Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133312e302f32342d3234203d3e203532333633.roa
File:                     3230302e36312e3133312e302f32342d3234203d3e203532333633.roa (raw, json)
Hash identifier:          aO5LrH38bWDriXHb4tpZybzk8UGBIQiKZaQcBLSeYKw=
Subject key identifier:   C9:72:04:96:16:65:A1:D7:2D:B6:A8:2E:F0:06:45:6C:EC:9F:83:DF
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       453901158B69324049B963CCBE245EB9E3357B43
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133312e302f32342d3234203d3e203532333633.roa
Signing time:             Tue 04 Feb 2025 18:23:50 +0000
ROA not before:           Tue 04 Feb 2025 18:18:50 +0000
ROA not after:            Tue 03 Feb 2026 18:23:50 +0000
asID:                     52363
IP address blocks:        200.61.131.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:39:01:15:8b:69:32:40:49:b9:63:cc:be:24:5e:b9:e3:35:7b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:50 2025 GMT
            Not After : Feb  3 18:23:50 2026 GMT
        Subject: CN=C97204961665A1D72DB6A82EF006456CEC9F83DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:d8:67:eb:aa:18:76:19:ac:c7:b2:51:24:
                    ef:6b:f6:de:99:9f:f9:00:7a:11:2d:07:5b:0e:e7:
                    f8:6c:53:65:8c:e2:2f:f3:10:42:0a:00:87:6d:37:
                    44:03:55:46:0f:ed:00:e1:e1:5b:59:4d:46:43:33:
                    0f:28:42:8b:a5:5b:f1:c6:f7:e4:8e:1e:0a:0e:f8:
                    ec:79:08:c4:94:b0:6c:d1:a3:89:a2:8f:e5:2c:5d:
                    1c:5a:a4:db:f2:af:15:75:f7:34:3b:8b:2a:d3:18:
                    bb:6a:00:07:92:45:0e:6d:86:68:38:e6:d4:a1:dd:
                    b3:64:4b:8e:1d:22:90:5c:36:43:64:df:f9:2f:ba:
                    d6:52:f9:27:66:e2:27:87:30:22:e6:74:8b:14:35:
                    84:3e:ec:0c:a1:1f:45:36:91:80:6d:7e:dc:92:f3:
                    db:04:16:75:fa:66:c0:dc:e3:a7:dd:74:c1:e5:9e:
                    4e:ed:4d:10:05:5d:fb:7d:a6:43:ae:61:20:31:62:
                    f1:1e:c3:78:96:7f:4d:06:3f:10:58:ee:15:9c:a0:
                    66:d5:e4:6c:73:92:9b:d4:f8:05:2b:15:07:ac:f6:
                    55:34:c1:52:33:2a:98:10:b1:7d:a7:25:fe:f0:6a:
                    e3:2c:91:af:38:83:b8:bb:b3:c5:cd:0b:77:42:07:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:04:96:16:65:A1:D7:2D:B6:A8:2E:F0:06:45:6C:EC:9F:83:DF
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133312e302f32342d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:1c:0d:c2:39:ef:69:56:c5:9a:96:e2:bf:3a:4f:be:cf:
         de:a1:24:f0:2c:67:5e:2b:a7:54:98:62:27:c2:3e:6b:b4:8c:
         cf:6f:9e:30:85:34:d6:b9:15:7f:be:a7:49:42:d4:3e:f8:5f:
         5b:55:1f:c0:f5:28:9b:e0:d3:6f:be:90:5f:93:88:e9:ee:eb:
         a7:f2:cc:56:89:14:65:a5:3b:1e:58:90:8b:83:59:f9:26:9a:
         cb:c6:cd:b0:4f:7b:85:2c:64:ae:b2:a0:6b:7b:66:8d:16:d3:
         f3:2e:fe:a8:46:e1:9e:ac:ed:db:d6:d7:75:e1:ca:cd:9b:7f:
         7a:80:07:95:c4:f0:aa:ab:78:bc:19:16:c5:30:5d:6b:8d:68:
         31:b6:d5:75:93:71:3c:c7:45:f8:2f:9b:68:ce:69:af:75:37:
         26:af:a4:83:11:06:10:a3:a1:ec:38:83:9c:92:54:7a:99:cf:
         58:c5:ef:13:32:b9:c4:ac:98:7c:e5:b1:ab:cf:92:39:62:0a:
         e8:e9:8a:f4:2e:e7:4e:e0:d5:15:b8:03:77:22:ff:c2:9b:22:
         d8:3a:5e:fb:78:3e:01:db:ef:55:26:21:d2:a5:27:b7:93:0f:
         67:23:d7:45:e8:6b:60:2c:3a:36:97:83:0f:ec:fe:13:8c:cf:
         0c:a0:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:41 2025 by rpki-client