Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132392e302f32342d3234203d3e203133393939.roa
File:                     3230302e37372e3132392e302f32342d3234203d3e203133393939.roa (raw, json)
Hash identifier:          EXwygZz1xIuUe/L+lP+pL1l9IlvSIOpzlw1+fyoV6I4=
Subject key identifier:   91:A6:CA:63:23:F6:0C:8E:26:F3:FE:F2:FE:D7:5D:91:E2:9E:14:CE
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       07C9770186F0A7C8DDF362A2A0EB2055164821D3
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132392e302f32342d3234203d3e203133393939.roa
Signing time:             Fri 14 Mar 2025 20:55:00 +0000
ROA not before:           Fri 14 Mar 2025 20:50:00 +0000
ROA not after:            Fri 13 Mar 2026 20:55:00 +0000
asID:                     13999
IP address blocks:        200.77.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c9:77:01:86:f0:a7:c8:dd:f3:62:a2:a0:eb:20:55:16:48:21:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Mar 14 20:50:00 2025 GMT
            Not After : Mar 13 20:55:00 2026 GMT
        Subject: CN=91A6CA6323F60C8E26F3FEF2FED75D91E29E14CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:db:2f:41:28:85:be:09:1e:76:4d:66:20:bd:
                    b2:e1:a9:36:28:52:4e:0e:13:ac:ff:33:f3:35:7e:
                    eb:52:bb:45:37:fb:99:66:05:90:c1:ee:9b:6f:e0:
                    6f:1b:e1:a2:57:aa:93:f3:3e:df:4e:4b:9a:76:26:
                    f9:3b:d7:a6:bf:5c:4a:09:58:7d:16:82:af:b7:e2:
                    a1:fb:62:bf:b3:1d:ef:03:8c:f3:40:a7:c4:cd:ef:
                    af:32:0b:63:94:22:97:db:2b:33:7a:26:53:6f:49:
                    71:02:e1:8e:52:e7:1d:23:df:96:85:65:6f:0f:40:
                    22:e6:22:a7:de:e8:ea:12:13:19:aa:5f:47:2f:07:
                    05:87:9d:8d:73:d0:59:a0:6a:57:87:a4:11:04:2d:
                    3b:5b:a6:78:00:51:0b:43:18:c9:17:b6:ee:82:aa:
                    9d:e9:e3:a9:db:e7:da:c1:70:9b:22:0d:a4:6c:d4:
                    c2:55:e7:e7:15:41:92:12:75:a1:77:c6:82:71:38:
                    a2:39:c8:04:f0:19:9b:3f:b1:d9:88:53:d4:9e:1d:
                    c9:90:57:cb:cd:c3:0d:0d:9f:5b:b4:35:f3:32:72:
                    62:f6:4d:f0:b1:04:0e:5c:99:ee:54:24:3a:ad:bd:
                    79:53:7c:2d:f7:00:38:59:29:73:34:08:79:4d:f9:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:CA:63:23:F6:0C:8E:26:F3:FE:F2:FE:D7:5D:91:E2:9E:14:CE
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3132392e302f32342d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:9d:6a:16:c1:ba:8e:25:a8:b4:8a:64:e0:4b:b8:10:84:d9:
         8b:53:22:bd:e9:58:b3:82:6f:ac:fb:ff:f6:e4:0a:7d:65:81:
         82:10:8a:4c:6a:b1:18:16:86:f7:62:f8:3f:56:5b:bc:91:79:
         f6:fb:cc:44:97:64:da:8c:2b:ad:30:20:ca:25:8f:07:60:3b:
         3f:97:1c:ee:22:5c:2b:39:29:db:8b:f1:24:80:d9:b3:83:c2:
         f4:d6:a5:7c:20:02:fd:ad:a0:2e:82:d5:9f:cd:93:f3:d7:8a:
         f4:37:60:a0:f2:03:1e:3e:f2:64:38:7d:eb:d1:cb:c2:d9:3f:
         b5:20:c0:d5:0c:99:ed:5a:ac:14:36:80:90:a0:7b:d9:b5:f4:
         42:7d:27:91:9e:c7:5d:98:b9:96:17:67:50:f1:b5:b6:68:ed:
         4d:6f:a7:b8:5b:9e:85:ba:ee:22:1a:0a:df:a0:43:00:c0:26:
         75:a5:8f:b3:c6:c4:2a:f5:da:4a:fd:50:79:03:75:5f:87:42:
         e5:b7:81:69:de:ec:2d:43:5a:de:fc:74:c3:50:bd:5f:15:c6:
         f9:35:fc:75:09:70:ef:2f:7d:8c:80:1e:ac:96:86:5c:c3:1a:
         3a:b6:ac:a5:2f:c2:05:52:59:49:7c:a7:af:fe:ea:7d:ac:d6:
         bc:f7:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:58 2025 by rpki-client