Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
File:                     3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa (raw, json)
Hash identifier:          yxPUw4XD3C9HQuZAPeLULqyRKq2o71MMF88kqO6U8x4=
Subject key identifier:   F4:34:27:4D:F6:23:CE:86:D9:D6:03:AB:F1:D2:5A:8A:BE:80:1F:22
Certificate issuer:       /CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
Certificate serial:       224DDC0F071669F0A2089DA48AD1439EAF2F6499
Authority key identifier: 40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa
Signing time:             Tue 04 Feb 2025 18:01:58 +0000
ROA not before:           Tue 04 Feb 2025 17:56:58 +0000
ROA not after:            Tue 03 Feb 2026 18:01:58 +0000
asID:                     14970
IP address blocks:        206.223.124.0/24 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4d:dc:0f:07:16:69:f0:a2:08:9d:a4:8a:d1:43:9e:af:2f:64:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CA6B9FED4B436E60321ACFED6F9A3845FE93A3
        Validity
            Not Before: Feb  4 17:56:58 2025 GMT
            Not After : Feb  3 18:01:58 2026 GMT
        Subject: CN=F434274DF623CE86D9D603ABF1D25A8ABE801F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:da:50:c1:de:fe:2f:e1:0c:76:3b:15:a2:9d:
                    93:22:ca:1c:e3:b0:db:01:34:da:35:bf:61:86:0f:
                    85:ab:7e:20:6f:7a:55:24:da:1c:cb:8a:25:57:55:
                    be:d1:c1:2b:03:6e:b6:c8:7c:ad:36:9e:0a:a8:8f:
                    4b:15:37:6d:13:1b:07:3f:d9:d6:7f:47:52:ea:f6:
                    78:45:cd:01:3b:58:91:32:6f:2b:e8:77:fc:00:c2:
                    01:0f:b6:18:19:45:45:96:9b:e3:9d:4f:02:90:4d:
                    09:21:c3:36:0f:c6:60:8f:ab:f5:e5:2b:39:e8:db:
                    4a:cd:eb:d9:74:df:b7:f7:b6:54:94:16:81:f3:6f:
                    b8:86:a3:1d:72:1d:4a:6c:9f:7e:ff:e4:c0:52:aa:
                    2a:5c:c5:d2:f3:c3:35:c7:6b:7b:a6:a8:1a:fc:4b:
                    5b:a3:71:65:91:4a:bc:f5:88:d6:c8:a6:49:92:2f:
                    aa:a4:6a:cf:54:11:13:2c:03:69:43:0b:a8:a2:0f:
                    c0:5d:c4:46:9b:5f:8b:eb:26:2a:7d:5a:62:5a:c2:
                    1e:9d:cc:e8:d7:22:0f:b9:ff:71:2c:d7:fe:ef:76:
                    c3:b9:ee:8d:ee:b4:46:df:e1:76:7f:1c:e5:48:7d:
                    ab:40:2e:64:83:4a:a1:66:71:f7:fd:f4:71:ce:bc:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:34:27:4D:F6:23:CE:86:D9:D6:03:AB:F1:D2:5A:8A:BE:80:1F:22
            X509v3 Authority Key Identifier:
                keyid:40:CA:6B:9F:ED:4B:43:6E:60:32:1A:CF:ED:6F:9A:38:45:FE:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40CA6B9FED4B436E60321ACFED6F9A3845FE93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAC3104FAF9ADBB7BEB018B241CC5118930EAC13B54065DC4FA775090EF5E244/0/3230362e3232332e3132342e302f32342d3235203d3e203134393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:99:c7:17:65:99:3e:c6:a2:72:ae:ee:8f:85:7d:86:e4:e9:
         51:2a:f1:c8:13:26:d3:77:0b:da:41:f2:13:10:67:6b:84:1e:
         d1:b1:7f:a9:e2:53:b3:a8:a9:8d:2f:d9:ac:56:4a:25:39:be:
         6e:e8:88:57:60:f2:11:11:52:a0:54:de:f1:08:79:f8:bd:af:
         13:9a:23:13:4c:81:b8:d3:23:16:8d:1b:cc:a4:b4:61:ce:49:
         18:e3:99:58:2d:00:08:f4:de:08:f4:ec:93:f5:da:9e:31:f4:
         b7:51:42:d0:d0:a8:42:ff:b7:31:83:67:3d:50:40:74:92:0b:
         38:63:2a:13:60:4f:96:5c:c6:5f:16:42:ee:33:7a:7c:24:93:
         64:f5:9e:9a:7d:1a:86:a2:e4:5f:cc:46:20:47:32:b0:2c:f5:
         a1:2e:85:b4:0c:63:00:19:97:90:98:a3:88:aa:01:dc:f0:49:
         9e:4b:fa:3e:58:9e:b3:c3:35:04:73:a4:6c:0b:8b:ce:6e:3b:
         d6:0f:20:c9:0e:82:65:a3:72:e5:91:74:fe:91:41:72:6f:11:
         10:79:56:b0:2f:85:5c:31:4a:f1:aa:39:c8:46:e2:a7:23:f8:
         b3:28:db:4d:94:a2:55:89:d9:cc:da:1b:1c:d4:e9:fe:90:e1:
         d5:c2:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:49 2025 by rpki-client