Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e3130312e302f32342d3234203d3e203238343433.roa
File:                     3230302e32352e3130312e302f32342d3234203d3e203238343433.roa (raw, json)
Hash identifier:          Ydom2IrPpHxOzgGDqb6HMqzkva2EGHcJmqdQCpIwL2s=
Subject key identifier:   D1:B3:5A:F1:34:F0:4D:21:CA:FE:40:C5:38:ED:EA:BC:1E:95:9E:6B
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       7277ABE6F807D6B40BF3A5D2AC7A5F36AF2ACE32
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e3130312e302f32342d3234203d3e203238343433.roa
Signing time:             Fri 07 Feb 2025 23:10:00 +0000
ROA not before:           Fri 07 Feb 2025 23:05:00 +0000
ROA not after:            Fri 06 Feb 2026 23:10:00 +0000
asID:                     28443
IP address blocks:        200.25.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:77:ab:e6:f8:07:d6:b4:0b:f3:a5:d2:ac:7a:5f:36:af:2a:ce:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  7 23:05:00 2025 GMT
            Not After : Feb  6 23:10:00 2026 GMT
        Subject: CN=D1B35AF134F04D21CAFE40C538EDEABC1E959E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:ae:a0:4e:38:6e:57:1b:55:e7:bb:4b:63:
                    b2:9f:1d:15:c7:9e:5e:28:3f:84:50:09:7f:0a:b9:
                    8d:5c:14:91:ed:2f:94:29:a5:12:27:82:83:45:25:
                    70:73:d5:7a:7d:29:67:86:c4:59:98:ca:50:eb:69:
                    2a:56:6a:ec:3d:0f:b9:52:f3:91:81:d3:d6:e5:21:
                    c7:98:ac:79:14:d5:7a:78:53:d7:93:bb:36:b2:6e:
                    72:2a:d4:fd:dd:4a:33:e7:7b:ba:b8:4b:5b:8d:9f:
                    88:ab:42:fc:d7:26:89:a4:73:73:f1:c0:45:c9:74:
                    b5:54:18:d6:f1:a4:72:0b:fa:35:d7:89:7d:30:44:
                    51:aa:6b:30:ba:11:39:36:49:3c:d4:96:ad:6a:51:
                    98:4b:ee:6c:59:76:a6:cc:28:f7:7c:4c:4c:ae:21:
                    95:20:14:d4:82:76:46:e2:70:fa:46:16:f7:a4:1f:
                    6d:89:49:76:de:25:01:2b:46:0a:bf:6a:14:50:42:
                    f3:d4:8c:84:30:55:40:ff:4a:4a:00:e6:c4:f2:e5:
                    c9:a8:b8:61:1a:1c:f7:d1:0b:19:69:8e:4a:02:d0:
                    7f:64:cd:78:a9:ba:b4:e6:e3:02:c2:c2:e4:2a:c6:
                    f4:44:75:9b:64:51:1a:3a:b4:b4:24:69:ba:45:44:
                    c0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:5A:F1:34:F0:4D:21:CA:FE:40:C5:38:ED:EA:BC:1E:95:9E:6B
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e3130312e302f32342d3234203d3e203238343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:13:73:e8:ec:b3:db:f7:2a:d0:2c:fc:8f:05:54:3a:41:
         60:61:f0:a2:62:98:93:0b:b2:cf:46:61:34:6b:a4:93:24:8d:
         f1:57:4e:be:bf:25:49:98:f0:da:12:c9:f4:8d:b6:cb:fc:70:
         54:8a:ab:03:0e:9d:d9:2c:6f:04:0b:2e:db:4f:ac:a3:9a:94:
         f3:0d:21:7c:48:6c:81:5f:37:c2:be:26:a8:9c:91:f0:58:e8:
         ce:93:7f:20:00:97:3f:f0:02:a9:90:29:1f:d5:1f:e6:04:a2:
         17:a2:f7:2d:bc:04:a2:9c:c3:b2:57:e9:99:68:a3:5b:79:d2:
         a0:c5:16:ce:17:8f:93:41:8e:f1:3b:47:11:f4:f5:f7:bf:96:
         e6:a1:e7:12:44:9c:bf:d0:36:7b:7a:a2:17:20:73:e6:9b:ac:
         6f:a7:55:c6:6e:1d:b8:5f:58:6b:b7:6b:bb:f2:a2:ef:9f:5b:
         e7:44:da:c4:7e:59:c2:6e:74:d3:e2:31:5c:33:24:38:d3:ca:
         5a:b5:50:11:76:63:d0:99:9f:e4:f3:fa:0b:79:e0:e0:39:2d:
         d7:2f:f6:6d:0e:5b:f9:fd:e4:9d:b6:4d:d8:c1:a6:a0:ef:92:
         dd:d1:86:45:16:fa:14:f7:24:dd:40:a2:75:81:26:4d:e8:6c:
         da:03:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:43 2025 by rpki-client