Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa
File:                     3230302e36312e3136302e302f31392d3234203d3e203136383134.roa (raw, json)
Hash identifier:          g57sb6C00YTXR5v05AwFxsmaZS1+4FFXL/cPj/XhJwE=
Subject key identifier:   91:73:E9:19:E2:39:B3:7A:81:A8:FF:A1:88:89:CE:63:A7:AE:C2:5E
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       69BE529208EF9BA8AD69860868B78186C727D12E
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa
Signing time:             Tue 04 Feb 2025 20:04:08 +0000
ROA not before:           Tue 04 Feb 2025 19:59:08 +0000
ROA not after:            Tue 03 Feb 2026 20:04:08 +0000
asID:                     16814
IP address blocks:        200.61.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:52:92:08:ef:9b:a8:ad:69:86:08:68:b7:81:86:c7:27:d1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:08 2025 GMT
            Not After : Feb  3 20:04:08 2026 GMT
        Subject: CN=9173E919E239B37A81A8FFA18889CE63A7AEC25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:1e:ba:ad:fd:38:01:0d:7b:76:f0:98:3d:
                    54:ca:0c:95:87:2c:a6:3c:d7:05:d3:78:27:e2:fc:
                    71:80:df:cf:60:e5:06:5d:38:dc:a3:cc:39:3c:31:
                    a7:d0:a5:c9:3a:34:0d:08:e6:5c:d0:2c:6b:62:bc:
                    69:22:3e:3d:6f:b9:b9:03:01:3c:89:7f:86:17:40:
                    04:69:0e:6e:7a:1e:e3:1f:46:c0:73:47:ce:2c:94:
                    d7:71:82:da:5c:71:18:89:c1:5d:5a:0b:7c:5e:8f:
                    d3:6e:ce:32:7c:d8:89:16:64:0f:67:21:35:b8:99:
                    88:7b:f2:e7:a7:a3:03:01:8d:31:a4:af:c3:e0:e0:
                    43:78:76:03:f7:92:2e:fc:69:14:70:23:ea:76:12:
                    00:11:15:82:10:e2:ff:7a:80:32:90:33:2e:6d:5b:
                    15:27:5e:cb:3a:38:ca:1b:43:e9:33:fd:2a:aa:99:
                    fd:5d:27:54:24:a5:22:be:37:8e:c3:b8:fa:ca:e3:
                    62:e0:5a:09:c9:ef:83:f5:ac:7e:32:e9:4b:ed:55:
                    45:60:3a:14:d2:eb:6f:db:00:a2:d2:ec:ea:e0:d7:
                    5e:19:06:40:fb:ab:b7:62:ec:d0:2b:81:b0:84:0c:
                    ef:04:6c:a2:50:18:06:53:39:54:bb:6c:7e:a8:f8:
                    6d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:73:E9:19:E2:39:B3:7A:81:A8:FF:A1:88:89:CE:63:A7:AE:C2:5E
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3136302e302f31392d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:87:8d:8f:6f:ee:5d:74:29:79:48:18:8b:b2:66:e0:4f:21:
         12:cc:7c:2b:9b:a9:2d:ad:f9:fa:b2:e7:c9:ab:e8:58:c1:43:
         2d:24:58:d0:79:9d:61:db:18:af:b3:28:bf:1c:13:1e:42:92:
         e0:48:c0:df:d8:04:b9:a5:2d:6e:4a:b1:2f:49:bc:2a:04:a2:
         47:fb:e7:9e:ff:b3:38:88:4c:bf:26:2f:7b:4c:16:9a:50:ff:
         92:8f:6e:af:4e:92:27:d9:99:9d:ba:f9:4b:67:a0:af:d3:a8:
         e8:df:a2:be:6d:bb:02:22:8b:ca:98:bd:4e:48:9a:91:ba:75:
         d1:d2:55:1c:37:46:c7:70:0d:13:0d:d0:6c:a4:9c:b0:fe:58:
         fa:15:52:53:e5:43:15:40:d7:96:ee:d2:77:92:9f:43:20:ae:
         ae:83:ed:dc:62:3f:8d:c9:39:3e:b1:d0:1a:f6:c6:49:b9:3e:
         dd:1d:c4:00:ce:4b:98:1f:f6:97:3e:0c:62:6c:36:d1:9e:43:
         80:26:7c:20:37:96:52:30:21:83:4f:b1:ef:ce:25:31:f2:60:
         94:a4:cb:ba:84:1e:c6:76:ab:18:8d:4e:62:b0:fe:3d:74:0a:
         b1:f9:6c:f4:54:59:62:da:f5:58:29:d4:24:3b:ac:7e:c5:11:
         65:5c:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:50 2025 by rpki-client