Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230302e35352e3232342e302f32302d3234203d3e203237363638.roa
File:                     3230302e35352e3232342e302f32302d3234203d3e203237363638.roa (raw, json)
Hash identifier:          4aWPHL6cw3JNQ80NQsYk8vW0pu0ekoKDZQz7aMtC7w4=
Subject key identifier:   D9:19:FA:9D:7B:27:57:F5:FA:DD:30:4F:8E:80:62:76:EB:3E:5E:23
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       18F9FEF9CD0BEFA1EA6CB413A1345F5344BA3735
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230302e35352e3232342e302f32302d3234203d3e203237363638.roa
Signing time:             Tue 04 Feb 2025 19:57:45 +0000
ROA not before:           Tue 04 Feb 2025 19:52:45 +0000
ROA not after:            Tue 03 Feb 2026 19:57:45 +0000
asID:                     27668
IP address blocks:        200.55.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f9:fe:f9:cd:0b:ef:a1:ea:6c:b4:13:a1:34:5f:53:44:ba:37:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Feb  4 19:52:45 2025 GMT
            Not After : Feb  3 19:57:45 2026 GMT
        Subject: CN=D919FA9D7B2757F5FADD304F8E806276EB3E5E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:51:41:2c:c3:2a:00:7f:9c:9a:78:34:08:
                    26:9d:4b:41:08:c1:ae:46:4c:d3:37:4b:95:11:51:
                    f0:fd:02:b4:f7:df:75:cd:93:5a:6c:30:a7:1c:e1:
                    1b:68:30:c5:c1:f1:2e:2d:f4:76:e2:47:f4:59:0c:
                    35:bc:5d:95:8c:f8:5c:b2:d3:1c:a1:60:e4:ce:71:
                    e1:db:fe:e4:d2:6f:8b:57:14:21:9b:25:81:e7:5f:
                    1c:64:6c:73:59:35:1c:22:4e:bb:4c:89:ab:09:a6:
                    ea:9d:67:11:1d:f5:3b:c3:0c:19:9e:10:f6:ad:80:
                    61:32:1a:76:d5:78:e3:ba:9a:9e:f6:2c:d5:4e:0a:
                    ba:2a:a8:4b:d8:d4:bc:33:38:0b:c2:de:dd:a9:33:
                    95:36:a9:b1:04:1d:a5:a8:3a:ba:92:7e:74:d8:a8:
                    9c:a9:40:f2:07:74:68:20:02:0f:75:f4:a7:c0:06:
                    54:9e:59:61:d3:0c:52:93:51:26:ad:ba:3c:e5:52:
                    68:3b:eb:56:46:b3:e7:9e:0c:c9:ec:be:20:81:88:
                    4b:10:4b:46:4b:c6:79:c3:f5:d5:7b:3c:c4:fb:ba:
                    82:76:6a:40:5e:a2:7f:24:70:8d:2a:e5:9e:c5:34:
                    22:4b:d7:4c:7a:13:ed:6a:ee:33:75:1e:65:53:4d:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:19:FA:9D:7B:27:57:F5:FA:DD:30:4F:8E:80:62:76:EB:3E:5E:23
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3230302e35352e3232342e302f32302d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:6c:78:9e:39:42:a0:c4:91:c2:5a:14:f8:83:b0:82:7e:
         07:3a:f6:05:5f:51:5a:d8:bb:5a:10:43:83:24:11:1d:00:ae:
         86:96:1a:5b:f1:d2:e9:b5:b1:37:b8:7b:75:28:3d:ed:7b:b6:
         8c:5b:ff:bb:1f:ec:1f:e2:00:10:7e:80:3e:57:9e:1c:d8:9e:
         93:46:38:5e:01:0c:65:38:5d:f5:a8:b1:ac:38:5f:b9:9a:57:
         ee:dc:c4:a0:2c:41:f9:df:33:fe:7a:8f:61:d1:fb:a0:a8:b7:
         cc:6e:0a:28:2a:54:ea:9e:8c:fd:6d:3a:3b:21:54:1e:65:e6:
         9b:0a:1f:19:69:fa:9b:ea:30:09:29:cc:d6:b4:0e:65:47:0e:
         ae:6e:26:99:9f:f5:ad:6d:a4:c8:e6:f5:07:df:4c:79:5f:85:
         fc:e2:5b:9a:22:0c:4f:41:eb:60:de:60:44:3b:ef:62:9d:2e:
         10:54:9e:aa:06:5d:4c:44:34:0f:77:eb:eb:b7:b3:dc:49:68:
         a7:b1:72:73:c7:bf:88:2e:7d:d8:32:17:b1:11:9f:1b:54:14:
         ad:96:5c:e6:f3:05:a9:51:e4:b2:ed:32:d0:c4:74:c5:dd:40:
         7a:ac:15:61:78:2b:be:2b:eb:84:00:bd:7d:d5:67:ca:83:5a:
         a6:34:2c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:04:28 2025 by rpki-client