Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e3130322e302f32342d3234203d3e203238343433.roa
File:                     3230302e32352e3130322e302f32342d3234203d3e203238343433.roa (raw, json)
Hash identifier:          3hPGYzIiv0ADbanU5qGIq4+Xu+kvPzukxHQGeqJmspI=
Subject key identifier:   E0:23:25:F9:F2:32:E8:16:ED:16:8E:76:AE:69:1D:31:91:ED:0E:88
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       617D7CD26E011C05C2091F112EB42AA369B34378
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e3130322e302f32342d3234203d3e203238343433.roa
Signing time:             Fri 07 Feb 2025 23:10:01 +0000
ROA not before:           Fri 07 Feb 2025 23:05:01 +0000
ROA not after:            Fri 06 Feb 2026 23:10:01 +0000
asID:                     28443
IP address blocks:        200.25.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7d:7c:d2:6e:01:1c:05:c2:09:1f:11:2e:b4:2a:a3:69:b3:43:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  7 23:05:01 2025 GMT
            Not After : Feb  6 23:10:01 2026 GMT
        Subject: CN=E02325F9F232E816ED168E76AE691D3191ED0E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:52:b7:5f:f7:60:6a:a3:ff:ea:9f:7a:72:
                    13:d4:50:51:0f:0e:b1:44:d3:84:f0:50:4c:ac:36:
                    3b:3e:42:21:5b:f4:04:e3:97:c5:d5:00:d1:e3:4e:
                    7e:a1:5f:c3:d8:29:b3:9f:74:6d:23:06:d8:b0:57:
                    67:84:57:2b:9e:59:f4:d1:93:0f:d9:ca:69:13:8c:
                    41:5b:f7:dc:fa:66:bc:c3:ff:0a:1b:55:5c:ac:01:
                    d3:f3:3e:73:44:c3:d8:08:b1:85:29:39:4f:e6:b4:
                    b3:d1:ea:e8:bb:4b:04:b9:1c:24:ff:9f:45:06:b2:
                    dc:79:96:09:7c:89:c9:de:d2:ce:40:71:7a:21:6a:
                    a2:52:fe:08:35:a3:2d:44:b6:92:ed:26:2e:55:7a:
                    4f:d2:5e:2d:5e:bd:83:d0:c9:6c:b8:2e:2a:71:45:
                    cd:99:ac:8a:42:01:48:b8:87:85:d9:7e:84:a4:2c:
                    82:c1:90:35:71:0b:c2:f0:d6:56:87:26:6c:fc:34:
                    57:2f:92:93:19:67:db:13:59:94:87:64:64:7b:aa:
                    83:28:9b:19:66:02:79:28:17:6c:4c:17:36:fd:7f:
                    f1:1b:1d:1f:cd:be:03:27:5d:8e:88:5a:19:82:5a:
                    d4:a8:a6:22:d7:8f:c6:d9:c0:1f:8a:6c:93:74:35:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:25:F9:F2:32:E8:16:ED:16:8E:76:AE:69:1D:31:91:ED:0E:88
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e3130322e302f32342d3234203d3e203238343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4b:d2:8d:0a:91:65:bb:e7:bd:1d:d7:8a:b7:90:50:51:a5:
         cc:57:88:db:e8:22:2c:a6:26:da:b3:9f:0e:32:a6:d0:8b:e9:
         3a:f1:a9:e3:90:79:ad:63:eb:ad:b1:6c:2d:5c:db:a1:75:88:
         f0:12:17:75:74:0b:36:fd:d1:a9:75:53:10:d8:d8:cb:76:de:
         c8:1a:77:b8:5f:4d:74:f1:04:59:66:cd:c7:e6:72:dd:01:0f:
         9f:d7:bb:6e:59:9b:86:32:8c:e2:d7:c8:f7:b9:b2:08:87:3c:
         dc:18:32:f2:96:8a:ed:07:a0:bc:99:27:d1:76:80:2b:1b:f2:
         b2:24:eb:9c:67:c6:e3:e1:6c:60:51:be:9c:aa:46:4d:23:6f:
         38:a4:10:bb:2c:d3:3a:bc:a6:46:6e:e3:d5:36:47:98:ba:d1:
         56:e1:af:52:95:1d:cf:60:ab:59:84:2f:1d:27:61:db:2d:43:
         68:61:10:07:61:07:a7:04:4e:25:b1:6c:95:c4:97:81:56:0b:
         7c:c8:34:c9:db:85:e9:96:7d:aa:c8:66:b1:01:4f:1b:be:21:
         21:a9:d9:47:fc:ba:c9:81:15:52:1c:84:d0:bf:ca:42:3a:a6:
         8e:53:84:dc:a7:1e:98:5c:d2:18:61:12:e0:b6:15:5c:32:e2:
         a7:7c:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:01 2025 by rpki-client