Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa
File:                     3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa (raw, json)
Hash identifier:          scGe6+jCGCgQV5PfJSjxDuUx89Ub7r79LRiTgh9W7EM=
Subject key identifier:   4B:83:12:25:E7:6A:96:53:B1:45:6A:77:EA:9E:E2:CC:6C:50:A5:C3
Certificate issuer:       /CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
Certificate serial:       1A0EDA5F668C732DFC3E4D6A857FE09F5D655E3D
Authority key identifier: F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa
Signing time:             Tue 04 Feb 2025 20:04:27 +0000
ROA not before:           Tue 04 Feb 2025 19:59:27 +0000
ROA not after:            Tue 03 Feb 2026 20:04:27 +0000
asID:                     273080
IP address blocks:        201.222.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0e:da:5f:66:8c:73:2d:fc:3e:4d:6a:85:7f:e0:9f:5d:65:5e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234
        Validity
            Not Before: Feb  4 19:59:27 2025 GMT
            Not After : Feb  3 20:04:27 2026 GMT
        Subject: CN=4B831225E76A9653B1456A77EA9EE2CC6C50A5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:8f:1a:73:04:d1:54:87:98:36:50:2e:c6:
                    2a:a6:9f:a1:3c:d4:68:38:a7:7d:fd:16:47:bf:45:
                    ce:50:f3:e8:87:be:d9:f2:37:ef:51:9e:17:4f:a8:
                    59:fd:f6:e7:95:69:1a:2b:81:07:b9:17:4c:4d:03:
                    c3:56:31:69:2e:45:d4:85:14:51:aa:bf:91:29:0d:
                    4d:ca:ef:5e:30:a6:f7:ae:20:f5:8b:44:cd:c4:5e:
                    3c:ea:19:12:d0:fe:cf:cf:c1:b0:23:b8:39:73:39:
                    c1:c0:40:a4:41:be:ab:ca:95:51:b9:68:b3:d4:a3:
                    9b:37:27:9a:37:7c:af:3d:b3:a9:ba:cc:43:4b:71:
                    5b:95:bb:80:dd:e5:76:29:01:c6:b4:4d:46:4d:32:
                    18:d1:c2:c9:93:b1:ed:11:12:45:36:d2:b1:a4:fa:
                    84:68:2e:81:31:5e:e7:f5:75:3e:f1:4f:d2:90:b0:
                    95:14:fe:61:2c:3e:ec:68:81:44:1d:3c:7b:b1:7e:
                    e7:3b:1f:e0:88:ee:b6:ed:ba:0d:d6:d5:76:40:a5:
                    fb:17:d7:50:17:e8:b8:e1:a2:f1:3b:28:a5:db:b4:
                    a8:b6:71:5b:a3:ca:02:79:bc:e4:bb:58:3b:cc:10:
                    87:0b:0c:f9:d2:c8:38:8b:dc:86:ff:00:f1:cc:8f:
                    9f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:83:12:25:E7:6A:96:53:B1:45:6A:77:EA:9E:E2:CC:6C:50:A5:C3
            X509v3 Authority Key Identifier:
                keyid:F6:8F:BD:9C:74:CC:60:A7:AB:5E:2F:EB:7F:22:24:47:D1:D1:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F68FBD9C74CC60A7AB5E2FEB7F222447D1D1F234.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8D6F35AF303AB4E57B8441B217295BE92CF56ADA4F5F96D96A22B53693E1E5A/0/3230312e3232322e34302e302f32342d3234203d3e20323733303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:29:b6:68:0d:42:52:c9:92:0d:a3:9b:aa:c7:80:d6:90:1f:
         78:50:5c:f1:38:ad:28:f0:8f:c8:64:a0:2a:f3:13:fe:10:9b:
         b1:3b:81:50:13:5a:8a:eb:c9:c1:bd:43:c0:64:37:b0:6f:c3:
         eb:c6:a2:20:d4:af:09:9a:d9:65:33:25:01:5f:55:39:f9:d5:
         ab:df:1a:f7:08:db:af:1a:bb:35:32:9d:a4:37:e7:30:0e:aa:
         88:b8:fb:4a:85:1c:47:e9:ef:60:f4:30:b0:c8:76:d2:ea:6a:
         6d:24:4f:8b:c1:34:17:de:cf:51:e7:22:61:b6:0b:7e:4c:25:
         6f:7d:0f:9b:d7:23:be:a6:52:9c:f9:bd:d3:1a:46:ac:0a:0e:
         31:9a:41:d4:60:ba:59:03:e7:0d:e6:7a:a2:79:7f:e0:20:72:
         f6:d2:dd:1c:70:d0:ac:86:1f:ee:18:0e:fe:57:c0:44:62:61:
         80:d7:24:62:cb:5b:51:67:f1:5c:b3:40:c7:f2:1c:0b:88:e9:
         99:ab:e8:0a:6f:3c:2b:4a:41:d9:c5:cd:7b:ff:89:7c:f6:59:
         19:31:4c:ff:a8:9d:bd:14:3a:fd:44:6c:c2:56:9b:26:42:c3:
         44:32:df:43:0d:cc:3c:ce:38:a4:c9:5b:14:bd:76:77:ee:31:
         9d:97:bc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:40 2025 by rpki-client