Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3B2451546B853CDA38FF0981CDFDCCBC35B7BE366C2A85BB1887EA23CDA6E57/0/3230302e31332e3133362e302f32312d3234203d3e203237383036.roa
File:                     3230302e31332e3133362e302f32312d3234203d3e203237383036.roa (raw, json)
Hash identifier:          te/3n2X1LAKh9wZrOKEY4XAvmW3yrIiaYtuPiEvZljY=
Subject key identifier:   98:54:5C:E7:2A:52:0C:3B:12:CA:E1:20:FC:06:21:AA:FF:C7:63:12
Certificate issuer:       /CN=EB02840A530E2DFBB173EF203026DB6221FCEC53
Certificate serial:       5143D3A8E7FCAB85C90BC337CDBD0027377D1433
Authority key identifier: EB:02:84:0A:53:0E:2D:FB:B1:73:EF:20:30:26:DB:62:21:FC:EC:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB02840A530E2DFBB173EF203026DB6221FCEC53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3B2451546B853CDA38FF0981CDFDCCBC35B7BE366C2A85BB1887EA23CDA6E57/0/3230302e31332e3133362e302f32312d3234203d3e203237383036.roa
Signing time:             Wed 19 Feb 2025 16:10:15 +0000
ROA not before:           Wed 19 Feb 2025 16:05:15 +0000
ROA not after:            Wed 18 Feb 2026 16:10:15 +0000
asID:                     27806
IP address blocks:        200.13.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:43:d3:a8:e7:fc:ab:85:c9:0b:c3:37:cd:bd:00:27:37:7d:14:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB02840A530E2DFBB173EF203026DB6221FCEC53
        Validity
            Not Before: Feb 19 16:05:15 2025 GMT
            Not After : Feb 18 16:10:15 2026 GMT
        Subject: CN=98545CE72A520C3B12CAE120FC0621AAFFC76312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c8:66:1e:12:b2:5f:49:09:27:22:48:ef:33:
                    a1:b1:0c:09:ac:9e:d7:46:24:27:cb:54:77:9f:2a:
                    8b:c0:7a:8b:7f:88:3b:2a:d5:18:8d:3f:2b:a9:b7:
                    7c:f4:ff:5a:6b:ab:21:a4:fb:e2:1c:e2:44:6e:a8:
                    8f:c7:78:2d:fd:b6:ca:0c:08:46:b4:89:2a:5d:20:
                    bb:af:0e:39:97:38:63:df:88:86:0f:67:08:ad:ac:
                    40:30:dc:f7:11:f8:00:94:f3:91:d8:5a:52:08:5d:
                    6d:b4:d6:3a:5b:26:df:41:69:d4:66:a1:d6:50:5f:
                    ee:f6:64:0c:f8:e7:79:d3:04:bb:76:54:76:89:d6:
                    7c:fd:d5:c8:04:1d:46:9a:b9:e0:74:6a:b3:ff:d8:
                    d8:ea:d5:63:c5:8b:f9:ff:75:a9:0c:02:56:38:b3:
                    e1:1a:d5:9a:a1:76:b3:ab:cd:9b:cb:85:83:36:9b:
                    e0:69:81:60:65:f7:bd:0b:d1:39:0f:e8:b5:1b:5e:
                    c6:69:42:30:31:19:a8:f5:94:22:5d:0f:ce:4f:0b:
                    99:92:b8:36:ff:a6:5d:93:11:86:3d:f1:a7:33:40:
                    2f:94:c6:a8:ce:13:b9:1f:52:87:3a:0d:51:37:c1:
                    7b:a2:f6:51:63:0f:10:8a:bc:1d:ff:ed:20:f1:f4:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:54:5C:E7:2A:52:0C:3B:12:CA:E1:20:FC:06:21:AA:FF:C7:63:12
            X509v3 Authority Key Identifier:
                keyid:EB:02:84:0A:53:0E:2D:FB:B1:73:EF:20:30:26:DB:62:21:FC:EC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3B2451546B853CDA38FF0981CDFDCCBC35B7BE366C2A85BB1887EA23CDA6E57/0/EB02840A530E2DFBB173EF203026DB6221FCEC53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB02840A530E2DFBB173EF203026DB6221FCEC53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3B2451546B853CDA38FF0981CDFDCCBC35B7BE366C2A85BB1887EA23CDA6E57/0/3230302e31332e3133362e302f32312d3234203d3e203237383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:14:3c:5c:b2:44:c3:73:b7:e6:a2:9c:6f:42:7f:ba:2c:
         a1:8d:8f:01:f4:74:09:4e:22:85:d2:3e:71:e7:1f:06:24:6d:
         4a:d8:26:9f:96:57:9a:a1:b1:01:e5:38:2b:e2:80:55:a3:e5:
         92:14:63:51:7d:19:e2:64:5e:5f:c5:29:62:2a:34:7c:3d:64:
         5c:c3:d5:c5:e6:88:13:c2:38:65:73:dc:0c:94:4d:ca:e4:80:
         56:75:ca:17:6a:07:2b:52:e9:ba:a4:80:07:21:94:51:de:d3:
         b7:1d:95:0d:8d:65:05:b3:4d:04:1d:64:19:7f:be:88:52:1a:
         25:2a:5b:51:52:77:f4:bf:09:8e:12:a7:5c:2c:83:e3:ad:83:
         9f:f5:38:4e:f1:cc:08:8f:10:45:5b:de:54:44:f5:a9:a0:1b:
         f4:20:94:b7:09:c8:6a:da:66:d1:4b:9b:a0:bf:be:ca:a4:da:
         8c:f5:9b:29:2f:14:65:f7:06:00:08:00:11:dc:01:43:a5:e1:
         30:02:b8:b9:08:67:b8:31:07:e1:1b:a2:a6:4c:ea:cb:0c:a2:
         89:09:17:09:f0:c9:04:a8:6f:04:e1:f5:f7:96:61:9a:79:f0:
         18:2b:3f:b5:c9:f8:0e:56:a5:67:e1:4a:ea:f6:32:69:95:0b:
         c0:9e:8f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:33 2025 by rpki-client