Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203132303636.roa
File:                     3230302e34322e3139322e302f31392d3234203d3e203132303636.roa (raw, json)
Hash identifier:          cqvjUUFBGcQo5JWloEeah2KbRgFvNUsmsixFjEweeck=
Subject key identifier:   E9:DF:58:46:B4:04:A8:E3:D6:B8:98:87:43:03:65:95:AB:20:08:3B
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       43643E1672B865AA37657A98270AE2B1D1C7EDDE
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:46:59 +0000
ROA not before:           Tue 04 Feb 2025 18:41:59 +0000
ROA not after:            Tue 03 Feb 2026 18:46:59 +0000
asID:                     12066
IP address blocks:        200.42.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:64:3e:16:72:b8:65:aa:37:65:7a:98:27:0a:e2:b1:d1:c7:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:59 2025 GMT
            Not After : Feb  3 18:46:59 2026 GMT
        Subject: CN=E9DF5846B404A8E3D6B8988743036595AB20083B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:ce:e8:1d:52:ea:50:fc:1b:6d:97:8f:d5:
                    c8:cf:57:e6:0d:eb:57:91:7b:62:c4:29:9e:ed:bd:
                    d0:4c:ee:de:a3:b1:76:ce:a9:60:2f:41:43:6f:9d:
                    b4:8d:41:ea:d1:34:f5:47:3e:56:ae:5e:b6:4c:83:
                    ee:4c:5a:13:da:f0:5e:1c:ed:03:78:c1:e2:31:a5:
                    a9:d2:0d:94:01:ba:c1:aa:19:5a:08:a0:76:54:36:
                    ed:40:55:3e:d2:2c:78:da:62:90:c9:74:d2:b3:b1:
                    95:ff:1d:9a:ce:5e:f6:f7:1c:77:10:98:70:bb:53:
                    c7:57:9b:27:07:d6:dc:6c:20:e5:91:61:5e:d4:86:
                    6d:b9:c8:5f:da:3b:30:69:66:74:1a:07:ad:cd:00:
                    8d:34:c0:9b:5e:39:ce:cb:2d:35:5d:23:0b:7a:3d:
                    5b:f7:21:02:be:50:8c:bf:89:4d:0b:da:53:d0:42:
                    cd:11:d8:28:06:1a:62:0a:94:66:66:8e:a6:af:b3:
                    b7:51:e3:f7:5b:40:44:ac:85:9d:bf:53:6c:b3:27:
                    64:01:aa:e7:64:a9:60:bf:8f:af:19:75:43:10:4c:
                    68:2b:e2:aa:9d:24:90:0a:1f:9f:3c:3a:58:d7:fd:
                    6a:4d:eb:4b:4c:2b:82:5e:af:b2:1e:72:58:60:47:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:58:46:B4:04:A8:E3:D6:B8:98:87:43:03:65:95:AB:20:08:3B
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:da:7f:59:ae:e7:0a:c3:1a:4a:a2:56:45:1d:f8:7c:84:
         36:95:32:6d:9d:99:ae:c0:05:8b:d6:53:22:29:d2:0e:7e:ae:
         70:51:dd:a3:8c:02:54:94:02:29:b2:43:34:05:d1:1a:ae:5c:
         4f:7e:e5:e9:af:39:14:4d:97:f4:3f:e6:e7:fc:ce:40:ee:ac:
         8a:d8:d5:3d:13:bf:bd:f6:15:5f:8e:0c:71:1a:12:54:7f:26:
         6a:ad:24:7e:34:c2:43:9f:89:7c:ae:64:86:de:86:1c:05:87:
         fe:72:f6:ca:b4:17:c4:f5:36:eb:68:69:c8:09:fb:41:bf:df:
         81:db:9c:83:9d:15:6b:1e:08:35:58:dc:73:ec:fd:2e:ac:e3:
         54:e8:85:86:d2:cb:6e:71:0d:41:4b:ee:e0:c7:85:70:26:05:
         bf:6f:03:6c:40:5b:e0:c5:05:38:34:3c:57:a2:b7:fc:8d:78:
         65:c4:ad:dd:2e:b1:96:89:b5:15:33:d6:a0:07:c0:a3:ab:fc:
         32:59:09:72:27:95:5c:4d:23:1b:7c:cb:2e:da:46:ca:1b:27:
         e5:b8:cf:1f:23:54:9f:a3:64:76:31:1e:1e:57:be:07:01:a9:
         4f:98:d0:30:64:30:df:19:b1:85:f3:19:7a:42:b7:bb:59:e6:
         e2:b0:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:28 2025 by rpki-client