Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa
File:                     3230302e35302e3234302e302f32312d3234203d3e203237393634.roa (raw, json)
Hash identifier:          3Q1GJTBVA+27gPiuJnlK2TCxOGuR6+6AWB9inab6zWY=
Subject key identifier:   5F:76:89:81:E6:F4:9B:03:B2:F3:B3:7C:04:4C:42:9D:5A:AC:32:C8
Certificate issuer:       /CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
Certificate serial:       0CF1E154D024DCA38CBD846678771718061B9A8C
Authority key identifier: 80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa
Signing time:             Tue 04 Feb 2025 18:22:54 +0000
ROA not before:           Tue 04 Feb 2025 18:17:54 +0000
ROA not after:            Tue 03 Feb 2026 18:22:54 +0000
asID:                     27964
IP address blocks:        200.50.240.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f1:e1:54:d0:24:dc:a3:8c:bd:84:66:78:77:17:18:06:1b:9a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80283F0B20A26A77DCFBF113D4D4FE848E91D987
        Validity
            Not Before: Feb  4 18:17:54 2025 GMT
            Not After : Feb  3 18:22:54 2026 GMT
        Subject: CN=5F768981E6F49B03B2F3B37C044C429D5AAC32C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:14:1d:9a:d8:73:da:f1:5e:46:25:18:28:
                    af:64:98:64:48:8f:22:f6:3b:a6:ae:e9:bd:55:f5:
                    0b:57:74:ed:a3:6e:7b:58:e5:c6:84:26:3e:64:6b:
                    41:a6:6b:01:2e:e9:16:3b:e1:31:ab:c5:d8:d8:69:
                    be:d3:66:5d:38:68:76:ed:b6:dc:74:08:bc:95:3e:
                    e4:bf:f0:ca:41:2e:15:79:e0:8b:56:37:f1:3b:75:
                    17:43:21:0a:c8:56:a0:bd:b3:66:bc:1b:dd:cd:13:
                    7a:26:97:81:ac:e0:2b:57:1c:c8:74:77:7b:27:6d:
                    b7:15:67:ed:b0:f1:fd:fd:a1:ea:9d:e4:f0:98:0b:
                    a3:b8:85:e2:dd:ad:69:ed:2f:f2:4f:6e:49:d3:bb:
                    b6:1d:0d:9f:ed:5f:dd:a6:22:25:3d:b9:6e:f4:36:
                    6d:45:86:cb:67:2d:1f:07:2e:a3:c3:cd:fe:63:34:
                    85:d7:51:57:c0:43:f1:00:ac:20:c0:28:9b:f8:67:
                    7a:05:f5:d7:97:ee:b2:3c:e3:2b:60:a6:19:07:6d:
                    5e:9c:8f:35:41:55:c5:19:f0:af:d1:64:81:54:62:
                    c7:ac:e9:d7:87:24:74:aa:fe:90:49:8b:66:ab:f0:
                    9f:88:11:83:f0:0e:49:56:75:59:42:03:24:f2:ed:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:89:81:E6:F4:9B:03:B2:F3:B3:7C:04:4C:42:9D:5A:AC:32:C8
            X509v3 Authority Key Identifier:
                keyid:80:28:3F:0B:20:A2:6A:77:DC:FB:F1:13:D4:D4:FE:84:8E:91:D9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80283F0B20A26A77DCFBF113D4D4FE848E91D987.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4C17A692AF17AFE052EC8FA2786FA0AEF673712A9A8B78BB48244F7967C045C/0/3230302e35302e3234302e302f32312d3234203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:31:b8:d1:eb:48:c8:1b:e9:ba:61:50:75:55:06:75:51:
         01:ba:f6:9e:4f:b8:33:9e:7a:3e:67:3c:1b:70:0c:67:15:5a:
         4f:2c:1a:f6:3f:7a:f3:dc:bf:cb:ca:5a:12:12:f6:89:8e:ec:
         cf:46:22:7a:79:19:dc:84:1b:4e:76:96:3e:64:38:5f:ca:c6:
         bb:5c:eb:86:5d:64:41:3c:90:46:db:dc:f3:da:7f:7d:89:ca:
         2c:c9:2f:23:28:32:47:7a:cd:61:b1:b9:df:ee:8c:e8:7d:7b:
         79:e4:9c:5a:81:de:af:ff:09:1d:5c:14:51:06:75:94:d2:88:
         25:f7:b9:5b:75:ca:fc:20:e8:83:07:8f:03:68:49:97:4b:44:
         c4:ea:03:6d:21:b1:27:45:0e:2a:b2:76:38:08:d8:b3:0a:ef:
         fb:18:bd:c0:3c:ef:a8:55:ac:e3:11:4a:44:0f:e0:d8:ac:e9:
         d1:f7:ce:b0:a2:b8:d2:20:90:c6:fe:39:cd:f3:51:8b:1d:1a:
         66:9a:f9:01:75:5e:5b:88:f7:79:5e:4e:47:b9:94:bf:25:5e:
         12:df:2c:60:45:97:0f:26:36:31:27:4b:53:9a:02:4f:c8:7f:
         89:3e:d1:e7:8b:d4:60:40:2c:56:ba:78:12:0b:5f:64:86:87:
         c7:ad:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:38 2025 by rpki-client