Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237373834.roa
File:                     3230302e31302e3230392e302f32342d3234203d3e203237373834.roa (raw, json)
Hash identifier:          jk+LjuP8OWroLjTeEWyGyQ9b0LqGANB8rIrPlgyG14A=
Subject key identifier:   ED:1A:64:AA:04:3E:BF:77:AC:41:3C:5A:B2:A3:51:A2:3B:87:6E:38
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       77F78FA49791F72C272FAE4D2B76C16E9BD3203E
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237373834.roa
Signing time:             Tue 04 Feb 2025 18:53:48 +0000
ROA not before:           Tue 04 Feb 2025 18:48:48 +0000
ROA not after:            Tue 03 Feb 2026 18:53:48 +0000
asID:                     27784
IP address blocks:        200.10.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f7:8f:a4:97:91:f7:2c:27:2f:ae:4d:2b:76:c1:6e:9b:d3:20:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Feb  4 18:48:48 2025 GMT
            Not After : Feb  3 18:53:48 2026 GMT
        Subject: CN=ED1A64AA043EBF77AC413C5AB2A351A23B876E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:32:81:61:60:9a:1d:09:2b:60:ff:c0:4e:
                    d4:e8:77:db:5c:45:67:e2:94:b2:ce:13:b8:b4:76:
                    62:63:6e:1e:62:ff:28:5e:24:2f:1f:67:5e:68:ef:
                    65:1c:94:3a:b5:bc:b1:67:c4:1e:b9:f0:70:4c:39:
                    7a:58:d9:34:78:e2:6f:d5:af:f8:c3:93:c5:8a:9d:
                    fb:ad:2c:1b:51:2a:7f:84:57:ee:82:9c:e8:e8:93:
                    d4:41:d0:8e:73:7c:a0:92:b9:cb:ef:02:eb:a7:ed:
                    c2:4e:4f:34:b9:cb:22:e8:bd:fc:72:a7:de:c3:2c:
                    d5:d8:3d:7b:b7:e1:3a:10:f1:56:c4:a6:05:66:bb:
                    ed:cd:98:f0:b0:a7:ac:07:93:16:cc:b6:f9:d1:5a:
                    5d:83:b7:ba:de:6a:02:bf:eb:fb:b9:20:0c:a0:65:
                    a3:90:c1:89:aa:9e:19:4e:76:96:73:ab:62:26:b4:
                    60:35:d6:40:33:69:4e:1c:bb:81:41:22:58:31:95:
                    a1:65:73:04:b0:a8:b6:87:2b:5e:4b:65:e4:a0:ac:
                    d3:f1:ba:bf:89:56:ac:88:f0:c2:7d:64:83:73:07:
                    f9:33:88:f5:31:76:27:38:82:2a:43:e1:66:e1:1e:
                    34:7d:e7:25:95:93:49:05:1b:7f:0b:1c:54:66:0b:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1A:64:AA:04:3E:BF:77:AC:41:3C:5A:B2:A3:51:A2:3B:87:6E:38
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3230302e31302e3230392e302f32342d3234203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:45:dc:95:bb:04:d7:72:9d:c3:0c:6a:d2:39:1b:ca:0d:73:
         bc:aa:fc:f0:37:87:02:02:83:d6:c6:4d:27:47:ac:3c:41:da:
         ce:f5:58:ea:10:03:96:52:0b:40:87:6a:33:6c:a9:76:fd:e9:
         6f:20:45:aa:13:7d:21:ab:74:5b:19:41:ff:c6:02:2f:24:2b:
         a2:4e:f1:d7:d5:c9:b9:e4:81:43:48:e4:4d:48:6a:7a:0d:3c:
         59:31:96:84:a0:ba:1c:2f:b2:31:38:9c:d0:21:52:85:99:18:
         ad:ab:9f:06:52:a2:74:9c:89:6c:06:02:5c:84:ff:11:73:25:
         21:4e:3d:42:8e:c5:fc:59:3e:76:83:37:b8:0c:f3:14:12:11:
         db:6f:1c:e2:09:15:62:39:9b:d7:a4:e5:ae:09:47:a9:ab:7f:
         18:34:f2:24:50:24:f4:a7:24:ac:86:6c:b0:1e:8f:14:86:c2:
         48:6b:ae:8b:66:b7:d8:d0:ae:45:50:51:b4:77:07:6c:5a:08:
         69:15:0e:75:c4:2b:43:60:11:27:d7:f5:4a:32:5b:2a:6a:a3:
         e9:a0:b6:a2:61:71:5c:2b:7a:0d:51:b7:ff:21:4d:61:f4:79:
         7d:52:80:11:f8:ce:9b:2d:25:b8:51:07:dc:6b:a0:1f:d7:da:
         ea:f1:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:04 2025 by rpki-client