:f0:
                    84:dc:87:5d:f7:f5:f4:67:dd:6b:14:27:dd:ca:8e:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:EB:6E:1D:5C:AE:14:5C:15:E3:BA:3F:A2:D0:53:F8:2A:B3:80:49
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e36302e302f32332d3234203d3e203237383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.217.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:c9:d9:e1:d1:39:02:81:86:e3:64:8b:57:9a:cb:23:f0:f8:
         61:89:0b:24:38:3a:98:dd:8f:e0:ed:16:bd:d1:7f:86:35:e3:
         0e:e8:15:0c:3e:07:09:92:71:11:6c:8e:02:26:4b:bb:9d:c4:
         4c:24:e1:d5:e0:19:ac:30:a6:65:10:b9:70:61:37:dc:08:ff:
         c6:45:1e:a6:ab:a0:84:b7:b1:07:6b:99:cd:67:9e:39:13:c6:
         b1:d3:db:42:1f:d0:47:b4:d7:76:cc:ba:03:22:2a:ea:ff:3f:
         02:76:66:f8:74:90:ad:e2:51:05:2f:9a:82:6f:a1:f1:e0:7c:
         ec:6f:c8:2f:3f:84:a6:c4:a3:0b:a6:9b:59:29:3e:34:97:f8:
         d2:0d:11:7c:92:64:ca:da:28:62:7b:65:ac:c0:b8:f9:44:4b:
         ce:ad:c9:62:ed:87:a6:b4:be:79:82:fd:dd:ef:fa:2c:64:b2:
         18:49:2e:08:b7:52:46:b9:ea:04:bc:8c:1a:07:39:58:fc:8a:
         70:59:43:76:45:ab:45:4e:32:f6:5e:59:cb:5e:8b:23:a9:72:
         f7:b8:a4:01:fc:93:76:cc:93:d5:26:ff:42:3c:93:7a:18:08:
         bb:f3:e7:26:d5:4e:6e:36:66:ac:31:6a:f9:5b:ff:3c:e3:61:
         e8:13:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:47:52 2025 by rpki-client