Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134302e302f32322d3234203d3e203133393939.roa
File:                     3230302e37372e3134302e302f32322d3234203d3e203133393939.roa (raw, json)
Hash identifier:          21zKekwQrHPFh6aA5VxwHMiF5VNcoMQWAgvjWauXBK4=
Subject key identifier:   D8:F6:4D:ED:E7:7E:FB:11:FF:3F:3F:2C:FC:25:E8:72:BC:83:AB:D2
Certificate issuer:       /CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
Certificate serial:       1FD2DBA4E8A3A7870CE509C0A931A5003936DB6B
Authority key identifier: E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134302e302f32322d3234203d3e203133393939.roa
Signing time:             Thu 16 Jan 2025 06:55:01 +0000
ROA not before:           Thu 16 Jan 2025 06:50:01 +0000
ROA not after:            Thu 15 Jan 2026 06:55:01 +0000
asID:                     13999
IP address blocks:        200.77.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d2:db:a4:e8:a3:a7:87:0c:e5:09:c0:a9:31:a5:00:39:36:db:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9771B2D309B05BB8C2F0EA36FF17501E242A19E
        Validity
            Not Before: Jan 16 06:50:01 2025 GMT
            Not After : Jan 15 06:55:01 2026 GMT
        Subject: CN=D8F64DEDE77EFB11FF3F3F2CFC25E872BC83ABD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:09:6f:7c:9f:b1:45:b3:04:67:1c:a1:8e:
                    10:2b:7a:3c:6b:11:0a:ad:d0:81:04:db:ad:ff:e5:
                    91:50:d1:e3:e3:a7:43:c1:c1:11:89:bc:34:e3:e9:
                    dc:44:67:e1:3e:12:d2:0d:04:44:d4:78:d8:ef:56:
                    25:d8:f0:dc:30:75:5d:1b:dc:bf:e9:82:34:3a:4a:
                    38:d2:3c:a4:16:f0:16:55:af:6b:7e:4d:f2:6c:b2:
                    2d:9a:80:4f:0b:f3:0f:88:6c:12:19:2a:59:87:65:
                    06:33:8f:bc:b5:91:4f:f1:ba:03:0e:06:62:7c:c2:
                    d8:de:83:ee:b6:a0:14:ff:f6:21:b3:bc:89:e8:85:
                    31:c6:fd:5d:4b:be:68:39:2d:83:96:76:ce:6c:0d:
                    a5:f9:ae:e3:b4:d1:1c:e5:d3:26:15:f5:b8:a7:c7:
                    9f:cd:2e:52:15:bc:1c:69:b0:45:ec:57:ff:fd:42:
                    a8:9c:d7:8d:0c:f3:55:46:da:47:04:66:f1:25:2f:
                    bc:a5:d0:5c:2c:1c:b7:94:86:c1:4d:36:5f:2c:bc:
                    a2:df:03:29:0c:d1:a8:0f:b0:57:1d:0f:e4:b4:aa:
                    64:70:e1:dd:d9:c6:bb:5f:8b:a4:97:de:cc:c3:44:
                    7c:8d:37:65:b0:2c:43:25:fb:ad:66:ea:37:6e:31:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F6:4D:ED:E7:7E:FB:11:FF:3F:3F:2C:FC:25:E8:72:BC:83:AB:D2
            X509v3 Authority Key Identifier:
                keyid:E9:77:1B:2D:30:9B:05:BB:8C:2F:0E:A3:6F:F1:75:01:E2:42:A1:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E9771B2D309B05BB8C2F0EA36FF17501E242A19E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0EB6D95615E36DCAD35164A699109792C3FCD3F861B8C7D1A60106AD33FFFE2/0/3230302e37372e3134302e302f32322d3234203d3e203133393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:8c:fe:c7:51:2f:15:30:bc:f1:7f:2d:87:32:ed:99:51:d6:
         88:56:17:40:b2:e9:bd:60:45:9e:ff:14:bd:40:a4:a1:8d:bc:
         58:1f:7e:af:fd:d1:cb:2b:e3:4f:b3:20:27:1b:e8:73:62:92:
         55:6e:72:54:5d:cd:61:b4:f3:9d:f0:aa:8e:ba:65:4e:c2:8a:
         ef:33:d1:e3:13:88:f6:6e:cd:e3:d1:9b:ab:aa:1a:96:d2:67:
         b5:f1:17:d3:4b:97:3e:c2:81:f4:28:0f:66:5a:70:fb:66:ba:
         dd:e8:13:d1:43:ef:6c:cf:88:23:f1:76:8d:d7:7d:f5:cd:33:
         33:67:82:0b:fb:88:30:3c:f8:a7:ab:e0:89:25:aa:b7:59:a8:
         7c:cf:58:e3:69:53:aa:8e:e1:d0:e2:24:fe:6d:23:83:09:c6:
         99:86:fb:c6:81:3e:86:24:d4:5b:c7:b2:8d:7e:00:88:86:32:
         45:4f:6d:80:12:08:d1:0e:aa:a1:b0:c0:5f:7d:01:7f:6a:90:
         16:06:5b:85:7e:6f:2c:18:2e:10:43:4b:b7:f6:c2:c7:cc:28:
         2b:38:ac:8c:d3:62:45:b0:81:63:c8:93:56:95:c3:b4:79:b6:
         3d:50:df:3e:9a:8d:fa:60:68:34:1e:52:83:4a:81:2e:93:2d:
         dd:e6:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:27:28 2025 by rpki-client