Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa
File:                     3230302e34322e3139322e302f31392d3234203d3e203238313138.roa (raw, json)
Hash identifier:          MpcuOkpPVWeotS+QZA0mTefWFvpd9u/uDT/LmfO/KO4=
Subject key identifier:   3F:1E:A6:B1:E7:8E:A1:5E:4F:DF:6E:99:91:71:EF:EF:6D:D6:D5:E8
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       38B90BCBCEA3B6006B8DA4D22096B9F5D6628B9A
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa
Signing time:             Tue 04 Feb 2025 18:46:57 +0000
ROA not before:           Tue 04 Feb 2025 18:41:57 +0000
ROA not after:            Tue 03 Feb 2026 18:46:57 +0000
asID:                     28118
IP address blocks:        200.42.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b9:0b:cb:ce:a3:b6:00:6b:8d:a4:d2:20:96:b9:f5:d6:62:8b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:57 2025 GMT
            Not After : Feb  3 18:46:57 2026 GMT
        Subject: CN=3F1EA6B1E78EA15E4FDF6E999171EFEF6DD6D5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a1:95:c5:06:6f:76:33:cb:d2:03:36:2f:36:
                    1f:de:24:55:ea:10:bc:a7:5f:d4:a7:6e:c1:ff:00:
                    bb:c0:96:30:52:00:dc:1f:cd:fd:7e:bb:7f:1b:31:
                    14:47:d4:f3:84:ba:a5:05:d9:69:57:a0:16:4c:a9:
                    b7:36:c7:85:ed:f5:8f:8f:9f:c9:38:9e:31:04:0c:
                    6e:4b:d3:51:35:4e:4e:06:68:95:34:44:b8:78:04:
                    1e:b9:cd:77:b3:13:16:4a:39:9a:1a:d5:db:20:00:
                    f0:9a:68:36:79:b5:3e:ae:58:f2:d5:3a:32:9c:a8:
                    bb:3f:4b:ea:bb:ec:43:9f:ea:b2:47:3a:15:67:26:
                    60:ca:5b:ae:15:25:63:bd:66:3a:3c:35:c3:24:32:
                    1c:47:0f:c3:f7:cd:89:40:f1:a8:ee:59:a8:50:32:
                    26:08:c8:b4:54:da:17:ca:ff:f1:0d:e2:d0:0e:7e:
                    92:90:bc:66:0e:7f:aa:ca:ea:80:7d:cd:dd:df:2a:
                    cf:cc:f6:11:80:85:00:3f:0a:3b:d2:12:33:b2:0c:
                    86:3c:5c:ae:f4:0d:00:7d:13:2b:56:9e:65:02:a1:
                    2c:3f:e0:66:32:8f:0c:46:46:e0:d3:2a:2a:b3:38:
                    ea:87:7b:d4:cc:a2:02:dc:a6:71:fe:63:98:81:1a:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1E:A6:B1:E7:8E:A1:5E:4F:DF:6E:99:91:71:EF:EF:6D:D6:D5:E8
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3230302e34322e3139322e302f31392d3234203d3e203238313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:b9:90:e0:ca:2c:3e:d5:5f:c9:42:67:95:65:5f:78:eb:9e:
         31:5a:21:73:f0:6d:99:33:94:f3:36:e3:bc:c8:9b:db:dd:ba:
         fc:d9:bf:9b:5b:7f:03:a2:fe:9a:13:7e:f5:9f:be:19:21:b3:
         5a:34:d2:0f:83:56:ac:b3:e4:57:1c:0f:92:0b:22:86:cc:49:
         29:c3:90:a6:e8:9a:ad:57:eb:96:c0:bd:77:23:30:75:d8:b6:
         96:e6:e7:db:91:4c:ec:41:c2:1a:3a:f9:f8:12:2f:64:69:cf:
         6d:7b:05:5b:0b:72:7f:b0:dc:fc:a6:7e:8c:c7:41:3c:49:1e:
         88:b0:7b:49:8c:cc:e6:1d:d1:ae:aa:19:9a:4d:ca:04:c5:69:
         b6:f1:ea:06:dd:40:20:b6:72:52:a3:88:36:77:db:5b:38:e0:
         7b:ff:3c:3b:70:9c:cf:f3:f8:b3:55:30:e2:2e:cd:5f:66:a1:
         63:e3:a1:0a:a2:2b:2d:4b:26:2e:c3:18:9e:50:9b:7a:c3:31:
         9d:62:8d:b4:d9:1c:aa:25:3a:d4:60:1a:d6:a8:4a:d6:fe:99:
         5c:68:d6:00:50:e8:f5:b5:59:d5:47:a3:98:68:b7:12:a2:fd:
         b2:80:be:ec:b5:8d:6c:35:e4:91:aa:39:65:14:5c:80:7c:f6:
         cb:04:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:12 2025 by rpki-client