Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3234203d3e20323635363237.roa
File:                     3230302e3231392e34342e302f32322d3234203d3e20323635363237.roa (raw, json)
Hash identifier:          6TkTsKBhRpQWMnzNXY/7IFKdIZPoUmt+ptuDyKUDB8E=
Subject key identifier:   58:BE:98:E3:06:14:62:8F:96:21:FF:C3:05:D6:09:6D:3F:78:71:11
Certificate issuer:       /CN=FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD
Certificate serial:       0A20B3C742B6F1BEACE6A53D349602CDFAC40B48
Authority key identifier: FD:71:77:B4:4A:01:57:53:B2:E7:4C:CE:6E:5F:FC:84:38:D4:F4:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3234203d3e20323635363237.roa
Signing time:             Tue 31 Dec 2024 20:20:00 +0000
ROA not before:           Tue 31 Dec 2024 20:15:00 +0000
ROA not after:            Tue 30 Dec 2025 20:20:00 +0000
asID:                     265627
IP address blocks:        200.219.44.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:20:b3:c7:42:b6:f1:be:ac:e6:a5:3d:34:96:02:cd:fa:c4:0b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD
        Validity
            Not Before: Dec 31 20:15:00 2024 GMT
            Not After : Dec 30 20:20:00 2025 GMT
        Subject: CN=58BE98E30614628F9621FFC305D6096D3F787111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:98:24:ca:b6:80:9f:62:d0:57:84:ae:28:59:
                    91:4d:75:8c:19:7a:4b:73:71:04:6f:7d:57:e1:37:
                    69:fa:58:30:69:51:3f:c0:b5:69:ae:41:e0:24:20:
                    f4:be:82:ad:fd:4b:ce:81:c9:b8:d7:20:d8:4e:39:
                    9a:9c:49:50:7e:85:5a:44:fc:03:01:12:64:be:1e:
                    c5:12:4a:1c:5e:03:1b:1d:8e:ee:f3:b2:b7:97:01:
                    88:2d:d9:27:24:45:33:2b:78:05:c6:7e:86:4f:f3:
                    59:7c:74:3d:88:c2:df:17:af:f7:e8:c1:22:90:82:
                    fc:87:bd:a5:2a:a2:3e:e2:eb:12:b8:19:65:53:19:
                    04:fd:0f:ce:bd:54:0e:57:72:72:bb:bb:42:8e:8b:
                    bb:e0:98:38:d7:38:2c:00:c8:ae:22:5a:68:2e:a1:
                    d9:c1:4a:d4:1e:33:df:a5:9e:74:84:be:1f:04:13:
                    83:59:30:d7:9d:38:c7:72:5b:69:0b:a6:64:72:75:
                    9a:a9:ab:42:50:9a:8c:e7:b1:4d:3b:a5:f9:2f:88:
                    fa:51:51:a7:1a:62:f3:92:0c:b8:5a:2d:34:24:3d:
                    db:c9:c8:c4:5a:88:77:c3:4f:27:e0:59:04:ad:4b:
                    c7:a7:bd:5c:c9:7b:e8:73:58:6b:12:fa:1c:b2:ab:
                    f0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BE:98:E3:06:14:62:8F:96:21:FF:C3:05:D6:09:6D:3F:78:71:11
            X509v3 Authority Key Identifier:
                keyid:FD:71:77:B4:4A:01:57:53:B2:E7:4C:CE:6E:5F:FC:84:38:D4:F4:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD7177B44A015753B2E74CCE6E5FFC8438D4F4AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AE73F2FB1CCB08B1465B8247B36E4D64F965319B0F5FC6E150A7F95FAB2782DE/0/3230302e3231392e34342e302f32322d3234203d3e20323635363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:64:1f:b8:28:1d:43:1b:5e:ea:9d:bd:65:ba:d4:1b:d5:2f:
         59:2a:14:9c:31:33:89:96:91:ca:5f:de:ef:85:4c:75:27:3f:
         00:b0:c4:f2:0a:aa:61:28:9d:f6:b6:27:11:d2:25:3d:d6:e4:
         7d:af:d6:ec:05:54:fc:46:9c:04:eb:3d:55:ba:37:b3:c1:05:
         01:a4:4b:3b:2c:08:0d:be:79:51:9d:89:27:6b:fb:4d:14:fa:
         f5:2a:e8:4a:b9:43:7f:23:f7:13:c3:65:06:19:81:fa:42:ee:
         92:57:04:0b:50:58:58:89:c5:c9:85:68:bf:26:4a:21:29:35:
         f8:24:c9:10:92:af:a9:20:f1:47:33:92:64:3d:2e:f0:ac:4b:
         2d:76:03:24:82:e1:75:d2:42:b9:ca:c8:37:90:cb:ea:32:01:
         45:81:60:8f:7b:7d:cb:21:d4:20:f3:64:6d:b2:17:19:9b:1d:
         4e:d1:35:82:b9:2a:b9:5e:ca:8c:c4:03:e8:ef:e6:42:2d:fa:
         63:d2:56:f3:f9:54:23:84:3c:39:eb:19:1a:1d:5b:7e:3f:d4:
         37:ad:69:23:46:cf:28:df:a1:5a:2e:c2:63:e5:0c:72:54:cd:
         a7:c4:c0:4b:53:f6:94:5f:bc:f6:42:65:e3:14:bb:7a:30:1c:
         67:52:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:26 2025 by rpki-client