Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C3238456901EBAE65E2E405A614E90FAB99A43D55C9E6872351DE66E2B7B753F/0/3230302e39302e3135322e302f32312d3234203d3e203238303231.roa
File:                     3230302e39302e3135322e302f32312d3234203d3e203238303231.roa (raw, json)
Hash identifier:          bgqzpYm0fU06n5T5im+nWxsj1yCd9v5vI1PTg1/nxyE=
Subject key identifier:   74:E3:1C:A1:B4:D7:5C:D0:99:05:DE:86:65:3E:A6:8D:B0:17:2F:98
Certificate issuer:       /CN=E04EEADEF25D431F8799DE8163F35F4968411E37
Certificate serial:       30FF1F815FE29175DE3D0FF5842E855D070C54BD
Authority key identifier: E0:4E:EA:DE:F2:5D:43:1F:87:99:DE:81:63:F3:5F:49:68:41:1E:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04EEADEF25D431F8799DE8163F35F4968411E37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C3238456901EBAE65E2E405A614E90FAB99A43D55C9E6872351DE66E2B7B753F/0/3230302e39302e3135322e302f32312d3234203d3e203238303231.roa
Signing time:             Tue 04 Feb 2025 20:01:33 +0000
ROA not before:           Tue 04 Feb 2025 19:56:33 +0000
ROA not after:            Tue 03 Feb 2026 20:01:33 +0000
asID:                     28021
IP address blocks:        200.90.152.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ff:1f:81:5f:e2:91:75:de:3d:0f:f5:84:2e:85:5d:07:0c:54:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E04EEADEF25D431F8799DE8163F35F4968411E37
        Validity
            Not Before: Feb  4 19:56:33 2025 GMT
            Not After : Feb  3 20:01:33 2026 GMT
        Subject: CN=74E31CA1B4D75CD09905DE86653EA68DB0172F98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:07:eb:01:e7:03:d5:aa:a5:d4:ba:98:c4:
                    25:7c:5c:dc:fd:b3:ee:e8:46:71:41:13:ef:0d:b3:
                    67:65:49:86:82:80:4f:84:e1:69:b9:ab:08:ea:8d:
                    20:86:31:d3:c0:15:47:9c:de:9e:08:b6:5d:04:f4:
                    ab:11:a8:4b:1f:09:0b:23:77:1b:f1:d5:36:6f:fd:
                    2d:9e:42:8f:a3:80:e7:3a:0d:e2:93:3f:00:97:d9:
                    f9:0d:f7:1e:c4:f8:b7:6f:54:ee:a1:34:7f:1b:df:
                    e7:be:a4:f7:0d:01:2b:12:39:10:74:4b:8e:b7:fd:
                    f5:b5:97:00:09:75:d0:a0:35:a8:4c:22:a1:a7:17:
                    d1:fe:f5:ab:86:1e:6e:7e:b8:b2:23:4d:c0:ec:f0:
                    bb:87:20:46:ee:a0:b3:39:42:5f:28:c5:a4:ee:93:
                    46:70:57:0d:68:2b:28:cb:7a:c6:95:18:7f:36:04:
                    96:47:67:a5:e1:fb:73:71:f9:c5:9c:b3:9f:65:21:
                    12:aa:d5:f5:04:45:47:3b:c8:b2:ac:37:c2:46:0a:
                    08:0f:e6:24:d1:ca:38:99:a9:7e:ba:77:93:18:97:
                    ea:e2:f0:6e:5b:74:b0:f6:e2:2b:54:02:04:52:79:
                    b7:3d:a7:77:5d:b4:db:0a:9f:f3:d5:1c:40:8b:3c:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E3:1C:A1:B4:D7:5C:D0:99:05:DE:86:65:3E:A6:8D:B0:17:2F:98
            X509v3 Authority Key Identifier:
                keyid:E0:4E:EA:DE:F2:5D:43:1F:87:99:DE:81:63:F3:5F:49:68:41:1E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C3238456901EBAE65E2E405A614E90FAB99A43D55C9E6872351DE66E2B7B753F/0/E04EEADEF25D431F8799DE8163F35F4968411E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E04EEADEF25D431F8799DE8163F35F4968411E37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C3238456901EBAE65E2E405A614E90FAB99A43D55C9E6872351DE66E2B7B753F/0/3230302e39302e3135322e302f32312d3234203d3e203238303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:86:a1:c0:0c:22:65:ce:54:fa:c5:da:72:03:49:c9:09:
         c8:db:1b:a8:8e:fd:d1:76:da:86:b1:f3:f3:2d:65:a6:a5:62:
         96:1a:5c:28:41:57:e5:b3:93:ac:cc:f8:63:11:5f:1b:a0:76:
         7f:9f:43:1b:2b:ab:80:ef:fb:fb:d9:f4:9f:fb:9c:26:45:39:
         46:e9:9c:c4:0b:51:72:fe:58:8a:83:13:46:ce:da:c0:66:fb:
         e1:e4:ad:3a:df:2f:7d:2d:11:65:61:4d:48:86:2f:84:0a:1e:
         69:a1:e8:e1:31:ad:7d:e3:a0:ca:b5:3f:ae:8b:c8:8e:be:ce:
         15:fe:9e:84:8d:9a:f5:bd:e7:cc:af:2f:49:e1:37:16:df:f8:
         ee:08:fe:09:af:43:d8:11:b5:37:f3:83:58:e4:56:f5:5e:66:
         11:d4:2d:d3:7b:d0:15:d5:46:fa:b6:52:aa:08:33:4c:1e:4b:
         b5:3a:25:24:af:8f:e3:7e:80:9c:6d:cf:18:4e:30:c7:7d:d8:
         1f:21:4f:60:17:06:64:db:44:ef:dd:df:5d:fc:08:51:4b:29:
         3b:3c:26:78:c3:e1:1c:0d:35:98:0e:8b:94:bf:ef:25:f8:55:
         f2:e0:85:bd:a2:cc:dc:18:e0:00:0d:88:8c:fd:fe:48:2c:11:
         6d:13:22:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:11 2025 by rpki-client