Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139332e302f32342d3234203d3e20323632313931.roa
File:                     3230302e332e3139332e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          95VWj7B4dOibwmxTXl4K6stON7zcDS8cXQK4/i/glVk=
Subject key identifier:   F7:81:DE:62:7E:9A:24:22:F1:44:AA:CF:E2:72:24:61:EB:69:2E:2C
Certificate issuer:       /CN=A4810347EA70678F1F1785A618883EAA51B29441
Certificate serial:       0EDF78C3345195ACA1BB7CED5BBA7698EA39AB80
Authority key identifier: A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139332e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:43:38 +0000
ROA not before:           Tue 04 Feb 2025 18:38:38 +0000
ROA not after:            Tue 03 Feb 2026 18:43:38 +0000
asID:                     262191
IP address blocks:        200.3.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:df:78:c3:34:51:95:ac:a1:bb:7c:ed:5b:ba:76:98:ea:39:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4810347EA70678F1F1785A618883EAA51B29441
        Validity
            Not Before: Feb  4 18:38:38 2025 GMT
            Not After : Feb  3 18:43:38 2026 GMT
        Subject: CN=F781DE627E9A2422F144AACFE2722461EB692E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:a1:7c:c3:8d:71:81:9a:49:8e:33:d4:b8:
                    47:cc:45:d5:fb:d6:f7:30:39:f1:de:27:24:dc:5d:
                    60:6f:e7:97:3b:fd:15:c6:3f:5f:03:f6:7d:7b:96:
                    27:4e:f9:e1:a5:26:be:46:f8:3f:bc:7a:88:b0:77:
                    fa:95:67:15:14:91:ac:b4:11:16:0e:3e:63:81:6b:
                    b2:ec:35:2a:40:6e:e3:13:8e:7c:f3:0c:a7:03:96:
                    97:c0:56:01:ec:a6:19:f9:57:87:6e:b2:b4:70:60:
                    d8:1e:1b:63:08:12:eb:7f:f2:00:c4:0b:ce:ff:23:
                    ec:ec:17:4c:fd:16:59:5a:d7:56:e9:01:80:0a:b0:
                    7e:35:8a:0e:d6:3e:b7:f9:68:cb:32:67:03:ff:be:
                    04:bc:1c:65:ba:e9:3f:85:5d:c8:bb:c7:dc:80:c5:
                    8f:b7:1d:19:9e:4a:61:89:97:6d:43:ad:20:4f:c5:
                    00:54:0d:06:46:e3:da:f5:f8:c4:a7:44:9c:c0:65:
                    af:63:4d:54:60:a1:a4:f0:0d:37:9a:97:40:47:9e:
                    e0:4f:b6:5b:f1:5d:aa:7b:4f:10:b5:68:2c:83:29:
                    d6:e8:70:26:b7:a3:95:78:d0:47:ee:82:c2:ed:81:
                    ca:02:92:f5:9f:2c:cf:6e:22:af:e6:df:dc:37:3a:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:DE:62:7E:9A:24:22:F1:44:AA:CF:E2:72:24:61:EB:69:2E:2C
            X509v3 Authority Key Identifier:
                keyid:A4:81:03:47:EA:70:67:8F:1F:17:85:A6:18:88:3E:AA:51:B2:94:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/A4810347EA70678F1F1785A618883EAA51B29441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A4810347EA70678F1F1785A618883EAA51B29441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CA9753FF02CB67A959BC63156716F1B69C8888F924F96145063BABDFE49FC20C/0/3230302e332e3139332e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:8e:54:73:53:b7:84:3f:0a:96:2b:af:be:b4:10:f4:11:
         67:78:5c:6d:15:43:99:6a:44:12:28:2c:ff:22:bb:aa:0b:48:
         45:bf:51:f1:e4:18:f7:85:6a:e3:86:69:1a:65:d3:13:98:14:
         a8:6c:03:c0:55:21:b4:5e:bf:14:a2:63:2a:0e:8b:a7:1a:e5:
         b6:39:c4:bb:98:87:5a:1d:a1:46:f0:e7:a8:cd:07:88:02:0c:
         e8:71:36:ca:51:9f:ce:51:17:77:50:ab:09:46:42:cc:c0:4b:
         c4:f3:c6:68:7d:e9:c5:57:c3:d2:42:fb:9c:3a:c9:12:93:fe:
         ea:fc:9a:cc:3c:65:99:00:b1:09:ca:1c:d9:bb:7c:c5:e9:a1:
         96:8d:15:17:e0:77:1c:f6:12:16:73:3a:14:16:8e:19:33:98:
         35:41:e8:a5:71:ff:a7:9b:e1:99:43:f7:4e:4c:e3:69:3d:98:
         23:49:ab:41:a5:e2:74:02:59:ca:48:20:a9:1a:c9:da:e2:28:
         86:f8:a0:64:45:99:a7:ee:dd:2e:79:75:64:a4:d1:5f:92:38:
         f7:1c:c5:d3:04:d9:a5:b7:69:58:10:69:5d:19:87:50:98:06:
         75:4b:df:cd:2b:cf:14:b5:f8:88:6d:56:cb:f6:2b:0b:3e:02:
         44:a6:36:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:19 2025 by rpki-client