Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235312e302f32342d3234203d3e20323633323432.roa
File:                     3230302e31322e3235312e302f32342d3234203d3e20323633323432.roa (raw, json)
Hash identifier:          3q21nec1PjCYhB5eYShKySXwC/sbunRl+ic46j8ozlU=
Subject key identifier:   0B:05:C1:49:5D:CD:74:FC:F0:10:6E:1D:0A:A1:52:16:E0:4C:BA:39
Certificate issuer:       /CN=F84C64765934CC9A2CE97A1150E058489F19D535
Certificate serial:       48BCBDD522992CD14B01721D7F5D127DE99347A9
Authority key identifier: F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235312e302f32342d3234203d3e20323633323432.roa
Signing time:             Tue 04 Feb 2025 18:25:28 +0000
ROA not before:           Tue 04 Feb 2025 18:20:28 +0000
ROA not after:            Tue 03 Feb 2026 18:25:28 +0000
asID:                     263242
IP address blocks:        200.12.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bc:bd:d5:22:99:2c:d1:4b:01:72:1d:7f:5d:12:7d:e9:93:47:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F84C64765934CC9A2CE97A1150E058489F19D535
        Validity
            Not Before: Feb  4 18:20:28 2025 GMT
            Not After : Feb  3 18:25:28 2026 GMT
        Subject: CN=0B05C1495DCD74FCF0106E1D0AA15216E04CBA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:55:43:eb:0c:ca:b3:b3:da:bb:41:0c:4d:f5:
                    8a:5b:db:ef:b3:6b:b7:a8:a8:8d:49:9b:29:fa:4e:
                    bb:23:d2:01:c3:85:05:cb:32:57:fc:84:96:91:73:
                    96:d3:6a:69:8a:a6:f4:1c:73:07:2a:d7:77:a6:bb:
                    0b:76:e8:f2:08:79:5f:08:b8:8e:71:4c:86:4e:08:
                    59:5a:18:c7:89:75:51:92:cf:dd:54:62:f1:88:5c:
                    ea:af:23:17:6a:af:c2:cc:36:57:f0:e4:74:bb:0c:
                    ed:7b:43:c6:bf:aa:91:c5:cf:16:8e:91:69:98:c2:
                    dc:d1:86:86:07:c6:7a:eb:e4:63:d6:59:23:74:a8:
                    bf:c8:ee:20:a8:4a:a5:ad:0c:c9:b2:43:8b:91:70:
                    86:06:5a:5d:43:b5:88:55:1b:e4:db:0f:e8:0d:d3:
                    69:80:8f:a1:d8:49:c6:b8:96:3d:a3:2b:ce:66:d7:
                    86:8e:22:95:22:44:42:04:f9:99:ca:3e:c3:c0:67:
                    63:d2:89:36:fa:d9:d7:60:6d:56:08:d1:9a:66:ec:
                    fa:31:b0:4e:21:7c:8c:3f:e6:44:cb:65:d2:a6:db:
                    53:12:99:4c:c7:df:b6:6b:59:45:57:8e:8d:7c:61:
                    d5:b9:35:4d:75:8d:02:2a:20:0a:32:66:09:58:ac:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:05:C1:49:5D:CD:74:FC:F0:10:6E:1D:0A:A1:52:16:E0:4C:BA:39
            X509v3 Authority Key Identifier:
                keyid:F8:4C:64:76:59:34:CC:9A:2C:E9:7A:11:50:E0:58:48:9F:19:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/F84C64765934CC9A2CE97A1150E058489F19D535.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F84C64765934CC9A2CE97A1150E058489F19D535.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D233B807710758B592DE153A98CC3B3CE031BE2875C996CD8F7E46E3526AAF20/0/3230302e31322e3235312e302f32342d3234203d3e20323633323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:85:9f:6f:80:93:e0:dc:8d:9a:8f:74:8a:44:e5:9e:a6:76:
         ed:84:27:6b:e4:1b:43:dd:58:47:45:7a:e4:4c:46:da:bd:09:
         bd:00:f1:fd:2c:4f:4c:e6:ef:f9:2c:47:6b:a1:01:ac:2c:80:
         98:92:e5:c8:bd:d5:b7:98:fb:6e:bc:4b:40:9c:b8:b9:63:33:
         4b:86:e7:d3:e2:75:f7:5c:e1:28:1d:ec:63:e3:7e:59:4d:3c:
         59:b8:a0:67:ad:d9:ce:d5:9d:51:bd:d2:d8:1c:f7:96:2c:41:
         98:8f:1a:c7:e9:bb:8f:43:85:d6:d3:05:52:0f:8e:08:04:10:
         da:13:9b:6d:be:79:f6:a9:14:c0:72:b1:e5:3c:17:ca:5c:b8:
         c1:c0:bc:85:21:de:5d:4d:47:ed:4e:22:17:7b:fd:84:a4:ea:
         2e:53:d7:91:1a:34:6d:32:f4:1f:a1:f6:49:fb:68:b9:b1:e8:
         66:dd:b3:68:a2:e8:d9:94:7a:31:2c:b1:84:76:29:c8:6a:5f:
         1a:df:1f:7a:04:e9:8f:ff:2d:51:11:0c:c7:d4:75:88:05:70:
         f7:3d:31:72:0a:31:8a:e2:08:37:ea:75:3b:11:33:ff:54:cf:
         de:e5:b8:b4:6e:9c:41:d6:6f:e2:c1:7b:4d:80:b3:51:1d:ad:
         0b:e3:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:40 2025 by rpki-client