Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35362e3232342e302f32302d3234203d3e203139333332.roa
File:                     3230302e35362e3232342e302f32302d3234203d3e203139333332.roa (raw, json)
Hash identifier:          TL2i4hlD6hJXrSNeWyqdo2cMD8ZRHgwpdmiacgpICMs=
Subject key identifier:   8B:62:FA:6D:5E:B7:1E:85:78:08:5B:98:42:72:98:C7:95:E1:84:02
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       74B553F74E464F63E42B7527B50EE961E26D00B1
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35362e3232342e302f32302d3234203d3e203139333332.roa
Signing time:             Tue 04 Feb 2025 18:10:54 +0000
ROA not before:           Tue 04 Feb 2025 18:05:54 +0000
ROA not after:            Tue 03 Feb 2026 18:10:54 +0000
asID:                     19332
IP address blocks:        200.56.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b5:53:f7:4e:46:4f:63:e4:2b:75:27:b5:0e:e9:61:e2:6d:00:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Feb  4 18:05:54 2025 GMT
            Not After : Feb  3 18:10:54 2026 GMT
        Subject: CN=8B62FA6D5EB71E8578085B98427298C795E18402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:1e:4a:86:fa:a6:25:ca:38:ed:2d:f5:0f:
                    a8:38:8f:17:4e:5a:e1:a3:c6:54:39:1c:9d:16:bc:
                    fe:67:c2:85:16:e1:82:c8:e6:44:38:c7:30:06:22:
                    e2:ee:02:b8:7e:b4:24:94:31:b4:bf:6b:66:60:43:
                    ea:7f:48:ff:af:ae:92:7d:cb:42:a8:e0:ca:84:36:
                    29:7e:e5:65:da:ff:7c:62:8c:19:a7:d2:ee:9d:2d:
                    74:4e:37:e8:46:67:1c:0c:43:cd:36:81:21:18:f6:
                    8c:9a:8b:30:11:f1:b8:83:cc:d5:4a:c9:dd:be:ac:
                    94:66:98:14:82:6c:5a:c6:d9:04:f4:41:0e:e4:76:
                    78:02:bf:08:35:e9:02:a9:3b:fd:14:af:1a:2a:7b:
                    63:20:0f:91:c4:a4:1b:be:9e:5c:10:86:ce:a1:b1:
                    d0:1b:5c:a8:88:73:0d:56:9b:ca:75:bb:3c:21:4c:
                    3b:76:e1:46:53:8b:a2:fc:0f:1c:db:62:7a:c8:34:
                    74:85:2e:52:0f:12:dc:95:05:01:a0:3a:17:e6:bd:
                    9d:8f:b8:1a:89:a9:40:14:ae:49:df:f0:b2:c6:21:
                    25:5c:5e:7d:32:51:ec:c4:8f:fe:ef:46:21:ee:8b:
                    52:3f:87:08:6d:22:26:69:83:27:83:33:33:23:3d:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:FA:6D:5E:B7:1E:85:78:08:5B:98:42:72:98:C7:95:E1:84:02
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e35362e3232342e302f32302d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:9d:d4:58:37:7b:ae:08:7f:f9:9f:a3:77:3a:43:3b:d1:0c:
         be:71:4b:3e:fb:60:d9:5e:7a:28:c6:aa:1a:00:99:0e:39:fe:
         12:3b:f0:fe:a6:3e:ba:08:99:32:7d:c4:86:20:00:0f:ed:42:
         47:f6:44:dc:be:ab:09:24:90:6e:3c:b2:71:03:75:6b:86:a9:
         6e:ae:6e:88:72:fd:0b:dc:75:f6:0c:b0:d6:d5:f2:4d:51:4a:
         90:1d:75:ef:2e:55:3f:35:ab:02:9d:91:cc:d2:a2:92:a8:7d:
         bf:e4:19:63:6a:0b:5a:9f:43:70:da:7d:bc:2e:2c:53:b3:2f:
         6b:0e:be:60:be:c1:ae:c1:55:fb:4c:db:78:25:ce:06:6c:67:
         d4:e6:cf:d9:db:0c:8f:09:2a:26:ba:9c:1a:81:36:02:70:c5:
         75:7c:b6:c0:37:a1:a6:0b:0c:6c:60:92:94:db:c7:27:fc:b3:
         ca:47:f3:ad:b8:a9:92:81:64:3e:25:44:4a:3e:db:85:c3:5b:
         c2:33:19:41:07:98:05:6f:c0:7e:be:d9:09:64:c4:0c:ca:da:
         04:06:1e:ab:bd:e6:0d:63:74:db:a6:65:d5:fd:aa:cc:b9:d9:
         83:fd:78:4b:06:b1:63:3f:b6:2e:88:bb:70:7f:5b:b5:ba:10:
         fc:92:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:36 2025 by rpki-client