Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132382e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3132382e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          MDEO4rxJJcIif6CpaL1UaNG5UbDCtG7GFE8sym0Bv6M=
Subject key identifier:   E7:86:17:C1:D9:BE:18:AC:26:A6:CA:0E:09:13:3A:FF:C1:7D:06:A3
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       0293C8389119C100CB563285CC32114A87C01CF0
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132382e302f32342d3234203d3e203133393939.roa
Signing time:             Fri 14 Mar 2025 20:55:00 +0000
ROA not before:           Fri 14 Mar 2025 20:50:00 +0000
ROA not after:            Fri 13 Mar 2026 20:55:00 +0000
asID:                     13999
IP address blocks:        200.77.128.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:93:c8:38:91:19:c1:00:cb:56:32:85:cc:32:11:4a:87:c0:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Mar 14 20:50:00 2025 GMT
            Not After : Mar 13 20:55:00 2026 GMT
        Subject: CN=E78617C1D9BE18AC26A6CA0E09133AFFC17D06A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:25:ad:42:f1:d8:31:6c:0c:1f:d2:10:0c:
                    44:a9:1a:e7:34:b5:99:90:d3:99:da:08:c8:3e:c8:
                    b9:b4:b5:3e:67:12:d9:b1:1e:fa:8f:24:9f:cc:72:
                    ea:67:b4:4f:3d:b1:83:49:6d:b2:ab:6c:f6:ad:57:
                    65:5f:de:6e:5b:f3:af:34:6d:25:60:1e:8c:93:d3:
                    94:6f:2b:d9:f9:45:4d:e8:0a:b3:09:ca:87:47:93:
                    db:6c:5f:96:a4:85:ef:52:ce:c0:6a:48:11:10:ab:
                    3e:52:c9:6b:6a:c7:38:63:2e:ae:8b:9c:56:e4:01:
                    15:fe:ff:e5:ff:a3:22:c6:44:34:c5:f1:69:7e:f8:
                    b3:c9:34:66:87:ef:c7:b4:9b:ff:53:b9:e4:3f:09:
                    36:05:96:74:2c:32:2b:d8:28:71:34:13:57:79:6b:
                    62:7e:79:8d:4a:c8:07:f2:ca:38:03:14:ae:a2:3d:
                    55:b7:24:a5:0d:66:f5:2a:7c:8b:a0:9e:2b:8e:74:
                    f5:3d:06:4d:2e:8c:ee:d7:43:d5:0f:6c:42:fd:25:
                    e5:fb:a5:ce:4b:c5:d3:a3:47:6d:0d:a7:39:1b:b1:
                    d7:0c:dd:e9:f3:41:cd:47:a4:df:19:b6:4d:4c:bb:
                    e0:be:5f:e4:db:fe:26:b4:39:31:01:2d:a6:ea:e8:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:86:17:C1:D9:BE:18:AC:26:A6:CA:0E:09:13:3A:FF:C1:7D:06:A3
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132382e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:cf:96:9a:82:a7:3b:62:19:d1:5e:f9:f7:2e:b0:21:ed:
         b1:b0:9c:bc:85:b6:8a:f2:dc:9e:e0:cb:08:d2:0c:1d:7e:67:
         63:21:0a:67:c0:9f:9e:47:b3:2e:8a:d8:15:27:48:40:9f:7a:
         5e:cf:40:bc:04:8c:eb:0b:46:e7:69:54:88:37:af:13:64:e1:
         1d:98:b8:30:ae:bb:4d:4e:b0:3b:a6:b6:55:ba:f6:46:79:c4:
         79:8a:0d:9f:62:db:fc:95:56:b5:d5:52:6e:e2:b4:f8:b7:47:
         48:73:0c:a7:f9:5d:5d:6c:e0:89:7f:07:86:9d:8d:f4:f5:af:
         23:1f:a3:40:03:1d:19:3d:06:ba:99:b9:56:96:cd:aa:9b:77:
         48:ac:98:18:0f:81:33:a2:7c:d4:34:c3:86:48:d7:6e:8f:9c:
         27:fc:66:79:18:45:70:aa:e9:ec:c1:8b:09:70:e3:16:73:b0:
         73:c0:72:30:1d:9b:0d:15:58:13:3d:70:0c:00:a7:0f:56:62:
         6f:ac:25:ee:24:50:cd:01:a1:53:bd:7a:a3:14:ef:37:3a:36:
         bf:38:42:ec:af:43:6a:02:4f:a1:b7:3d:09:12:71:97:9c:57:
         74:92:16:ca:c5:a2:c6:0c:9e:bb:17:c7:a3:45:e0:52:ee:63:
         e5:f8:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:01 2025 by rpki-client