Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/3230302e302e3138302e302f32342d3234203d3e203237373835.roa
File:                     3230302e302e3138302e302f32342d3234203d3e203237373835.roa (raw, json)
Hash identifier:          szU937Rph2eya/s8M/VsUksia6UZKFJn9RzMqucTIlk=
Subject key identifier:   00:92:73:AF:DC:CE:F8:3A:93:18:B1:A2:62:46:EF:F9:27:5E:3B:B1
Certificate issuer:       /CN=5B27DC5DCA271F090A9487CAECE6F2248F5836AF
Certificate serial:       3CE90D74B38AD8EC3AD6BF8244078210668DB848
Authority key identifier: 5B:27:DC:5D:CA:27:1F:09:0A:94:87:CA:EC:E6:F2:24:8F:58:36:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/3230302e302e3138302e302f32342d3234203d3e203237373835.roa
Signing time:             Tue 04 Feb 2025 18:41:18 +0000
ROA not before:           Tue 04 Feb 2025 18:36:18 +0000
ROA not after:            Tue 03 Feb 2026 18:41:18 +0000
asID:                     27785
IP address blocks:        200.0.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e9:0d:74:b3:8a:d8:ec:3a:d6:bf:82:44:07:82:10:66:8d:b8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B27DC5DCA271F090A9487CAECE6F2248F5836AF
        Validity
            Not Before: Feb  4 18:36:18 2025 GMT
            Not After : Feb  3 18:41:18 2026 GMT
        Subject: CN=009273AFDCCEF83A9318B1A26246EFF9275E3BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2b:a7:40:b4:6d:4c:1e:63:f5:2c:65:84:2c:
                    b8:06:ca:3e:56:54:5e:a3:49:01:98:40:82:99:e1:
                    cf:4c:fb:a5:69:b4:e8:f5:f6:fc:fa:88:63:57:b3:
                    4b:6c:44:3e:2a:99:1e:3d:df:2e:65:3b:e6:e7:25:
                    42:bd:68:77:90:ff:41:1b:f9:25:c0:24:b8:7d:4b:
                    7e:e5:cc:cd:06:ea:c0:35:c1:00:9a:f7:0c:6c:63:
                    e2:f4:50:09:bf:40:eb:06:87:b3:51:9b:88:52:56:
                    44:70:7b:f3:cf:e0:c5:0a:d7:50:9a:03:88:10:01:
                    b6:36:91:6f:3e:31:cd:39:52:da:e9:69:57:f9:7a:
                    99:f9:f5:39:0e:89:83:c7:36:29:89:1d:22:91:48:
                    f6:5f:f1:23:1a:91:35:3e:aa:db:a4:d6:d1:18:cb:
                    48:c5:e4:1f:8c:be:ce:7d:88:f7:3e:ee:07:12:22:
                    2d:4c:ab:2a:d6:bf:d1:ce:a7:bd:0c:8d:99:41:da:
                    18:23:27:f4:2f:7a:e5:60:48:56:b5:af:f3:c9:dd:
                    66:f6:44:82:3a:a1:87:f5:e2:28:01:c5:35:69:48:
                    e5:47:b2:dd:d9:a8:61:4f:9e:f1:77:f5:52:b5:a5:
                    5a:b7:7c:4b:9c:88:20:2b:98:75:f5:a8:2f:64:fd:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:92:73:AF:DC:CE:F8:3A:93:18:B1:A2:62:46:EF:F9:27:5E:3B:B1
            X509v3 Authority Key Identifier:
                keyid:5B:27:DC:5D:CA:27:1F:09:0A:94:87:CA:EC:E6:F2:24:8F:58:36:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B27DC5DCA271F090A9487CAECE6F2248F5836AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82F02ECE911365B85CD616B18BD0D0D7FF9D2D4FA11B5DEDE5135051B1FCFD7/0/3230302e302e3138302e302f32342d3234203d3e203237373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:57:c2:7c:2b:f1:4c:84:5d:80:35:1f:20:55:59:ce:9c:
         56:ef:ba:91:bc:58:e2:23:80:71:21:0a:bd:8a:4f:0d:4c:e8:
         2d:4d:13:9b:43:5f:42:da:d7:59:41:b1:a6:58:35:67:19:f8:
         88:01:32:01:97:28:7d:61:82:94:d5:59:ee:f5:c1:9a:7a:10:
         76:fe:fb:13:bb:17:98:f6:13:90:86:9f:1a:a4:ea:bf:db:73:
         0a:c2:0c:8a:a2:e0:6a:ca:78:7c:a2:d3:08:bb:02:37:8a:5b:
         9c:2e:af:5e:64:af:7d:1f:0f:e9:7e:a8:27:63:4c:58:dc:2a:
         b0:aa:15:2e:cb:50:6a:7b:16:d4:53:8e:85:a9:12:72:47:b2:
         5f:09:58:83:f3:36:cf:26:5d:b7:f8:b9:ed:7f:65:49:0d:19:
         b2:37:12:b8:1a:f6:8a:c1:27:88:c6:1b:83:e1:47:ab:f5:b2:
         44:04:15:ab:9c:eb:2a:44:6c:82:25:cb:44:af:af:ad:08:25:
         45:0b:30:ec:ca:6e:96:d3:9f:54:e2:de:c9:e9:cb:b4:13:5e:
         72:c0:0f:0f:95:f3:bd:38:75:3c:2d:b4:84:e8:c8:9e:7a:76:
         cc:0d:b0:15:68:ad:e5:99:1e:b4:47:eb:3e:fa:7d:d2:43:68:
         db:3e:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:02:11 2025 by rpki-client