Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3230302e372e38382e302f32312d3234203d3e203237383030.roa
File:                     3230302e372e38382e302f32312d3234203d3e203237383030.roa (raw, json)
Hash identifier:          7R1DNNMHnDPnN03vcX2VMF9AW0GrrVK/05Ve0Rk00uo=
Subject key identifier:   55:C7:B3:68:B1:76:13:E7:09:41:5D:B4:C6:D5:7D:90:7A:A8:37:9A
Certificate issuer:       /CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
Certificate serial:       7847B9066FF308EC229DCF1AEDF3420B8A586D0E
Authority key identifier: 2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3230302e372e38382e302f32312d3234203d3e203237383030.roa
Signing time:             Tue 04 Feb 2025 19:58:41 +0000
ROA not before:           Tue 04 Feb 2025 19:53:41 +0000
ROA not after:            Tue 03 Feb 2026 19:58:41 +0000
asID:                     27800
IP address blocks:        200.7.88.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:47:b9:06:6f:f3:08:ec:22:9d:cf:1a:ed:f3:42:0b:8a:58:6d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE426DCE116C2FC2D07BDD209BC070F6D233D1C
        Validity
            Not Before: Feb  4 19:53:41 2025 GMT
            Not After : Feb  3 19:58:41 2026 GMT
        Subject: CN=55C7B368B17613E709415DB4C6D57D907AA8379A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:fa:f7:26:31:c8:39:45:da:24:2a:10:42:
                    8a:13:7a:28:3c:9d:0f:bc:52:af:bd:17:5b:b7:06:
                    a0:c3:07:58:03:4b:9a:e5:92:a9:79:85:6c:ca:ff:
                    a1:28:bd:77:ca:c5:1c:52:1d:02:74:cd:e8:05:52:
                    7c:be:2a:03:ef:b8:0f:51:6d:50:d1:2d:14:86:bc:
                    31:3a:01:73:fd:f4:3a:7e:6d:9b:98:3b:3d:b0:7a:
                    69:21:ba:da:68:d6:96:4a:7f:4b:1b:ec:d4:99:16:
                    8b:1f:84:b5:a4:e3:ab:c9:62:18:fd:e4:bc:b6:09:
                    66:5a:46:3e:14:73:bb:1b:8d:28:bd:37:00:a6:37:
                    27:fb:e7:f2:f8:09:4e:6e:de:09:d5:2b:0a:e7:03:
                    93:e1:bc:50:e9:e2:a8:28:2e:4b:00:99:7e:0c:1c:
                    49:34:50:81:71:55:39:13:1d:df:19:ed:50:08:b7:
                    0d:c3:b7:b2:18:e5:86:82:44:6b:1f:ee:0a:3a:20:
                    15:c0:d3:a1:76:a6:97:76:99:2f:42:77:fd:85:4e:
                    4b:3e:1d:a0:d2:33:b2:dd:c8:1a:98:fa:1e:dc:40:
                    aa:a3:dc:f1:5d:39:85:10:e6:8e:fa:c5:ef:09:e4:
                    24:65:8c:c1:96:55:76:52:3e:ed:15:5f:6d:5e:65:
                    c7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:B3:68:B1:76:13:E7:09:41:5D:B4:C6:D5:7D:90:7A:A8:37:9A
            X509v3 Authority Key Identifier:
                keyid:2C:E4:26:DC:E1:16:C2:FC:2D:07:BD:D2:09:BC:07:0F:6D:23:3D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2CE426DCE116C2FC2D07BDD209BC070F6D233D1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5C5D59D4C7A363EB6C4C85BC4088296E27FB2AC53E6DBA4C64DD2F1DC5B35D/0/3230302e372e38382e302f32312d3234203d3e203237383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:bf:f3:18:a7:07:5f:b9:58:58:91:a6:57:05:c5:c5:09:
         73:36:f9:df:e7:95:e2:5d:b7:3c:f0:3a:96:47:62:57:c2:b7:
         47:20:e6:47:fa:1a:e5:25:bb:1d:a7:41:f4:f7:c1:1d:26:4e:
         88:cd:ef:0f:96:a1:65:9b:5f:73:6b:73:52:63:4b:41:0f:ec:
         90:ff:a9:f3:1d:cb:3c:26:34:cb:71:18:b7:2b:e2:03:0f:ac:
         de:f3:ff:71:62:e4:a8:f4:1d:98:f4:fa:0d:e7:f6:4f:c7:ce:
         45:52:e0:7b:f6:66:a5:62:d6:66:04:2b:fd:e3:9a:08:d9:4e:
         12:e2:61:c4:78:01:fb:a2:9a:5a:a0:25:19:50:81:b9:17:0f:
         b5:b8:08:8f:a8:83:dc:ff:c6:aa:34:56:54:72:99:5a:10:84:
         64:75:80:30:17:77:77:2b:31:80:f9:8f:08:59:a9:92:da:cb:
         b3:e7:11:e4:a1:68:44:56:03:24:cc:68:59:e4:27:ca:2d:0a:
         e5:dd:c4:39:c0:69:e9:a7:8d:bf:6d:29:91:b8:fc:40:10:cb:
         d6:4c:9c:3e:e6:c1:9a:7d:19:87:e6:e7:05:00:79:fc:c4:86:
         3c:1f:0f:fe:3e:b2:73:03:4c:ca:f4:6f:b8:71:67:e5:64:2f:
         40:c2:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:30 2025 by rpki-client