Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB106154CFDCAD3CDAC7DBEE02177E26F1B51B8FE056152FAF31105832D27499/0/3230302e33312e3137362e302f32302d3230203d3e203136393036.roa
File:                     3230302e33312e3137362e302f32302d3230203d3e203136393036.roa (raw, json)
Hash identifier:          pv3TN5uc2wLG27M38KliD4PCvImLJhBSzCGkoa3l4bY=
Subject key identifier:   27:C1:62:0B:AE:AF:9A:0D:03:E6:AC:9C:6E:3D:44:69:7B:4F:15:AD
Certificate issuer:       /CN=D6218B7CABCD23976B501280FE2367D17465285B
Certificate serial:       2214B8601DF247430B8C3A12724623DB394DB562
Authority key identifier: D6:21:8B:7C:AB:CD:23:97:6B:50:12:80:FE:23:67:D1:74:65:28:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6218B7CABCD23976B501280FE2367D17465285B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB106154CFDCAD3CDAC7DBEE02177E26F1B51B8FE056152FAF31105832D27499/0/3230302e33312e3137362e302f32302d3230203d3e203136393036.roa
Signing time:             Tue 04 Feb 2025 18:00:27 +0000
ROA not before:           Tue 04 Feb 2025 17:55:27 +0000
ROA not after:            Tue 03 Feb 2026 18:00:27 +0000
asID:                     16906
IP address blocks:        200.31.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:14:b8:60:1d:f2:47:43:0b:8c:3a:12:72:46:23:db:39:4d:b5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6218B7CABCD23976B501280FE2367D17465285B
        Validity
            Not Before: Feb  4 17:55:27 2025 GMT
            Not After : Feb  3 18:00:27 2026 GMT
        Subject: CN=27C1620BAEAF9A0D03E6AC9C6E3D44697B4F15AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:83:5c:b4:05:36:6b:2e:42:18:62:7f:c4:
                    5f:2f:70:42:b6:d7:b9:74:83:21:30:da:0c:e3:1a:
                    c6:bd:87:12:9a:5e:d8:68:71:1b:b4:67:8e:2d:51:
                    e1:26:2a:08:56:43:25:c4:e3:ef:f0:b7:8e:a6:5b:
                    71:37:b7:a2:95:ff:19:ee:ac:da:3d:27:23:9c:9d:
                    9a:63:97:e0:f1:7e:9a:e3:92:8a:09:09:0a:e5:73:
                    1f:ef:4d:21:5d:9e:8f:60:b2:be:86:81:23:69:66:
                    12:c1:3d:21:66:9b:30:4b:67:cb:50:e2:f5:49:c1:
                    ad:c2:fb:29:cf:9c:92:26:a6:b4:08:40:49:3d:c6:
                    ce:8a:a6:8c:81:10:b8:21:8f:f3:d6:57:03:a8:43:
                    38:33:0f:f7:ca:cb:c2:c5:4e:d4:4f:e9:77:89:ba:
                    b3:21:a6:d9:20:bf:e1:80:c7:d7:45:12:85:69:12:
                    3b:b8:a6:cb:2e:56:77:f0:db:77:2e:68:fc:1c:30:
                    e8:61:61:73:dd:2f:19:96:ea:00:70:08:50:55:af:
                    58:1f:11:96:3e:26:82:fc:f0:54:dc:77:c6:f5:d1:
                    47:df:6e:d7:13:2e:f9:63:41:35:42:46:4c:21:f9:
                    83:b9:0d:19:9d:0d:f5:04:84:c9:49:24:8b:61:da:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:62:0B:AE:AF:9A:0D:03:E6:AC:9C:6E:3D:44:69:7B:4F:15:AD
            X509v3 Authority Key Identifier:
                keyid:D6:21:8B:7C:AB:CD:23:97:6B:50:12:80:FE:23:67:D1:74:65:28:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB106154CFDCAD3CDAC7DBEE02177E26F1B51B8FE056152FAF31105832D27499/0/D6218B7CABCD23976B501280FE2367D17465285B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6218B7CABCD23976B501280FE2367D17465285B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB106154CFDCAD3CDAC7DBEE02177E26F1B51B8FE056152FAF31105832D27499/0/3230302e33312e3137362e302f32302d3230203d3e203136393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.31.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:b5:40:e9:b1:da:cb:96:ba:51:22:90:fb:88:67:60:29:8f:
         06:38:c2:0c:77:08:63:9e:ca:20:10:43:5c:40:4e:a0:d7:c6:
         b6:cc:e0:53:7d:22:7b:80:a7:ff:b3:6f:4c:ea:6e:9d:1f:3c:
         90:7f:21:72:00:5f:50:1d:5a:36:34:23:a2:47:00:ae:d8:c3:
         7e:e8:a6:3a:86:70:df:4e:de:ad:0c:0f:b2:95:a1:18:cd:af:
         de:3b:6d:18:6b:59:2a:a2:89:53:54:ca:4e:b3:f0:2b:12:b6:
         ce:57:c1:a8:a7:32:af:08:46:ca:4a:96:ce:a2:82:55:44:6e:
         c9:83:38:8e:c9:3b:86:35:ac:e6:ca:e4:b1:5a:cf:cf:a4:1f:
         4f:bc:90:ac:86:b5:3c:6f:46:93:9e:e6:54:1d:9f:a7:4f:41:
         95:b8:e4:65:d6:04:02:3f:a5:88:32:05:44:51:06:a4:f6:dc:
         78:ad:ec:06:bf:55:3d:65:3c:84:83:e4:cb:d8:5c:48:53:ef:
         41:b2:ce:bd:28:9f:47:c5:7c:69:e0:a3:05:1a:7a:ca:d4:d2:
         91:d2:cf:87:c9:5a:95:fa:35:a4:ab:8f:aa:b1:f9:5a:0d:ce:
         f1:41:7d:1c:e3:5d:88:44:1c:21:8a:d3:5e:fd:ee:38:1e:c1:
         0e:69:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:31:47 2025 by rpki-client