Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3231312e302f32342d3234203d3e203237383630.roa
File:                     3230302e31322e3231312e302f32342d3234203d3e203237383630.roa (raw, json)
Hash identifier:          R5FJZkACzRi+GCboncJ8Y2Mc7ZSYmKOA6xwxEwXaUng=
Subject key identifier:   E5:42:42:70:61:7B:A6:FE:D3:5F:CA:99:7B:FC:DF:3A:66:29:45:BC
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       20E159F809BD31DCE8DEB6E1E4A1E2A409DE26C8
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3231312e302f32342d3234203d3e203237383630.roa
Signing time:             Tue 04 Feb 2025 18:04:01 +0000
ROA not before:           Tue 04 Feb 2025 17:59:01 +0000
ROA not after:            Tue 03 Feb 2026 18:04:01 +0000
asID:                     27860
IP address blocks:        200.12.211.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e1:59:f8:09:bd:31:dc:e8:de:b6:e1:e4:a1:e2:a4:09:de:26:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Feb  4 17:59:01 2025 GMT
            Not After : Feb  3 18:04:01 2026 GMT
        Subject: CN=E5424270617BA6FED35FCA997BFCDF3A662945BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:29:2f:c8:fc:1c:15:81:7c:44:3d:e6:cc:90:
                    e1:8a:6f:48:d7:06:fb:02:fa:09:fc:6d:f9:59:48:
                    ef:fd:5c:bf:71:c1:92:79:7d:9a:50:cc:63:82:cf:
                    a9:39:0f:17:b2:68:c5:50:9e:e8:80:64:66:03:d4:
                    97:6e:11:7c:36:8a:98:fc:a4:16:e9:6b:34:a7:58:
                    a4:6a:20:0b:52:9f:d1:9b:ae:3b:d7:4e:b1:42:7e:
                    a5:4a:aa:0b:53:fe:fb:f3:c1:40:8c:9f:9a:25:df:
                    e7:3a:6c:6e:9e:ff:0b:3f:d1:07:0d:e6:a7:8f:45:
                    06:1c:e8:35:0f:42:57:ec:1b:27:30:a8:a7:78:4e:
                    44:dd:1b:d0:ec:ce:bb:55:b5:e1:ad:b8:01:4f:68:
                    f5:db:f7:e7:18:94:38:b5:55:6b:4e:95:79:40:59:
                    e0:0b:74:b8:dc:9b:23:0b:00:e5:a5:f7:79:6f:c7:
                    e8:ae:e3:9f:a9:9b:b0:2e:1c:2f:3b:03:84:51:34:
                    7f:32:02:41:e5:e4:9a:fd:06:a4:5c:65:f4:0b:86:
                    71:28:11:40:ec:a1:de:88:56:af:c8:e4:95:fc:db:
                    25:50:b8:a8:66:71:ce:7a:75:32:29:d1:56:78:09:
                    6a:a9:f5:7c:58:5b:fe:c7:78:45:11:5b:b9:cf:b8:
                    b1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:42:42:70:61:7B:A6:FE:D3:5F:CA:99:7B:FC:DF:3A:66:29:45:BC
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/3230302e31322e3231312e302f32342d3234203d3e203237383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:c2:de:10:c7:4d:9f:30:ef:dd:88:25:38:ca:7b:ea:7e:02:
         ce:d5:e9:2b:a2:78:de:b7:d3:fe:c9:55:67:de:17:bb:11:60:
         9c:e9:c3:d5:7b:8f:ff:ac:43:ae:49:b6:27:23:34:b5:26:3d:
         03:f7:af:d4:4f:7b:fa:8f:d4:89:ea:75:1e:79:fa:b0:46:12:
         1c:76:df:f8:94:fa:a8:27:73:b0:c8:7a:37:89:f5:3c:ae:ea:
         41:9f:30:eb:57:b8:0c:57:37:70:94:a0:af:42:a2:46:5e:2b:
         da:7a:e3:aa:45:85:10:a7:96:fd:73:1c:02:b5:8c:5e:13:5c:
         5c:91:30:08:7f:59:1f:2c:7e:91:c0:0b:f6:8b:67:7a:3d:33:
         d3:5c:75:3a:5e:7e:8f:25:c0:98:bb:b8:8c:47:92:0d:53:38:
         bf:7b:db:b5:91:b7:b9:bd:80:12:bc:0e:49:bd:60:48:37:0d:
         2b:ef:62:8c:8a:2c:0d:5e:0c:70:fb:52:70:e7:75:b5:6f:23:
         12:bd:00:eb:b7:d8:81:6c:d0:1d:b4:de:eb:56:eb:67:1d:42:
         c3:f0:50:e8:d5:d0:9b:5e:0e:1c:8a:60:33:b5:9a:56:a7:d5:
         86:f2:a2:43:9b:24:59:75:bf:81:ae:76:9f:52:18:8f:26:11:
         43:59:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:00:49 2025 by rpki-client