Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3137372e302f32342d3234203d3e203135323734.roa
File:                     3230302e36312e3137372e302f32342d3234203d3e203135323734.roa (raw, json)
Hash identifier:          LzhVAG8ttlp/vkt9xYgovsB/POB1efmkL6VCjljAEck=
Subject key identifier:   93:82:A9:1C:BE:42:C7:BB:E6:C0:C7:3B:B8:0C:F4:97:A5:20:D4:BB
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       75C03C958B0B24C158B9C877EC3340D4CF1CE6F7
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3137372e302f32342d3234203d3e203135323734.roa
Signing time:             Tue 04 Feb 2025 20:04:14 +0000
ROA not before:           Tue 04 Feb 2025 19:59:14 +0000
ROA not after:            Tue 03 Feb 2026 20:04:14 +0000
asID:                     15274
IP address blocks:        200.61.177.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:3c:95:8b:0b:24:c1:58:b9:c8:77:ec:33:40:d4:cf:1c:e6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:14 2025 GMT
            Not After : Feb  3 20:04:14 2026 GMT
        Subject: CN=9382A91CBE42C7BBE6C0C73BB80CF497A520D4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8f:d6:b7:59:27:9e:db:f7:0b:c5:76:ab:02:
                    0a:81:51:67:ed:14:fe:c3:bf:a7:eb:f2:03:54:86:
                    d1:ee:4e:b1:ab:c4:fb:c1:3d:3a:3d:7c:ea:9f:29:
                    e5:3b:78:9b:15:5f:40:64:13:5f:b9:d6:ea:44:1d:
                    0b:c2:b4:ad:9d:f5:ce:7b:2e:ea:4a:a8:9d:d0:d3:
                    46:22:fb:b3:57:bd:5b:f4:4b:64:25:8e:c8:6a:05:
                    33:d0:31:fb:e7:2f:40:02:77:53:36:41:d8:01:2d:
                    ee:6d:e4:b3:e3:69:13:4e:04:76:6a:32:3c:c2:5f:
                    d0:5a:d4:e2:c6:a4:0f:8e:9f:1e:64:90:f2:32:ed:
                    39:f8:61:b6:50:0f:4e:53:c4:48:df:b9:bb:b6:0d:
                    6d:96:5c:4b:1c:80:56:83:a7:a2:09:d5:62:36:6e:
                    a2:7c:04:ff:0f:56:df:37:d5:52:cc:89:a7:17:d2:
                    54:52:e6:fd:00:60:da:ca:cc:d3:e6:a3:9c:fe:13:
                    d8:00:f7:17:38:e0:b2:96:3e:e9:08:d3:14:98:52:
                    f6:8e:83:07:3b:4f:0f:6b:8a:a5:f0:73:06:0b:7d:
                    33:0b:6a:02:d9:10:0d:f9:8a:b3:ef:1d:28:50:d6:
                    cf:10:ee:3b:0f:c3:d7:0f:1a:67:40:f1:12:e4:44:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:82:A9:1C:BE:42:C7:BB:E6:C0:C7:3B:B8:0C:F4:97:A5:20:D4:BB
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3230302e36312e3137372e302f32342d3234203d3e203135323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:dc:7a:11:45:6c:55:e8:c9:60:82:e5:fb:59:ea:bb:f2:
         b6:b6:4f:5e:c6:bd:7e:2c:35:0a:38:86:8b:50:eb:a7:7c:67:
         19:43:1b:44:1b:67:e4:11:ec:96:08:16:df:ec:24:9d:be:40:
         15:6b:55:9e:1f:df:78:33:5c:0b:96:c9:3d:82:78:95:ec:0f:
         90:ef:e5:0d:98:c0:bf:fc:cd:65:92:28:af:de:69:01:67:4f:
         e2:a6:5a:e0:5e:a3:e0:6f:10:3d:79:b2:02:3d:f7:d7:2c:b5:
         6c:63:3e:5f:9a:aa:60:6f:ce:80:63:cb:87:8d:33:41:1e:b1:
         b0:48:1d:c8:b1:55:63:91:eb:d2:46:b2:a0:64:81:9a:b1:85:
         48:c5:38:67:97:ee:c2:22:41:f0:d1:9e:6f:c1:6b:32:fb:e4:
         ee:d8:a2:78:70:8d:dd:d5:66:44:b5:2b:40:84:97:a0:43:ba:
         86:14:15:8c:8f:18:00:53:d7:31:6d:2f:f5:62:bd:a6:c2:39:
         d1:1e:46:08:de:d7:f2:19:4f:63:e9:f6:89:fc:38:51:41:0c:
         87:fd:e1:40:f0:f2:1b:8e:1c:a3:a4:bc:86:17:e6:06:1c:d1:
         75:4d:b6:68:ba:a6:93:17:8f:c2:39:1d:00:a4:be:fa:fc:ad:
         0d:8c:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:25 2025 by rpki-client